last executing test programs: 4m41.915939279s ago: executing program 32 (id=1207): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2734], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x82) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x3}}, 0x20) ppoll(&(0x7f00000016c0)=[{r6}], 0x1, &(0x7f0000001700)={0x0, 0x989680}, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000852) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) 2m28.103376668s ago: executing program 33 (id=2535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d0110"], 0x1d) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/40, 0x28}, {0x0}], 0x2) 1m50.615448973s ago: executing program 34 (id=3049): mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) (async) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x109) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10) fcntl$setstatus(r3, 0x4, 0x0) r4 = dup(r3) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x89100000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r9, &(0x7f0000000440)=[{&(0x7f0000000200)=""/219, 0xdb}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2341a840, 0x6, 0x40}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2341a840, 0x6, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0xb44c000000004, {0x8, 0x1, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff7, 0x8, 0x3, 0x39, 0xfffffffe, 0x7, 0x1, 0xa000, 0x4, r7, r8, 0x7, 0x4000005}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x100) close(0x3) chdir(&(0x7f0000000000)='./file0/file0\x00') syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2f8}, &(0x7f0000000140), &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) semget$private(0x0, 0x207, 0x200) (async) r11 = semget$private(0x0, 0x207, 0x200) semop(r11, &(0x7f0000000100)=[{0x3, 0x4, 0x800}, {0x3, 0xf, 0x1800}, {0x4, 0x0, 0x1000}], 0x3) (async) semop(r11, &(0x7f0000000100)=[{0x3, 0x4, 0x800}, {0x3, 0xf, 0x1800}, {0x4, 0x0, 0x1000}], 0x3) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1m22.073441398s ago: executing program 3 (id=3434): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 1m22.003684576s ago: executing program 3 (id=3435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48d, 0x0, 0x8}]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m22.003231035s ago: executing program 3 (id=3436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400ff030400000000000000fddbe5bd1ed7cd2a"], 0x14}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.stat\x00', 0x275a, 0x0) r2 = syz_clone(0x48100080, &(0x7f0000000200)="a2960c5480af56683ccd5f6463851cce5b484ff1330eac231422ebfa5392c4520bfe02", 0x23, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="492d16b2072fc0fe162d1b6ae5f00233cc71a29b475fed2a8e9873f05c56f700fcabeb1bd50f0f260268b5c436fe63a4054476a499287f53d2c2848d839b6ac94075fab5e1dea0fb5ea03c6f6392b563189c6deccff5d060efb5de87aa51f1209ae7445d29eb285f672db7cba6ad892906c13b63684beb236dce7dd5386020bf24174dbb8895b2f176de03520932e2a351b593faf301ac71accff0cc0e52294c2e96368f5cdb728238cd21fab00e07355ae6a73165ba51334382014067") (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000003c0)) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xe, r2}) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x7) (async) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x4000d6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) r6 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x34565348, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000140), 0x4) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @local, @local}}}}, 0x0) (async) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000380)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 1m21.663643015s ago: executing program 3 (id=3437): r0 = socket(0x1, 0x803, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x5) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xffffffffffffffe7) syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0xa0044d07, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0x8, 0x8, 0x5}, {0x5, 0x5, 0x3}]}, 0x10) r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r5, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000ac0)=""/116, 0xffffffffffffff8b, 0x0, 0x2, 0x2}}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003240)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xf19}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket$unix(0x1, 0x5, 0x0) sendfile(r8, r4, 0x0, 0xbebd) ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) socket$netlink(0x10, 0x3, 0x2) 1m21.390000681s ago: executing program 3 (id=3443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x40141}, 0x8000) accept$ax25(r2, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x5}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ext4\x00', 0x240002, 0x0) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000180)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000580)={r5}) setxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x40141}, 0x8000) (async) accept$ax25(r2, 0x0, 0x0) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x5}, 0x8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ext4\x00', 0x240002, 0x0) (async) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000180)}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000580)={r5}) (async) setxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x1) (async) 1m21.259080544s ago: executing program 35 (id=3443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x40141}, 0x8000) accept$ax25(r2, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x5}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ext4\x00', 0x240002, 0x0) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000180)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000580)={r5}) setxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x40141}, 0x8000) (async) accept$ax25(r2, 0x0, 0x0) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x5}, 0x8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ext4\x00', 0x240002, 0x0) (async) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000180)}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000580)={r5}) (async) setxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x1) (async) 1m17.249329714s ago: executing program 6 (id=3495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000340)='veth1_virt_wifi\x00', 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000004c0)={0x28, 0x4, r6, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000300)={0x18, r4}) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000300000000000200000a20000000000a010400000000000000000a0000030900010073797a3100000000140000001100010000000000000000000100000a7755a7ea8e2d0bde5decc149eb3ea7f92aac82ccc78f45438364474b4deea2943bfa27a695f691753e651569ec0b4a5b37374dd4aff4b00e50620480ae4af14f8f87e4878bdddf3eef570bd09f02fc04fd73fd3ecdb31cd28dfea7190902211612b4309c2adae452b304e081631ea04cb45c0c37291ae465d791c44314ec60c219861f1bc4a1125e0a0c4f47d0af0f1b338a440b1e4b8f79"], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005000010000000000000000000a59976d033a21455400000079b404d1008a9c7cb114688214880e5be1283ca180705205057121a98b0856b61758a0eb8126278bf27d0fc228902482dba24364eab5eb3191940f165bf99f762f19ab68cc159bb073be2ff421f53abdee37ed20e28bbee54442ffca9d336d3c130d13a4d8dffbf28361f1ae8bb11dc160b7d74639eaca1b1b896a3549b2bedcdefc89415a4aff1ff9099b055a94788c4cd2c993e3a261"], 0x1c}}, 0x0) r8 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000001440)=0x81) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000080)={0x7, 0x0, 0x1, {0x9, @sliced={0x3, [0x3, 0x47, 0x8, 0xc800, 0x5, 0x2, 0x7, 0xffff, 0x7ff, 0x8000, 0x9, 0xa, 0x1b0, 0x0, 0x408, 0x2, 0x7, 0x8000, 0x8, 0x2, 0x2, 0x2, 0x4, 0x6, 0x6, 0x6, 0x6, 0x0, 0xd89, 0xfff, 0x80, 0xeb4, 0x40, 0x100, 0xa, 0xcf69, 0xee, 0x2, 0x3, 0x716, 0x9, 0x0, 0x100, 0xfdee, 0x5, 0x6, 0x0, 0x1ff], 0x8a}}, 0x81e2}) 1m17.18326973s ago: executing program 6 (id=3497): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@bridge_getvlan={0x17, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 1m17.133244828s ago: executing program 6 (id=3499): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x6, &(0x7f0000000180)={0x0, 0x1bf58, 0x2000, 0x5, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x93743, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000300)={0x3, 0x1}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x7800, 0x240a26013c7144cf, 0xd7, 0xffffffff, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @rand_addr=0x64010100}}}}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf2506000000340006800600010002000000060005004e200000080006001400000006000500000a000008000300ac1e00010800060000000000050005000b00000004000680"], 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESHEX=r4, @ANYRES32=r3, @ANYBLOB="cd59d65c2d53cd6c1690e5a8097f78936949c079cbd7c62da8b858db4d16170eb1c447e2c912ad4a724a8990e92a746c0575195d68a0c1251cfb81c4fc455627992a0d99f0ddf40505a906480ac544afd4e7932ffac823c98d49ace3fda35a289f9198267de8dc52e386483f13", @ANYRESHEX=r6], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010003b15000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="4848060012800a000100767863616e000000040002800a000200aaaaaaaaaabb00005842264d54c83ca3ab1b83870089ba0239c1586dc51e3935373f06f9afafb94974eceff03093ed9cd61d69ed1a2c24df0cc93fea38d532fff428d0d043b7ad5e1d81a6de285d83ff34febe749361c288b4599ac879841783d63e9487bf89cf4a00e7512d5149b561665129cdd97132"], 0x40}}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r9) gettid() sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0xe939a35d60f35b5) socket$inet_tcp(0x2, 0x1, 0x0) 1m17.072200714s ago: executing program 6 (id=3501): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYRES8]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x2, 0x3a8, 0x5, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r2, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0xfffffffe, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) write$bt_hci(r2, &(0x7f0000000200)=ANY=[], 0x6) ftruncate(r0, 0xc17a) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf, 0x1f, 0x2, 0x8000000000000001}, 0xf) 1m17.000077651s ago: executing program 6 (id=3503): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x198) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000032400048020000180080001006c6f670014000280080006400000003b070002402efa00000900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) connect$ax25(r2, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast]}, 0x48) setns(r1, 0x10000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r6, @ANYBLOB="14001d800a0000800600050012000000be9d37e9cb6e62ac4a9c2a04000400"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0], 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 1m16.823837111s ago: executing program 6 (id=3505): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x2}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) 1m16.7863463s ago: executing program 36 (id=3505): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x2}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) 1m12.793037799s ago: executing program 2 (id=3551): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x810) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x10000, 0x116000, 0x8}) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, 0x0}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000440)={0x84, "43e10da10c6ad26eade0fe30a8ad15f24e4e122c33c6ce1d605f6bf52bf7fd07afc2176566a40fd16d2520c65391ff34de43a312b8a494b19eb5be707594e88c8023f1ff807850b82b7c06dec9fa41ce482cc8b6b12cae35156a9c3e1e771576de1b8f64865904acd4ebc2ca2b1576ce2988480bed6c9f37568b91fe2aa0d4ede53730d1"}) 1m11.672526315s ago: executing program 2 (id=3554): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = eventfd2(0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r2}) mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1024020, &(0x7f00000000c0)={[{@name={'name', 0x3d, 'nofavordynmods'}}]}) 1m11.612430235s ago: executing program 2 (id=3557): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000003f00000000100000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x44}}, 0x0) 1m11.562041014s ago: executing program 2 (id=3562): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x4000, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="00000008007700008e86e92a9bce6c270000", @ANYBLOB="a6793238a8996788342c967db3da5e9c7dec5c0c3c58181647ad5bdd1de469fef979d4bd3e33dd56b2641216d424c94d7e3c0b72eba1a97b7805973b2c14d40146023955bc78a93013b41aaf2fff3bca5f9bc2451a8f1464bfdbc25a4a267ee5b3ba2b53b459d34c5b0009394cb06742a37fc2683aa6702fc096fc158675783e2358373225d09cab02effdddf9bf18c7ca72a4c290f00bcfe5b70ab87be6fb91ea7139122947370cf9b992a3c2b3942158524fb969b2dde1de4fd3d00445b55a6a963e0e4946f7746f9fb6a3683a3e", @ANYRES32=r1, @ANYRES8=r3], 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x50000032, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x842, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x2008802, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbdc548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000100)=0x7ffd, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 1m11.311774725s ago: executing program 2 (id=3565): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x7000004, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) (rerun: 32) socket$kcm(0x29, 0x2, 0x0) (async) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m10.96359158s ago: executing program 2 (id=3569): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd25, 0xffffffff, {0xa, 0x0, 0x20, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7f08}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000180)) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) 1m10.91398769s ago: executing program 37 (id=3569): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd25, 0xffffffff, {0xa, 0x0, 0x20, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7f08}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000180)) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) 1m8.616107231s ago: executing program 7 (id=3593): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x8040, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x6728) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r3, &(0x7f0000000800)="5b8529", 0x3, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x36}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f0000001f80)="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", 0xfda}], 0x3}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x36}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f0000001f80)="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", 0xfda}], 0x3}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x6, 0x2, 0x1, 0xd0, 0xffffffffffffffee}]}, &(0x7f0000000040)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) memfd_create(&(0x7f00000001c0)='$\'}/\'.@@)}]#^}!\n\x00', 0x0) 1m8.511342817s ago: executing program 7 (id=3595): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x2}) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 1m8.311657641s ago: executing program 7 (id=3598): r0 = epoll_create(0x4) (async) r1 = socket(0xa, 0x3, 0x7) shutdown(r1, 0x0) shutdown(r1, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x30000010}) 1m8.237761786s ago: executing program 7 (id=3600): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0xe18, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x18, &(0x7f0000001880)=[{&(0x7f0000000200)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7", 0x2a}], 0x1}, 0x20008060) sendmsg$nl_generic(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000036007bc32dbd7000fddbdf2503"], 0x14}}, 0x4000) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f00000000c0), 0x31, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000080)={0x10001, 0x0, 0x3012, 0xd9, 0x4, 0x1c641fd1}) 1m8.23198551s ago: executing program 7 (id=3602): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="c30000009e000000620a00ff000000007100080400000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000000000950000ed00000200"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a3000000000050005000200000014000780050015000200000008001240000a0000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x86, 0x3, 0x5, 0x1635}}, 0x120) (async) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000780)={0x7, 0x0, [{0x4, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x40000000, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x4, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0xb, 0xe5f, 0x0, 0x7, 0x200, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x1, 0x4, 0x6, 0x4, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x9, 0x3ff, 0x1, 0x3}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc1485544, &(0x7f00000003c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m7.903457191s ago: executing program 7 (id=3606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c000180060001000000000008000340000000029c"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000000701020000000000000000030000034400078008000240000000000800014000000e4c08000140fffffff8080002400000000108000240000000070800014000000004080001400035fe030800014000000005"], 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x24000040) 1m7.826048277s ago: executing program 38 (id=3606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c000180060001000000000008000340000000029c"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000000701020000000000000000030000034400078008000240000000000800014000000e4c08000140fffffff8080002400000000108000240000000070800014000000004080001400035fe030800014000000005"], 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x24000040) 53.523193585s ago: executing program 0 (id=3738): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x5, 0x4, 0x48000000, 0x0, 0xff, 0xffffffff, 0x7, 0xa, 0x7f, 0x1, 0x9, 0x8000000000000001, 0x0, 0x7, 0x2], 0x2, 0x100}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@rand_addr=0x64010100, 0x0, 0x0, 0x40, 0x0, [{}, {@empty}, {@local}, {@loopback}]}}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_TDX_GET_CPUID(r0, 0xc008aeba, &(0x7f0000000200)={0x5, 0x0, &(0x7f00000001c0)={0x1, 0x0, [{0x2, 0x9, 0x9, 0x7, 0x8c66, 0x4d9d, 0x4c0c}]}}) (async, rerun: 32) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x6, 0x0, 0xae5, 0x10, 0x84e, 0x4}, 0x1c) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000002c0)={0x6, 0x0, 0x9, 0x8df, 0x13, "682d37bded780d55"}) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_bridge\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x17c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x3, 0x4, 0x101}, {0x3}, {0x5, 0x6, 0x3, 0x4}, {0x3, 0x7, 0x6, 0x4}, {0x101, 0x2e, 0x9, 0x10001}, {0xffff, 0x5}, {0x3, 0x0, 0x1, 0x51b}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff800}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000680)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000640)={0x79cf, 0x6, 0x1}}) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000006c0)="d0c204e2580d259c4ea6a364b3ca7e7587d8c4e18dce8ff534f3daef23c730c929dd0cd57da349c228f6be0d5a622e4783afdee96838ab607600d43598ce28ea88049574a1fab5429d945767fc5741924bac9b643ed95fed374947b4371855", 0x5f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) fcntl$addseals(r5, 0x409, 0x5) (async) mkdir(&(0x7f0000000780)='./file0\x00', 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@delchain={0xc0, 0x65, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x99a0fac815f1d2d, 0xd}, {0x7, 0xb}, {0xffe0, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x90, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}]}, @TCA_BASIC_EMATCHES={0x68, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xe112}, {0x2000000, 0x6, 0x3, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x7}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x7}, {0x3, 0x3, 0x1, "21e36a"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5ff6, 0x7, 0x81}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xf}}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000814}, 0x40) (async) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000940)={[0xffff1000, 0x25000, 0x8000000, 0x4], 0x29ce, 0x8, 0x7}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@ifindex=r3, 0x31, 0x0, 0x3, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000b00)) (async, rerun: 32) ioctl$KDDISABIO(r0, 0x4b37) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000b80)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000c40)={0x9b0000, 0x101, 0x80, r7, 0x0, &(0x7f0000000c00)={0x9b090f, 0xa203, '\x00', @p_u8=&(0x7f0000000bc0)}}) (async, rerun: 64) read(r0, &(0x7f0000000c80)=""/55, 0x37) (async, rerun: 64) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000cc0)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d00)={'veth1\x00'}) 53.522777383s ago: executing program 0 (id=3739): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) getsockopt$ax25_int(r0, 0x101, 0x145c4fb23569acb9, &(0x7f00000001c0), &(0x7f0000000100)=0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x2, 0x259}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000240)=[0x10000, 0x7], 0x2) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 53.303594698s ago: executing program 0 (id=3740): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000004c0), 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000841}, 0x4008000) 53.213586843s ago: executing program 0 (id=3741): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1}) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x10001}, 0x0, 0x2, 0x8000}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) (async) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000940)='\r', 0x1}], 0x1) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_getaddr={0x58, 0x16, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x82, 0xfd}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8}]}, 0x58}}, 0x0) 53.133684098s ago: executing program 0 (id=3743): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfffffffd, 0x0, 0x0, 0x9aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0xdabe, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 53.133274966s ago: executing program 0 (id=3744): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f00000030c0)=@v2={0x5, 0x1, 0x8, 0x1000}, 0x9, 0x1) (async) lsetxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f00000030c0)=@v2={0x5, 0x1, 0x8, 0x1000}, 0x9, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8858}, 0x80) r9 = fsmount(r1, 0x0, 0x8d) openat$cgroup(r9, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8}) (async) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8}) pipe2$9p(&(0x7f0000000140), 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0) dup(r11) (async) r13 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xdd218) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xdd218) mq_open(&(0x7f0000000180)=',\xa0&^]-\x00', 0x43, 0x138, 0x0) 44.393480342s ago: executing program 9 (id=3837): r0 = socket(0x200000100000011, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000900)={0x100, 0x1, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x3c, 0x0, 0x0, @pid}, @nested={0xe5, 0xaa, 0x0, 0x1, [@generic="fd50a7e2e0101332f299034e79c9173359709d804405e2221a598fe0db2732d85a733cdbb8cdc007bbec9fe813662b030c79788691679587114352cf68a1660ba64c982dc6eb28c2e444edfd807365c8381dcf3f8ed1973c2a866ad6ec0b0cf0daa4974ae5fd580d63c61dae296e1a793f7d9988bdb4abdde487379523b29648620d6cf314ab0db95c12429547c083370980c72f393dea9aca38f129b35638236155d0bf6d9bfe05f6706811318a4c3f", @generic="c90fd532560c569da3846d5018", @nested={0x24, 0x63, 0x0, 0x1, [@typed={0x4, 0xf2}, @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0x135, 0x0, 0x0, @ipv6=@mcast1}]}]}]}, 0x100}], 0x2}, 0x0) (async) r3 = socket(0x8, 0x3, 0xff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@verity_on}, {@nfs_export_on}]}) (async) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) (async) recvmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000080)='syzkaller\x00', 0x7}, 0x94) 44.392468672s ago: executing program 9 (id=3838): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0xb, 0x6, &(0x7f0000000000)={0x1a, "66d3c180c47af5b022f10677f897b8c198b0fb0f8fe8c02dcd14cfd1f2c26924eb"}}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) 44.322965801s ago: executing program 9 (id=3839): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f00005fc000/0x3000)=nil, 0x3000, 0x3) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4], 0x38) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 44.262164719s ago: executing program 9 (id=3840): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0xfffffffffffffffc, 0xfff}) write$binfmt_misc(r0, &(0x7f0000000240)='@', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='stack\x00') prlimit64(r3, 0x0, &(0x7f0000000000)={0x8001, 0x80000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x30}}, 0x8000) fchdir(r1) 44.261936716s ago: executing program 9 (id=3841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a300000000008000440000000000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 44.090416846s ago: executing program 9 (id=3842): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000280)={{0x0, 0x9, 0x10, 0x80000001, 0x80000001, 0x5, 0x4, 0x1148102b, 0x8, 0x9, 0x5, 0x796, 0xa, 0xf, 0x98}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001280)={{r1, 0x10000, 0x17, 0x1, 0x89f, 0x5, 0x8, 0x10001, 0x9, 0x9, 0x5, 0x1, 0x4, 0xe33c, 0x4}}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) 44.058735746s ago: executing program 39 (id=3842): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000280)={{0x0, 0x9, 0x10, 0x80000001, 0x80000001, 0x5, 0x4, 0x1148102b, 0x8, 0x9, 0x5, 0x796, 0xa, 0xf, 0x98}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001280)={{r1, 0x10000, 0x17, 0x1, 0x89f, 0x5, 0x8, 0x10001, 0x9, 0x9, 0x5, 0x1, 0x4, 0xe33c, 0x4}}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) 37.992494s ago: executing program 40 (id=3744): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f00000030c0)=@v2={0x5, 0x1, 0x8, 0x1000}, 0x9, 0x1) (async) lsetxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f00000030c0)=@v2={0x5, 0x1, 0x8, 0x1000}, 0x9, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8858}, 0x80) r9 = fsmount(r1, 0x0, 0x8d) openat$cgroup(r9, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8}) (async) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8}) pipe2$9p(&(0x7f0000000140), 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0) dup(r11) (async) r13 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xdd218) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xdd218) mq_open(&(0x7f0000000180)=',\xa0&^]-\x00', 0x43, 0x138, 0x0) 20.647108454s ago: executing program 1 (id=4181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0xc87a, 0xfffffffc, {{0x10, 0x4, 0x1, 0x1, 0x40, 0x64, 0x0, 0x5e, 0x0, 0x0, @private=0xa010101, @empty, {[@timestamp_prespec={0x44, 0x14, 0x30, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x6}, {@loopback, 0x7}]}, @generic={0x7, 0x9, "af7931137aaceb"}, @generic={0x89, 0x9, "cca19d4801db84"}, @generic={0x94, 0x4, "8a4a"}]}}}}}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) (async) close(r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xae, 0x0, r2, 0x6, '\x00', r3, r4, 0x4, 0x3, 0x3}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xae, 0x0, r2, 0x6, '\x00', r3, r4, 0x4, 0x3, 0x3}, 0x50) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='-*{:\x00', &(0x7f0000000040)='+\x00', 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="475e120374beb565ce38f5c0a25b109d53aa9394889229895ad5681f14a932a69af650dde4c25bc9ba89c9aee89d8c12c846cb610aab4198453c6254a84a63de7d16c14aa63d9e2a725f6e6b90f67f4ef4fc71347f861ad7da2acd2ddedaedddda7e9816412a15320d33744abc232d062a13208306981a9d9e23b5b222a8471c", 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$802154_raw(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="475e120374beb565ce38f5c0a25b109d53aa9394889229895ad5681f14a932a69af650dde4c25bc9ba89c9aee89d8c12c846cb610aab4198453c6254a84a63de7d16c14aa63d9e2a725f6e6b90f67f4ef4fc71347f861ad7da2acd2ddedaedddda7e9816412a15320d33744abc232d062a13208306981a9d9e23b5b222a8471c", 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000480)="ed6f5c45ba71feb568202046ba6bc367", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x9a) 20.433238705s ago: executing program 1 (id=4184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) fanotify_init(0xf00, 0x0) (async) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x8040, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) close(r2) (async) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) (async) 20.33642537s ago: executing program 1 (id=4186): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x50) 20.261742794s ago: executing program 1 (id=4189): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, 0x6, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x7a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000080)={r5, r5, 0x0, 0x5, 0x2}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x400) 19.001279065s ago: executing program 1 (id=4206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0xfffffff9, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r1 = io_uring_setup(0x2857, &(0x7f0000000340)={0x0, 0xeace, 0x100, 0x1, 0x3bd}) io_uring_enter(r1, 0x3ae7, 0x8f2d, 0x1, &(0x7f00000003c0)={[0x6]}, 0x8) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xe, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x4, 0xff, 0x5, 0x7fff}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='qnx6\x00', 0x20000a, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x1, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @none, 0x3}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) 18.861980348s ago: executing program 1 (id=4210): landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) 4.732367659s ago: executing program 8 (id=4380): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x280b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x1, r3, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) fcntl$setlease(r0, 0x400, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0xffffff51, 0x2c, 0xd27, 0x30b929, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x0, 0xfff1}, {0xa, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x170}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) fcntl$getflags(r0, 0x401) r7 = fsmount(r0, 0x0, 0x8a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4008850}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r7], 0x68}, 0x1, 0x0, 0x0, 0x4040810}, 0x40) (async) r10 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x282002, 0x4) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000000c0)={r13, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f00000001c0)=0x9c) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000040)={r13}, 0xc) 4.445969452s ago: executing program 8 (id=4386): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/ip6_flowlabel\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x2, {0x1000, 0x1, "acec1fd39d036cbaa11b6cf64a7b17b70b9b461db37be270f205a443c5b000a82b87dc656c8f2474d2ff1fabe445c9e0e050852fdb3107cd9c3e6088300415fa327f9378fc2705e5f57f010717554853d982b7f1c19297f0909faabf6468367ccafbfd2807a6b6cae75ad94da3ea8c79fe21313f28580a338d9b84174f742c9e9b44eaf70f380bf889da75c896613dcf39495e60a9ccc5890341777304f2fd7cbb07c47c3f3206b01aa65efddd1194afd59d9507b7a05a097ab977ddaf609938e80cd9c0eab924c07d6dc0a3c79a9d61794b15f5967c4bedb0f8d5c2b1df6dde2c92c298572122e437200b2fd2fea4b905f59da865ad5b5ab300b15fa7397c95", 0xfc, 0x8, 0x4, 0x95, 0x80, 0xaa, 0xef}, r4}}, 0x128) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r3) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000300)={0x4, 0x0, [{0x4, 0xa4c258bd0ec13d8d, 0x0, 0x0, @msi={0xf7e, 0x2, 0xf974}}, {0xff, 0x3, 0x0, 0x0, @msi={0x7ff, 0xfffffffa, 0xffffffff, 0x9}}, {0xd, 0x3, 0x0, 0x0, @adapter={0x7, 0xfff, 0x7, 0x85, 0x8f95}}, {0x7, 0x0, 0x1, 0x0, @sint={0x4, 0xcf46}}]}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x811) ioctl$CDROMSETSPINDOWN(r3, 0x531e, &(0x7f0000000540)=0x9) connect$tipc(0xffffffffffffffff, &(0x7f0000000580)=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x4}}, 0x10) readv(r1, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/53, 0x35}, {&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/125, 0x7d}, {&(0x7f0000000880)=""/33, 0x21}], 0x6) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r3, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r3, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000940)=@IORING_OP_READ_FIXED={0x4, 0x20, 0x6000, @fd=r1, 0x6d7b, 0x9, 0x9, 0x0, 0x0, {0x1, r8}}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe8, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4c}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfe7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf18c}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r10 = socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@delnexthop={0x40, 0x69, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000001) r11 = socket$inet_smc(0x2b, 0x1, 0x0) kcmp(r2, 0x0, 0x3, r11, r10) ioctl$CDROM_SELECT_DISK(r3, 0x5322, 0xffffffffffff7fff) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa8, r12, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x416cd3fd8241f66b}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xcfd5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x50}, 0x40090) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) io_uring_enter(0xffffffffffffffff, 0x5767, 0x5ace, 0x20, &(0x7f0000000e40)={[0xffffffffffffff7f]}, 0x8) 3.55756308s ago: executing program 41 (id=4210): landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) 3.544481598s ago: executing program 8 (id=4390): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfffffffd, 0x0, 0x0, 0x9aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbab56e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.43079313s ago: executing program 8 (id=4392): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'geneve0\x00', 0x9}, 0x18) 3.424827144s ago: executing program 8 (id=4393): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000700)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xc0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/141, 0x8d) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x48, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfefffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5f, 0x80000001, 0x24, 0xd, 0x1, 0x8001, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0xffffffc0, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x100, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8100012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x30, 0xe, 0x312, 0xc4f, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x7fff, 0x8, 0xfffffff8, 0x8, 0x47, 0x8020, 0xffffffff, 0xfe000000, 0xffff, 0x2, 0x1, 0x2, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x4, 0x48c93690, 0x1, 0x100], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0xa, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x3ff, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xc, 0x9, 0x1a889c3c, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xbc1]}, 0x45c) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000240)={0x14, &(0x7f0000001880)=ANY=[@ANYBLOB="200181000000810549116e5e62d431fe21e2d5338e481c9b919bf37a9d713a2929aaa92ab59fde935acb279814ab57b46bd84ae17ff91d62e72278f9d3dd9ed14050ceaf7344c5323ec39832a2a312d910386291c5fb89f98f4f7c65affd2aedeb743f70d58ce42593ea43a96906081baa2ea8fd29ecab4a0a2688"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000001a80)={0x2c, &(0x7f0000001940)=ANY=[@ANYBLOB="0000080000fb"], &(0x7f0000001980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001a00)={0xc0, 0x5, 0x1, 'r'}, &(0x7f0000001a40)=ANY=[@ANYBLOB="a17838"]}) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r4) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000980)=""/157) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002e00030026bdf000fcdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r9, 0x2c93a000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000380)={0x1}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b00)={0x13b0, r7, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1384, 0x111, 0x0, 0x1, {0x1380, 0x5, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x5bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x384, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x49}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x328, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x294, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x860f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1dc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x48}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x74}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6c2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5eb21922}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdbe6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}]}, {0x224, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x83}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x75}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x15a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x2f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe8e2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9d65}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xae}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x58f433eea44084a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x13b0}, 0x1, 0x0, 0x0, 0x8d4}, 0x40000) 1.692014007s ago: executing program 4 (id=4414): r0 = gettid() timer_create(0x7, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.422386696s ago: executing program 4 (id=4419): r0 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.3327877s ago: executing program 4 (id=4420): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendfile(r0, r4, &(0x7f0000000040), 0x5) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x10}}], 0x28}, 0x4008804) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x125}, {&(0x7f0000001440)="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", 0x488}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.141519216s ago: executing program 4 (id=4421): r0 = socket$netlink(0x10, 0x3, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x2d7b, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xffffffe4, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x4e22, 0x4000352a, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r5}, 0xc) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001400)='/dev/comedi4\x00', 0x800, 0x0) ioctl$COMEDI_BUFCONFIG(r7, 0x8020640d, &(0x7f0000001440)={0x0, 0x6, 0x86, 0x3}) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x7, 0x12) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 1.140267825s ago: executing program 3 (id=4388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xb}, {0xfff9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x2a}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x15) 710.26604ms ago: executing program 5 (id=4424): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfffffffd, 0x0, 0x0, 0x9aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbdabee60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 710.058948ms ago: executing program 5 (id=4425): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file1\x00', &(0x7f0000000000)='logfs\x00', 0x0, &(0x7f00000000c0)='norecovery') prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 620.573078ms ago: executing program 5 (id=4426): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000007c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500, 0x0, 0x0, 0x0, [0x4]}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000950000f52e0000000000e8be2b339d0a5757acfb86d57a0296390fbbfeed446dfe079dbf27c173820cdb1d42b639818fefb8e7a3f902e8c73dbd224813f66827e3e021fd364abfda387aa38c8fc3cb20eeff862c57e546732e7117344b3e18e10658614c9667d3d0044a2ab8af6e9bd53dc309b7bebcda08568ccee694228c3b56dc131ae9b8078e6a598ec2715d28270dd58b9d48743f45e449688cfe27232ebb8c24e7e88f7cf66f6bb400"/202], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=0x1, r6, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=r0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000340)="66b809008ed0460f0948b8b1cf0000000000000f23c00f21f835020006000f23f80f38023b66b87900410f235e66baf80cb880258a89ef66bafc0cb8c7e90277efc4035920b207000000040f20c035000004000f22c0450f35400fb613", 0x5d}], 0x1, 0x60, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x40003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="042ff904000000000000093fce59"], 0x3fc) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000280)=[@ioring_restriction_sqe_op={0x1, 0x6}, @ioring_restriction_sqe_flags_allowed={0x2, 0x6}, @ioring_restriction_sqe_flags_allowed={0x2, 0xb}, @ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_register_op={0x0, 0x1}], 0x5) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x1d, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5cb4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x3f1, 0x2f, &(0x7f0000000440)=""/47, 0x41000, 0x11, '\x00', 0x0, @sk_msg, r8, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xa, 0x101, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000b80)=[r8, r8], &(0x7f0000000bc0)=[{0x5, 0x5, 0x10, 0x3}, {0x4, 0x3, 0x9, 0x4}, {0x5, 0x3, 0x5, 0x6}], 0x10, 0xfffffffd}, 0x94) 362.357485ms ago: executing program 5 (id=4427): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r4, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x16, 0x0, 0x0, 0x5, 0xfffffffffffffedc, 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r9, @ANYBLOB="20000280", @ANYRES32=r8, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0xfffffff8}) 312.827139ms ago: executing program 8 (id=4428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x110, 0x0, 0x2e8, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @remote, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='.\x00\x00\x00\"\x00', 0x6}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) userfaultfd(0x80801) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r10], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000580)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000100)={0xfec00000, 0x80a0000, 0xfffffffe, 0x0, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00002100fe800000000000000000000000000000fe8000000000000000000000000000aaaa9447fc2a5454807c67610a471da718afa965940fe5eb5776cf"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@private0}, &(0x7f0000000540)=0x14) 192.604706ms ago: executing program 5 (id=4429): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setresgid(0xee00, 0xee01, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x884) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2", 0x13, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket(0x2b, 0x80801, 0x1) connect$unix(r10, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @broadcast}}, [0x7fffffffffffffff, 0x6, 0x7, 0xfffffffffffffff8, 0x7, 0xffffffff, 0xd, 0xa, 0x2, 0xc1e3, 0xe14, 0xbf, 0x0, 0x2, 0x2]}, &(0x7f0000000100)=0x100) 106.233282ms ago: executing program 5 (id=4430): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00094000010009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) setreuid(0x0, 0xee00) syz_clone3(&(0x7f0000000500)={0x4000000, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0xf}, &(0x7f0000002880)=""/4096, 0x1000, &(0x7f0000000480)=""/51, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) capset(&(0x7f0000000580)={0x19980330, r1}, &(0x7f00000005c0)={0x7, 0x80000001, 0x8140, 0x5, 0x1000, 0xfff}) (async) capset(&(0x7f0000000580)={0x19980330, r1}, &(0x7f00000005c0)={0x7, 0x80000001, 0x8140, 0x5, 0x1000, 0xfff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) (async) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x24004850) (async) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x24004850) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f0000000280)=r6}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r8, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000000340)={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x3, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0xd43, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, {[@fragment={0x16, 0x0, 0x6, 0x1, 0x0, 0x10, 0x68}, @hopopts={0x88, 0x18, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x7}, @generic={0x3, 0x6, "86661dda2b9b"}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @generic={0x9, 0x9c, "907c6582c457e58622e0c8cc4ae7123cea4eec2060ee619675751e4d0e0a5d49e04b6a1d390484f0996e3a7f179358883024d7a2f2d3d5c5339aeb1f8a9406516d6ee33d5b86dedea4e6d6820f17ddb4a918680a4cacb1d2c032106c708a20fca42a04448012491e8b7dcb476267734f36c624efd876830a98d87382e1ae837d4be8daeec909985daa6ee3ef1cf81c03613731e06fac501a9666c47b"}]}, @dstopts={0x67, 0x7, '\x00', [@ra={0x5, 0x2, 0x4000}, @pad1, @padn, @calipso={0x7, 0x10, {0x0, 0x2, 0x3, 0xff, [0x8000000000000001]}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0xffff144b}]}, @fragment={0x73, 0x0, 0x6, 0x1, 0x0, 0xb, 0x64}, @fragment={0x0, 0x0, 0xf, 0x0, 0x0, 0x6, 0x67}, @dstopts={0x62, 0x3, '\x00', [@enc_lim, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10000}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x3a, 0x160, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x60, 0xfff7, [0x6, 0x7, 0x81, 0x4, 0xfab0]}}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x7, [0x77, 0x1]}}, @generic={0x2, 0xab0, "1b04605bfcbd585b4a954435c26f99b24ba3bd0966db7a1562daf99d75a8de90111e0b40029380d84e9e4b5de8bb5b5c52bf0f95c441b50e0ec57ed77745c1d602d07a96d6aafde270e8f56c68655b1c3261fa2dc4a9152dc65e42630683d704449293f6df5880d8545eac581ac71736af832da7047b6380340c8a9cea24612d05e9ab12c73fd1d2db4917cb832cddb6e95270375f2ce77451f3a767ed650cb4f2d76998d0e5f8374af4bbdbf23360d0141b31dfa385dec78aeaf3295890986372a7d2125b71d82dc84bce17c0d0f366482ce421386a09d4e7b704797d63c00095c4b3b6e119d92f9bd47aa9297f8b9263a2014da643e3a6ec34ad85fd051f69680a0de2b5c317d2649445ca49687f14dffaa947327fcc7039fe3f5c9eccbb46631e63f01ad34b05355f7f24a2b928f0da2faa890b49f6e74b9dd41182d893d2e05c58e808472364918c1066b1650fcb6e5f7ae87ac5c6f6fe73492d9d48d4086c4cf760f1404be6b9cfcbba607173e4a157100a8a544b9587b2b93255d7b601f1b4399a401fb8d01ff04d2812b85944652cd27e616c5fa6de091648961aae1997726d5b5726c18b80c810f48076c8f73acac9203c0ce4385f5fb6d027bf6c9b18e33184a6b604b2ae7100a44d94f6ae525851b8323428071e04e27fc6631b7a36e5c4093f320c7f7a0cae9d99cb26fedbfd935dbe5c94e8c163f13a4bd78d205d256b5b90219d3446077ab092d7b8a7d95a2f6070f1f2bf10ffef94f957cb25d71f6a47061f53478a648f82bdb001e984a4e12fbb3f10d79f921fe0772f98db59b99b6e541ddda264acc4373e186bd7ac2725fc7546a4673decf23b8a3f662bd0cfba77a5d221108c43a90c9c36fa20ab2a555e3b6c55aec1b36d41633f028503ac97129e0b2c9a33d310a1edb03308c00149fddcf62ec6959dc7c46ed48e5b15e0c2a8285e4ecf8fd4757eadf236e07b919f31056d5387eac22c1778587b0c89cdc1a878bde539960cb7d1973ff61c1f458a3600093738bf380eebc9afc2fb97fe6a19f80407045136cf65aba41904cca71d233527a75d7221739b02a67f18d644956443b694dedd7c3fe46daca8a23c8e040ee06ee8281f3a30d3402a3a2b4eac6d8ad1481fba0ade16b064ecbd1352bc41a3b110f43afe8ede0ce67eb097ae375bc348956eacac193c495f02c1fc7d5b0741b238c4c9d71231c13c5e81d3e1ba0adbbf8d1808fb83b63ba30a5445267917ecf672425b0fcb9f47d8577d5d3e0f1b703187718b0d40d810fa8c2fdcb4ae35a35c94f2773808e592798083146419e95244005abf52a504782a7e9ffdbb8fc93c6eee544d43d80112c682faa32c72f2907250540d57b57c8d88eb3d1c6499d84bfcc4536deb4f3e0ca94e40e8d059e0cb56b8d956280c6120a422f32827697ccb8557aae60d687e667f59bdb17739027449f6b228258316f412ca9db9e29f65d27127eef43d944c67a4d948c1866e13abc5e421969a20de7e6836d88d83a0659fbffa503dbfec5edc138066f4f816c580d6bd8f6e46ac2c77d70c7d8b944295191fdc7e300f9d538720ed231f21e8b698624f6d0ad152c2c498f4065b2e111a7bccb14c2807eb17b0926f2f2b6590c01d0c4ab9cdc09e4e5df8da4101021f3ed7af425e101d2c214f40936789964f1c8ac139375723fc3f24abe558303b8a155f98e96797ab44e18eb891a96fcd76076f0f8fffe090ece59e49c1a2a5cd82d12dfcc8ff16c0c5f6dfcc8a7041c9fbac7656285f8640fcf12cbddc5701e91a56bcc1847e6ff4f0d1d0f4337e0908ea11a52ad42739ba83e62b58b53a3943166b08e29d7d9cea529a8e4c8ed72687a447dd9056608500f566e4a69bf5670610a413b4fc1ce0cfa80ca82d2a326f8beeb95da3c6fea1738e520a802d84339c1539faa87e1b0190ba482e1d562553d02aa6d8d0b4bb5cad4e82c133c99060ad26f696074b788d44022502eed32055079b9cecc3eb6c57071d9b7c9c508281e7a634722d0085b75b9eaa34dba871f0395ee2866d1eee0a2a5a768151018fe4e49e91cec285030e6955bd7b822db83aea4665d5ecb1f1631b628085980cd6cfe9e463fee152eb0fac3034bdf6c61fe0b5e9f202b56e530c5698d5f16bfc6725efff9f090b49a0978e258f6bac40f1bb1ad36c9bbc1c44d115f868fb4e94313a98d1277f947f226b12bc96adad535866ac35a7dd5836abd55267df227a8aab3bc05fef44a2e3c34cd53e010f33e783c6c0e7dcfbcb8e5345ec31c8b1cb215259d908b93fb54eac0c09f2f5d1643edefb6c9f8a83f15aa64085a6ae5af9ba1008f235fc1700bfa8f9f0fab5269b7b8a16cec0d1bb7b28e112ad23808d39c760a3f56c3b5be613292b4466faaffc03457b98ac270a30bc6fcc648816824158340533ce780263eb4ffda87de1966f7520b1cc9b36f31e2f90d4612b1956708888e64b04c1328739daf94e321212f4c8383c60a90170489b1facadfa8d2c9838c82200f3c0a244147e713978e71585d285fe750b89614242a0c493ce493a5005702c463033058424b4ef16f687218cf704feb0a040370f9360b357f75ae06e50f926e87d63a3a5584c6b9a4946abadebcb74376cd5456c016a0448c76abeec8ae96de117a49d7f4afd4735bd01bde44a2a5b44eaaee413dd886790f01d4e879e772112d7a76c216ff790931f34fbe8d0e197ac3a138d6e6044a8ee56df5cc291e3912772d485b89808b1babaccaeb86b36ec91afc9de22e5b59db996707adc8136e191d2a7cf884bbe0086acb734d966ab042fdaa748b61e47fc4c2a3f156000d5ced7c3323e3e96bcd5d7862e082990de8f82e8f1851ef391e217eaafaf63774a20e3941b2f71cd537b4a582e69d409280280e27a2dc0331fa8cbaffa391715b76a9c06da4be646510a195149cc6809405b73ac0520b77687cf52967b202e63c7ede2149e2289faa20ce48cb550a78d30ae0fdb7f1911f965a3046f3bb2a71510ba73d675e18f0d99f929d83217ffdd4604404db261b9c31c13409eb94f521584c32d6b69426336489b24269ecba1e0052357b9b500a3cc4449f77242ae85930ca1f69c7eb67132ac19e7f06512434557a378036ea0140bddf5e3836b97d00bc50ff44bee7e2dcff1bf8faf67d5b9ba7da3801c55982a2e8c43a63507b0efe96e9e3a2cf2a7075f1838f60251da91ea17a38fa97ead6620a96af9571467cf8a34d3fbbd43d899471ed5481199abb3a8f3e2cd0a9f4bece099b70360db6fc1090e5bd1f8e5de190f30c726ad4669af38c68405d3faf97b761bb33533a7b955f0f08c5f35de8c59916fd60265a970e8669f2897e484e6bda9a6500671b84e896faf30a2cf7dc42d906a9e1cec85c0852d1486c5fc37b8242fd12cc77313831c700a8d34745337856eb33309c8bf4547561335636ea279d6c3e9a0937e060c1c9a06eea1ba5d5a58f038de933e1ef09a5008430ecce2ebb8db36f5e051af519d2db338bb1ca1eeeb115313b3e54150e2fb6609faa32f025bb53781afadfdef7330dc8f7a2888770721be1f63db31ef81d0811bd84eba60084b08068fd65e136b757b3e16632e36466fd26424c506ccd30676c682c59c66bd4ee5d86bb98c752dea8a84b474da2797abe12063ba94b4d66d0d3e3678409cfd610c7df265c3a66a84069d473711398f384cf239633cd14a337f727451bafc7fea7387c0b1150ce7328683bcb314f5b31024f1a935db8d57b17130131cfd3df74c39354e16259dd53d97b08ca0481eff7639eb7e10407b8d5dcb7d3939940bad0c3d06ca85e8eda90f44f64902902c7479cfcd2c49cfae9a4c4916c921d46f53bd943c4ecef1c505aa0a7b"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x5a, 0x892f, [0x80], "b710013d31d52bbe11baaed261a3dded063834925c2c00886ad3025643f05cc63dd8bfd43fda3a0cc2bd526a024ddc9948a829d1e70211959c1d5f1ff2500f1da927889a3156954d384d464b4915edd62c6671a36c63c4bf0bb4"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "635a899cff8c355f4c07ceed426fedd7ae3e4f13000000000000f66631bb36ece936bd7be1a70d1eeda1dc9b561e85435800"/59}, {}, {0xa888}}}}}}}, 0x0) (async) syz_emit_ethernet(0xd81, &(0x7f0000000340)={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x3, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0xd43, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, {[@fragment={0x16, 0x0, 0x6, 0x1, 0x0, 0x10, 0x68}, @hopopts={0x88, 0x18, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x7}, @generic={0x3, 0x6, "86661dda2b9b"}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @generic={0x9, 0x9c, "907c6582c457e58622e0c8cc4ae7123cea4eec2060ee619675751e4d0e0a5d49e04b6a1d390484f0996e3a7f179358883024d7a2f2d3d5c5339aeb1f8a9406516d6ee33d5b86dedea4e6d6820f17ddb4a918680a4cacb1d2c032106c708a20fca42a04448012491e8b7dcb476267734f36c624efd876830a98d87382e1ae837d4be8daeec909985daa6ee3ef1cf81c03613731e06fac501a9666c47b"}]}, @dstopts={0x67, 0x7, '\x00', [@ra={0x5, 0x2, 0x4000}, @pad1, @padn, @calipso={0x7, 0x10, {0x0, 0x2, 0x3, 0xff, [0x8000000000000001]}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0xffff144b}]}, @fragment={0x73, 0x0, 0x6, 0x1, 0x0, 0xb, 0x64}, @fragment={0x0, 0x0, 0xf, 0x0, 0x0, 0x6, 0x67}, @dstopts={0x62, 0x3, '\x00', [@enc_lim, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10000}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x3a, 0x160, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x60, 0xfff7, [0x6, 0x7, 0x81, 0x4, 0xfab0]}}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x7, [0x77, 0x1]}}, @generic={0x2, 0xab0, "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"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x5a, 0x892f, [0x80], "b710013d31d52bbe11baaed261a3dded063834925c2c00886ad3025643f05cc63dd8bfd43fda3a0cc2bd526a024ddc9948a829d1e70211959c1d5f1ff2500f1da927889a3156954d384d464b4915edd62c6671a36c63c4bf0bb4"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "635a899cff8c355f4c07ceed426fedd7ae3e4f13000000000000f66631bb36ece936bd7be1a70d1eeda1dc9b561e85435800"/59}, {}, {0xa888}}}}}}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f00000001c0)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00]) (async) getgroups(0xa, &(0x7f00000001c0)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00]) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000300)=0x5, 0x4) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="b0000000f5ffffff", @ANYRES64=r9, @ANYBLOB="030000000000000002000000000000000800000000000000c596000000000000020000000200000001010000000000000000ffffffffffff00040000000000000900000000000000010000000100000008000000000000000200000006000000080000000020000008000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0100008008000000000000000400000000000000040000000000000002000000020000007d7b00000000000058df70b396f2d560cb21b899256e61812d0da728e58ba722bb10483a45e21b5c91d768418ad923df6d2fa301b7cf13b95df3477748909904d2a3cbb7be173930b27b9aa74191f77cf8dc023eee02ba6319bbfe78ffb6940ad1cc801117986d0664ab99de9361313b4524b62a3933705a1689419dd700"/171], 0xb0) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="b0000000f5ffffff", @ANYRES64=r9, @ANYBLOB="030000000000000002000000000000000800000000000000c596000000000000020000000200000001010000000000000000ffffffffffff00040000000000000900000000000000010000000100000008000000000000000200000006000000080000000020000008000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0100008008000000000000000400000000000000040000000000000002000000020000007d7b00000000000058df70b396f2d560cb21b899256e61812d0da728e58ba722bb10483a45e21b5c91d768418ad923df6d2fa301b7cf13b95df3477748909904d2a3cbb7be173930b27b9aa74191f77cf8dc023eee02ba6319bbfe78ffb6940ad1cc801117986d0664ab99de9361313b4524b62a3933705a1689419dd700"/171], 0xb0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) 105.989349ms ago: executing program 4 (id=4431): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@deltclass={0x2c, 0x29, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0x4}, {0xa, 0xd}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xa6, 0x7c}}]}, 0x2c}}, 0x801) 0s ago: executing program 4 (id=4432): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x500) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x200000000000002) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) kernel console output (not intermixed with test programs): 3] ? __pfx_out_of_memory+0x10/0x10 [ 393.759153][T18713] mem_cgroup_out_of_memory+0xc6/0x130 [ 393.759164][T18713] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 393.759174][T18713] ? find_held_lock+0x2b/0x80 [ 393.759192][T18713] ? do_raw_spin_unlock+0x145/0x1e0 [ 393.759205][T18713] ? _raw_spin_unlock+0x28/0x50 [ 393.759223][T18713] try_charge_memcg+0x652/0xc90 [ 393.759240][T18713] ? __pfx_try_charge_memcg+0x10/0x10 [ 393.759274][T18713] ? find_held_lock+0x2b/0x80 [ 393.759288][T18713] ? rcu_read_unlock+0x17/0x60 [ 393.759303][T18713] ? rcu_read_unlock+0x17/0x60 [ 393.759326][T18713] charge_memcg+0xa6/0x280 [ 393.759341][T18713] __mem_cgroup_charge+0x2b/0x1e0 [ 393.759358][T18713] shmem_alloc_and_add_folio+0x451/0xd40 [ 393.759374][T18713] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 393.759389][T18713] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 393.759405][T18713] shmem_get_folio_gfp+0x6ab/0x1900 [ 393.759421][T18713] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 393.759434][T18713] ? timestamp_truncate+0x22e/0x2f0 [ 393.759449][T18713] ? __pfx_timestamp_truncate+0x10/0x10 [ 393.759465][T18713] shmem_write_begin+0x1a4/0x420 [ 393.759479][T18713] ? rcu_is_watching+0x12/0xc0 [ 393.759493][T18713] ? __pfx_shmem_write_begin+0x10/0x10 [ 393.759507][T18713] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 393.759526][T18713] generic_perform_write+0x292/0xa40 [ 393.759544][T18713] ? __pfx_generic_perform_write+0x10/0x10 [ 393.759557][T18713] ? generic_update_time+0xcf/0xf0 [ 393.759572][T18713] ? mnt_put_write_access_file+0x4e/0x100 [ 393.759587][T18713] ? file_update_time_flags+0x31f/0x510 [ 393.759605][T18713] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 393.759619][T18713] shmem_file_write_iter+0x10e/0x140 [ 393.759636][T18713] __kernel_write_iter+0x2ac/0x920 [ 393.759649][T18713] ? __pfx___kernel_write_iter+0x10/0x10 [ 393.759661][T18713] ? cgroup1_freezing+0x12c/0x3b0 [ 393.759677][T18713] ? cgroup1_freezing+0x136/0x3b0 [ 393.759692][T18713] ? freezing_slow_path+0xb5/0x1a0 [ 393.759708][T18713] dump_user_range+0x3f9/0xb50 [ 393.759725][T18713] ? __pfx_dump_user_range+0x10/0x10 [ 393.759744][T18713] ? __pfx_writenote+0x10/0x10 [ 393.759768][T18713] elf_core_dump+0x2d16/0x3c60 [ 393.759791][T18713] ? __pfx_elf_core_dump+0x10/0x10 [ 393.759818][T18713] ? kasan_save_stack+0x30/0x50 [ 393.759830][T18713] ? kasan_save_track+0x14/0x30 [ 393.759842][T18713] ? __kasan_kmalloc+0xaa/0xb0 [ 393.759854][T18713] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 393.759866][T18713] ? vfs_coredump+0x1f01/0x5530 [ 393.759879][T18713] ? arch_do_signal_or_restart+0x91/0x7a0 [ 393.759895][T18713] ? irqentry_exit+0x1f8/0x670 [ 393.759906][T18713] ? asm_exc_page_fault+0x26/0x30 [ 393.759920][T18713] ? 0xffffffffff600000 [ 393.759953][T18713] ? vfs_coredump+0x276c/0x5530 [ 393.759966][T18713] vfs_coredump+0x276c/0x5530 [ 393.759985][T18713] ? __pfx_vfs_coredump+0x10/0x10 [ 393.759998][T18713] ? __lock_acquire+0x4a5/0x2630 [ 393.760012][T18713] ? __lock_acquire+0x4a5/0x2630 [ 393.760024][T18713] ? lock_acquire+0x17c/0x330 [ 393.760038][T18713] ? lock_acquire+0x17c/0x330 [ 393.760051][T18713] ? bpf_ksym_find+0x128/0x1c0 [ 393.760062][T18713] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.760083][T18713] ? arch_stack_walk+0xa6/0xf0 [ 393.760106][T18713] ? stack_trace_save+0x8e/0xc0 [ 393.760122][T18713] ? __pfx_stack_trace_save+0x10/0x10 [ 393.760138][T18713] ? stack_depot_save_flags+0x27/0x9c0 [ 393.760154][T18713] ? __lock_acquire+0x4a5/0x2630 [ 393.760191][T18713] ? proc_coredump_connector+0x2d3/0x4f0 [ 393.760207][T18713] ? __pfx_proc_coredump_connector+0x10/0x10 [ 393.760226][T18713] ? rcu_is_watching+0x12/0xc0 [ 393.760243][T18713] get_signal+0x1f2a/0x21e0 [ 393.760264][T18713] ? __pfx_get_signal+0x10/0x10 [ 393.760283][T18713] arch_do_signal_or_restart+0x91/0x7a0 [ 393.760301][T18713] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 393.760326][T18713] ? do_user_addr_fault+0x8d6/0x12f0 [ 393.760343][T18713] irqentry_exit+0x1f8/0x670 [ 393.760356][T18713] asm_exc_page_fault+0x26/0x30 [ 393.760367][T18713] RIP: 0033:0x7f895659aec1 [ 393.760377][T18713] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 393.760387][T18713] RSP: 002b:000000000000a420 EFLAGS: 00010217 [ 393.760397][T18713] RAX: 0000000000000000 RBX: 00007f8956815fa0 RCX: 00007f895659aeb9 [ 393.760404][T18713] RDX: 0000000000000000 RSI: 000000000000a420 RDI: 0000000000022080 [ 393.760411][T18713] RBP: 00007f8956608c1f R08: 0000000000000000 R09: 0000000000000000 [ 393.760417][T18713] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 393.760424][T18713] R13: 00007f8956816038 R14: 00007f8956815fa0 R15: 00007ffcf701be18 [ 393.760439][T18713] [ 393.925284][T18713] memory: usage 307200kB, limit 307200kB, failcnt 16990 [ 393.927483][T18713] memory+swap: usage 408204kB, limit 9007199254740988kB, failcnt 0 [ 393.930147][T18713] kmem: usage 4540kB, limit 9007199254740988kB, failcnt 0 [ 393.932274][T18713] Memory cgroup stats for /syz9: [ 393.932440][T18713] cache 307388416 [ 393.935071][T18713] rss 413696 [ 393.936110][T18713] rss_huge 0 [ 393.937121][T18713] shmem 307388416 [ 393.938264][T18713] mapped_file 0 [ 393.939364][T18713] dirty 0 [ 393.941037][T18713] writeback 0 [ 393.942078][T18713] workingset_refault_anon 608 [ 393.943529][T18713] workingset_refault_file 0 [ 393.944913][T18713] swap 103436288 [ 393.946006][T18713] swapcached 1884160 [ 393.947227][T18713] pgpgin 164152 [ 393.948598][T18713] pgpgout 88565 [ 393.949698][T18713] pgfault 10336 [ 393.951447][T18713] pgmajfault 63 [ 393.952593][T18713] inactive_anon 108838912 [ 393.953912][T18713] active_anon 200679424 [ 393.955194][T18713] inactive_file 0 [ 393.956300][T18713] active_file 0 [ 393.957402][T18713] unevictable 0 [ 393.959218][T18713] hierarchical_memory_limit 314572800 [ 393.961821][T18713] hierarchical_memsw_limit 9223372036854771712 [ 393.964982][T18713] total_cache 307388416 [ 393.967287][T18713] total_rss 413696 [ 393.969207][T18713] total_rss_huge 0 [ 393.971853][T18713] total_shmem 307388416 [ 393.973725][T18713] total_mapped_file 0 [ 393.975371][T18713] total_dirty 0 [ 393.976779][T18713] total_writeback 0 [ 393.978416][T18713] total_workingset_refault_anon 608 [ 394.000253][T18713] total_workingset_refault_file 0 [ 394.001995][T18713] total_swap 103436288 [ 394.003310][T18713] total_swapcached 1884160 [ 394.004694][T18713] total_pgpgin 164152 [ 394.005942][T18713] total_pgpgout 88565 [ 394.007238][T18713] total_pgfault 10336 [ 394.008590][T18713] total_pgmajfault 63 [ 394.010522][T18713] total_inactive_anon 108838912 [ 394.012143][T18713] total_active_anon 200679424 [ 394.013710][T18713] total_inactive_file 0 [ 394.015088][T18713] total_active_file 0 [ 394.016442][T18713] total_unevictable 0 [ 394.017748][T18713] anon_cost 0 [ 394.018867][T18713] file_cost 0 [ 394.021197][T18713] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3696,pid=18712,uid=0 [ 394.027721][T18713] Memory cgroup out of memory: Killed process 18712 (syz.9.3696) total-vm:98620kB, anon-rss:1248kB, file-rss:60160kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 394.046436][T18833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.054209][T18833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.059131][ T53] usbhid 6-1:0.0: can't add hid device: -71 [ 394.061275][ T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 394.068151][ T53] usb 6-1: USB disconnect, device number 55 [ 394.171057][T18667] syz.9.3696 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 394.174186][T18667] CPU: 3 UID: 0 PID: 18667 Comm: syz.9.3696 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.174204][T18667] Tainted: [L]=SOFTLOCKUP [ 394.174209][T18667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 394.174215][T18667] Call Trace: [ 394.174221][T18667] [ 394.174226][T18667] dump_stack_lvl+0x100/0x190 [ 394.174246][T18667] dump_header+0xfb/0x606 [ 394.174257][T18667] oom_kill_process.cold+0xd/0x321 [ 394.174270][T18667] out_of_memory+0x340/0x14f0 [ 394.174286][T18667] ? __pfx_out_of_memory+0x10/0x10 [ 394.174303][T18667] mem_cgroup_out_of_memory+0xc6/0x130 [ 394.174315][T18667] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 394.174325][T18667] ? find_held_lock+0x2b/0x80 [ 394.174342][T18667] ? do_raw_spin_unlock+0x145/0x1e0 [ 394.174356][T18667] ? _raw_spin_unlock+0x28/0x50 [ 394.174374][T18667] try_charge_memcg+0x652/0xc90 [ 394.174392][T18667] ? __pfx_try_charge_memcg+0x10/0x10 [ 394.174406][T18667] ? find_held_lock+0x2b/0x80 [ 394.174420][T18667] ? rcu_read_unlock+0x17/0x60 [ 394.174434][T18667] ? rcu_read_unlock+0x17/0x60 [ 394.174453][T18667] charge_memcg+0xa6/0x280 [ 394.174467][T18667] __mem_cgroup_charge+0x2b/0x1e0 [ 394.174484][T18667] shmem_alloc_and_add_folio+0x451/0xd40 [ 394.174501][T18667] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 394.174515][T18667] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 394.174531][T18667] shmem_get_folio_gfp+0x6ab/0x1900 [ 394.174550][T18667] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 394.174564][T18667] ? timestamp_truncate+0x22e/0x2f0 [ 394.174578][T18667] ? __pfx_timestamp_truncate+0x10/0x10 [ 394.174594][T18667] shmem_write_begin+0x1a4/0x420 [ 394.174608][T18667] ? rcu_is_watching+0x12/0xc0 [ 394.174622][T18667] ? __pfx_shmem_write_begin+0x10/0x10 [ 394.174636][T18667] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 394.174655][T18667] generic_perform_write+0x292/0xa40 [ 394.174672][T18667] ? __pfx_generic_perform_write+0x10/0x10 [ 394.174685][T18667] ? generic_update_time+0xcf/0xf0 [ 394.174700][T18667] ? mnt_put_write_access_file+0x4e/0x100 [ 394.174714][T18667] ? file_update_time_flags+0x31f/0x510 [ 394.174732][T18667] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 394.174746][T18667] shmem_file_write_iter+0x10e/0x140 [ 394.174762][T18667] __kernel_write_iter+0x2ac/0x920 [ 394.174780][T18667] ? __pfx___kernel_write_iter+0x10/0x10 [ 394.174792][T18667] ? cgroup1_freezing+0x12c/0x3b0 [ 394.174808][T18667] ? cgroup1_freezing+0x136/0x3b0 [ 394.174822][T18667] ? freezing_slow_path+0xb5/0x1a0 [ 394.174843][T18667] dump_user_range+0x3f9/0xb50 [ 394.174860][T18667] ? __pfx_dump_user_range+0x10/0x10 [ 394.174879][T18667] ? __pfx_writenote+0x10/0x10 [ 394.174897][T18667] elf_core_dump+0x2d16/0x3c60 [ 394.174919][T18667] ? __pfx_elf_core_dump+0x10/0x10 [ 394.174932][T18667] ? kasan_save_stack+0x30/0x50 [ 394.174944][T18667] ? kasan_save_track+0x14/0x30 [ 394.174956][T18667] ? __kasan_kmalloc+0xaa/0xb0 [ 394.174967][T18667] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 394.174979][T18667] ? vfs_coredump+0x1f01/0x5530 [ 394.174992][T18667] ? arch_do_signal_or_restart+0x91/0x7a0 [ 394.175007][T18667] ? irqentry_exit+0x1f8/0x670 [ 394.175021][T18667] ? asm_exc_page_fault+0x26/0x30 [ 394.175034][T18667] ? 0xffffffffff600000 [ 394.175065][T18667] ? vfs_coredump+0x276c/0x5530 [ 394.175081][T18667] vfs_coredump+0x276c/0x5530 [ 394.175114][T18667] ? __pfx_vfs_coredump+0x10/0x10 [ 394.175127][T18667] ? __lock_acquire+0x4a5/0x2630 [ 394.175141][T18667] ? __lock_acquire+0x4a5/0x2630 [ 394.175153][T18667] ? lock_acquire+0x17c/0x330 [ 394.175167][T18667] ? lock_acquire+0x17c/0x330 [ 394.175180][T18667] ? bpf_ksym_find+0x128/0x1c0 [ 394.175191][T18667] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 394.175212][T18667] ? arch_stack_walk+0xa6/0xf0 [ 394.175231][T18667] ? stack_trace_save+0x8e/0xc0 [ 394.175272][T18667] ? __pfx_stack_trace_save+0x10/0x10 [ 394.175290][T18667] ? stack_depot_save_flags+0x27/0x9c0 [ 394.175305][T18667] ? __lock_acquire+0x4a5/0x2630 [ 394.175339][T18667] ? proc_coredump_connector+0x2d3/0x4f0 [ 394.175356][T18667] ? __pfx_proc_coredump_connector+0x10/0x10 [ 394.175375][T18667] ? rcu_is_watching+0x12/0xc0 [ 394.175391][T18667] get_signal+0x1f2a/0x21e0 [ 394.175412][T18667] ? __pfx_get_signal+0x10/0x10 [ 394.175431][T18667] arch_do_signal_or_restart+0x91/0x7a0 [ 394.175448][T18667] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 394.175468][T18667] ? do_user_addr_fault+0x8d6/0x12f0 [ 394.175486][T18667] irqentry_exit+0x1f8/0x670 [ 394.175499][T18667] asm_exc_page_fault+0x26/0x30 [ 394.175510][T18667] RIP: 0033:0x7f895659aec1 [ 394.175520][T18667] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 394.175530][T18667] RSP: 002b:000000000000a420 EFLAGS: 00010217 [ 394.175540][T18667] RAX: 0000000000000000 RBX: 00007f8956815fa0 RCX: 00007f895659aeb9 [ 394.175552][T18667] RDX: 0000000000000000 RSI: 000000000000a420 RDI: 0000000000022080 [ 394.175559][T18667] RBP: 00007f8956608c1f R08: 0000000000000000 R09: 0000000000000000 [ 394.175566][T18667] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 394.175572][T18667] R13: 00007f8956816038 R14: 00007f8956815fa0 R15: 00007ffcf701be18 [ 394.175587][T18667] [ 394.175592][T18667] memory: usage 307200kB, limit 307200kB, failcnt 17915 [ 394.345045][T18667] memory+swap: usage 408204kB, limit 9007199254740988kB, failcnt 0 [ 394.347538][T18667] kmem: usage 4504kB, limit 9007199254740988kB, failcnt 0 [ 394.349753][T18667] Memory cgroup stats for /syz9: [ 394.349876][T18667] cache 307716096 [ 394.352589][T18667] rss 417792 [ 394.353632][T18667] rss_huge 0 [ 394.354700][T18667] shmem 307716096 [ 394.355904][T18667] mapped_file 0 [ 394.357024][T18667] dirty 0 [ 394.357991][T18667] writeback 0 [ 394.359074][T18667] workingset_refault_anon 610 [ 394.360834][T18667] workingset_refault_file 0 [ 394.362249][T18667] swap 103428096 [ 394.363436][T18667] swapcached 1892352 [ 394.364695][T18667] pgpgin 164234 [ 394.365772][T18667] pgpgout 88567 [ 394.366901][T18667] pgfault 10339 [ 394.368032][T18667] pgmajfault 66 [ 394.369156][T18667] inactive_anon 108830720 [ 394.370595][T18667] active_anon 201101312 [ 394.371943][T18667] inactive_file 0 [ 394.373136][T18667] active_file 0 [ 394.374269][T18667] unevictable 0 [ 394.375460][T18667] hierarchical_memory_limit 314572800 [ 394.377167][T18667] hierarchical_memsw_limit 9223372036854771712 [ 394.379102][T18667] total_cache 307716096 [ 394.380462][T18667] total_rss 417792 [ 394.381639][T18667] total_rss_huge 0 [ 394.382816][T18667] total_shmem 307716096 [ 394.384094][T18667] total_mapped_file 0 [ 394.385314][T18667] total_dirty 0 [ 394.386441][T18667] total_writeback 0 [ 394.387603][T18667] total_workingset_refault_anon 610 [ 394.389224][T18667] total_workingset_refault_file 0 [ 394.391017][T18667] total_swap 103428096 [ 394.392285][T18667] total_swapcached 1892352 [ 394.393669][T18667] total_pgpgin 164234 [ 394.394921][T18667] total_pgpgout 88567 [ 394.396171][T18667] total_pgfault 10339 [ 394.397423][T18667] total_pgmajfault 66 [ 394.398695][T18667] total_inactive_anon 108830720 [ 394.400472][T18667] total_active_anon 201101312 [ 394.401982][T18667] total_inactive_file 0 [ 394.403348][T18667] total_active_file 0 [ 394.404647][T18667] total_unevictable 0 [ 394.405922][T18667] anon_cost 0 [ 394.407040][T18667] file_cost 0 [ 394.408138][T18667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3696,pid=18677,uid=0 [ 394.412946][T18667] Memory cgroup out of memory: Killed process 18677 (syz.9.3696) total-vm:98620kB, anon-rss:1248kB, file-rss:60144kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 394.864605][T18712] syz.9.3696 (18712) used greatest stack depth: 18280 bytes left [ 395.005773][T18875] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 395.009259][T18875] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 395.020239][T18875] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 395.023777][T18875] UDF-fs: Scanning with blocksize 512 failed [ 395.026889][T18875] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 395.030374][T18875] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 395.033395][T18875] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 395.035817][T18875] UDF-fs: Scanning with blocksize 1024 failed [ 395.038045][T18875] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 395.059994][T18875] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 395.063798][T18875] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 395.066340][T18875] UDF-fs: Scanning with blocksize 2048 failed [ 395.069138][T18875] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 395.073527][T18875] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 395.076863][T18875] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 395.079788][T18875] UDF-fs: Scanning with blocksize 4096 failed [ 395.082394][T18875] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 395.240280][ T830] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 395.260396][T18880] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 395.314131][T18884] deleting an unspecified loop device is not supported. [ 395.351267][T18883] block nbd0: server does not support multiple connections per device. [ 395.355191][T18883] block nbd0: shutting down sockets [ 395.391708][ T40] audit: type=1400 audit(2000000043.999:1670): avc: denied { module_load } for pid=18885 comm="syz.9.3750" path="/sys/kernel/hardlockup_count" dev="sysfs" ino=70991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 395.396176][ T830] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.402885][ T830] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.406550][ T830] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.410091][ T830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.414758][ T830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.430868][ T830] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.434256][ T830] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.437079][ T830] usb 6-1: Product: syz [ 395.438408][ T830] usb 6-1: Manufacturer: syz [ 395.445776][ T830] cdc_wdm 6-1:1.0: skipping garbage [ 395.447497][ T830] cdc_wdm 6-1:1.0: skipping garbage [ 395.452235][ T830] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 395.454155][ T830] cdc_wdm 6-1:1.0: Unknown control protocol [ 395.523216][T18893] FAULT_INJECTION: forcing a failure. [ 395.523216][T18893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.528574][T18893] CPU: 3 UID: 0 PID: 18893 Comm: syz.8.3753 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.528602][T18893] Tainted: [L]=SOFTLOCKUP [ 395.528609][T18893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.528620][T18893] Call Trace: [ 395.528628][T18893] [ 395.528635][T18893] dump_stack_lvl+0x100/0x190 [ 395.528664][T18893] should_fail_ex.cold+0x5/0xa [ 395.528696][T18893] strncpy_from_user+0x3b/0x2d0 [ 395.528722][T18893] getname_flags.part.0+0x8f/0x540 [ 395.528751][T18893] __x64_sys_mknod+0xfe/0x170 [ 395.528774][T18893] do_syscall_64+0xc9/0xf80 [ 395.528796][T18893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.528814][T18893] RIP: 0033:0x7f8e00b9aeb9 [ 395.528828][T18893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.528845][T18893] RSP: 002b:00007f8e01af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 395.528863][T18893] RAX: ffffffffffffffda RBX: 00007f8e00e15fa0 RCX: 00007f8e00b9aeb9 [ 395.528874][T18893] RDX: 0000000000000006 RSI: 0000000000008000 RDI: 0000200000000000 [ 395.528885][T18893] RBP: 00007f8e01af6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.528896][T18893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.528907][T18893] R13: 00007f8e00e16038 R14: 00007f8e00e15fa0 R15: 00007ffef9f01898 [ 395.528932][T18893] [ 395.545129][T18898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.646672][T18874] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 395.653054][T18874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.656644][T18874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.661718][T18874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.664652][T18874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.671129][T17792] usb 6-1: USB disconnect, device number 56 [ 395.730818][T18903] __nla_validate_parse: 5 callbacks suppressed [ 395.730830][T18903] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3755'. [ 395.739446][T18903] erspan1: entered allmulticast mode [ 395.831403][T18906] IPv6: sit1: Disabled Multicast RS [ 395.833593][T18906] sit1: entered allmulticast mode [ 395.836894][ T40] audit: type=1400 audit(2000000044.439:1671): avc: denied { listen } for pid=18905 comm="syz.8.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.837537][T18906] x_tables: duplicate underflow at hook 2 [ 395.845086][ T40] audit: type=1400 audit(2000000044.439:1672): avc: denied { setopt } for pid=18905 comm="syz.8.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.849399][T18906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.857716][T18906] IPv6: NLM_F_CREATE should be set when creating new route [ 395.860468][T18906] IPv6: NLM_F_CREATE should be set when creating new route [ 396.163261][ T40] audit: type=1400 audit(2000000044.769:1673): avc: denied { connect } for pid=18920 comm="syz.9.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 396.171389][ T40] audit: type=1400 audit(2000000044.769:1674): avc: denied { read } for pid=18920 comm="syz.9.3761" path="socket:[117317]" dev="sockfs" ino=117317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 396.358516][T18941] team0: Device gtp0 is of different type [ 396.463858][ T40] audit: type=1400 audit(2000000045.069:1675): avc: denied { map } for pid=18945 comm="syz.9.3769" path="socket:[116717]" dev="sockfs" ino=116717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 396.480632][T18949] syzkaller0: entered promiscuous mode [ 396.482644][T18949] syzkaller0: entered allmulticast mode [ 396.640094][T18964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.724989][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3777'. [ 396.767676][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3778'. [ 396.812194][T18976] netlink: 'syz.9.3779': attribute type 1 has an invalid length. [ 396.814767][T18976] netlink: 228 bytes leftover after parsing attributes in process `syz.9.3779'. [ 396.817735][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3779'. [ 396.860777][T18978] Cannot find add_set index 46338 as target [ 396.878224][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3779'. [ 396.881583][T18976] bridge_slave_1: left allmulticast mode [ 396.883615][T18976] bridge_slave_1: left promiscuous mode [ 396.885499][T18976] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.892176][T18976] bridge_slave_0: left allmulticast mode [ 396.894350][T18976] bridge_slave_0: left promiscuous mode [ 396.896269][T18976] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.946415][T18980] FAULT_INJECTION: forcing a failure. [ 396.946415][T18980] name failslab, interval 1, probability 0, space 0, times 0 [ 396.951941][T18980] CPU: 3 UID: 0 PID: 18980 Comm: syz.8.3781 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.951960][T18980] Tainted: [L]=SOFTLOCKUP [ 396.951964][T18980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.951970][T18980] Call Trace: [ 396.951975][T18980] [ 396.951980][T18980] dump_stack_lvl+0x100/0x190 [ 396.951999][T18980] should_fail_ex.cold+0x5/0xa [ 396.952019][T18980] should_failslab+0xc2/0x120 [ 396.952034][T18980] __kmalloc_cache_noprof+0x80/0x810 [ 396.952046][T18980] ? fuse_lookup_name+0x19f/0x760 [ 396.952060][T18980] ? __pfx___might_resched+0x10/0x10 [ 396.952076][T18980] ? fuse_lookup_name+0x19f/0x760 [ 396.952091][T18980] fuse_lookup_name+0x19f/0x760 [ 396.952107][T18980] ? fuse_lock_inode+0xd2/0x110 [ 396.952123][T18980] ? kasan_save_stack+0x3f/0x50 [ 396.952134][T18980] ? kasan_save_stack+0x30/0x50 [ 396.952147][T18980] ? __pfx_fuse_lookup_name+0x10/0x10 [ 396.952162][T18980] ? d_alloc+0x4a/0x1e0 [ 396.952176][T18980] ? __pfx___mutex_lock+0x10/0x10 [ 396.952188][T18980] ? do_syscall_64+0xc9/0xf80 [ 396.952211][T18980] fuse_lookup+0x209/0x550 [ 396.952227][T18980] ? __pfx_fuse_lookup+0x10/0x10 [ 396.952250][T18980] ? do_raw_spin_unlock+0x145/0x1e0 [ 396.952264][T18980] ? _raw_spin_unlock+0x28/0x50 [ 396.952287][T18980] lookup_one_qstr_excl+0x1d1/0x250 [ 396.952304][T18980] ? mnt_want_write+0x161/0x450 [ 396.952317][T18980] filename_create+0x1cf/0x400 [ 396.952329][T18980] ? __pfx_filename_create+0x10/0x10 [ 396.952346][T18980] do_mknodat+0x195/0x7a0 [ 396.952359][T18980] ? __pfx_do_mknodat+0x10/0x10 [ 396.952370][T18980] ? strncpy_from_user+0x19d/0x2d0 [ 396.952386][T18980] ? getname_flags.part.0+0x1c5/0x540 [ 396.952404][T18980] __x64_sys_mknod+0x118/0x170 [ 396.952421][T18980] do_syscall_64+0xc9/0xf80 [ 396.952440][T18980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.952455][T18980] RIP: 0033:0x7f8e00b9aeb9 [ 396.952468][T18980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.952484][T18980] RSP: 002b:00007f8e01af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 396.952496][T18980] RAX: ffffffffffffffda RBX: 00007f8e00e15fa0 RCX: 00007f8e00b9aeb9 [ 396.952503][T18980] RDX: 0000000000000006 RSI: 0000000000008000 RDI: 0000200000000000 [ 396.952510][T18980] RBP: 00007f8e01af6090 R08: 0000000000000000 R09: 0000000000000000 [ 396.952517][T18980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.952523][T18980] R13: 00007f8e00e16038 R14: 00007f8e00e15fa0 R15: 00007ffef9f01898 [ 396.952541][T18980] [ 397.088812][T18983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.218004][T18986] omfs: Invalid superblock (0) [ 397.267906][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3784'. [ 397.316480][T18994] binder: 18992:18994 ioctl c0306201 0 returned -14 [ 397.318694][T18994] binder: 18992:18994 ioctl 4024700a 0 returned -22 [ 397.318720][T18993] binder: 18992:18993 ioctl 4024700a 0 returned -22 [ 397.327908][T18993] binder: 18992:18993 ioctl c0306201 2000000001c0 returned -14 [ 397.775633][ T64] Bluetooth: hci1: Dropping invalid advertising data [ 397.779129][ T64] Bluetooth: hci1: Malformed LE Event: 0x02 [ 398.049256][ T40] audit: type=1400 audit(2000000046.649:1676): avc: denied { ioctl } for pid=19022 comm="syz.8.3789" path="socket:[118938]" dev="sockfs" ino=118938 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 398.059469][T19023] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 398.061927][ T40] audit: type=1400 audit(2000000046.659:1677): avc: denied { getopt } for pid=19022 comm="syz.8.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 398.062929][T19023] overlayfs: failed to set xattr on upper [ 398.076842][T19023] overlayfs: ...falling back to redirect_dir=nofollow. [ 398.082100][T19023] overlayfs: ...falling back to index=off. [ 398.084774][T19023] overlayfs: ...falling back to uuid=null. [ 398.096651][T19023] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 398.169379][T19027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3791'. [ 398.175192][T19027] netlink: 'syz.1.3791': attribute type 22 has an invalid length. [ 398.177616][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3791'. [ 398.258522][T19027] netlink: 'syz.1.3791': attribute type 22 has an invalid length. [ 398.269956][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3791'. [ 398.465138][T19041] syzkaller0: entered promiscuous mode [ 398.467495][T19041] syzkaller0: entered allmulticast mode [ 398.610163][T19036] speed is unknown, defaulting to 1000 [ 398.832973][ T9289] bridge_slave_1: left allmulticast mode [ 398.834769][ T9289] bridge_slave_1: left promiscuous mode [ 398.836700][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.841128][ T9289] bridge_slave_0: left allmulticast mode [ 398.843007][ T9289] bridge_slave_0: left promiscuous mode [ 398.847092][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.870709][T19072] trusted_key: encrypted_key: keylen parameter is missing [ 399.032837][ T9289] bond0 (unregistering): (slave gretap1): Releasing active interface [ 399.035620][ T9289] gretap1 (unregistering): left allmulticast mode [ 399.052102][ T9289] bond3 (unregistering): (slave gretap2): Releasing active interface [ 399.377336][ T9289] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.381060][ T9289] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.384531][ T9289] .` (unregistering): (slave dummy0): Releasing backup interface [ 399.388943][ T9289] .` (unregistering): (slave batadv0): Releasing backup interface [ 399.392345][ T9289] .` (unregistering): Released all slaves [ 399.488976][ T9289] bond0 (unregistering): Released all slaves [ 399.491380][ T9257] smc: removing ib device sz0 [ 399.495747][ T9289] bond1 (unregistering): Released all slaves [ 399.502484][ T9289] bond2 (unregistering): Released all slaves [ 399.597384][ T9289] bond3 (unregistering): Released all slaves [ 399.780126][T19088] netlink: 'syz.9.3807': attribute type 10 has an invalid length. [ 399.789516][T19088] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 399.933762][T19093] syzkaller0: entered promiscuous mode [ 399.936237][T19093] syzkaller0: entered allmulticast mode [ 400.136239][T19097] xt_hashlimit: size too large, truncated to 1048576 [ 400.442931][T19109] Bluetooth: MGMT ver 1.23 [ 400.448252][ T40] audit: type=1804 audit(2000000049.049:1678): pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3815" name="bus" dev="ramfs" ino=118453 res=1 errno=0 [ 400.465646][ T40] audit: type=1804 audit(2000000049.069:1679): pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.3815" name="bus" dev="ramfs" ino=118453 res=1 errno=0 [ 400.627701][T19120] netlink: 'syz.9.3819': attribute type 10 has an invalid length. [ 400.627719][T19121] netlink: 'syz.9.3819': attribute type 10 has an invalid length. [ 400.702426][T19128] binder: 19127:19128 unknown command 0 [ 400.709699][T19128] binder: 19127:19128 ioctl c0306201 2000000003c0 returned -22 [ 400.768579][T19132] __nla_validate_parse: 3 callbacks suppressed [ 400.768591][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3822'. [ 400.869124][ T40] audit: type=1400 audit(2000000049.469:1680): avc: denied { remount } for pid=19136 comm="syz.1.3824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 400.869139][T19137] binder: Binderfs stats mode cannot be changed during a remount [ 400.886378][T19139] syzkaller0: entered promiscuous mode [ 400.888137][T19139] syzkaller0: entered allmulticast mode [ 400.889912][ T5947] Bluetooth: hci4: command 0x0406 tx timeout [ 400.992689][ T40] audit: type=1400 audit(2000000049.599:1681): avc: denied { listen } for pid=19136 comm="syz.1.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 401.048385][ T9289] hsr_slave_0: left promiscuous mode [ 401.051231][ T9289] hsr_slave_1: left promiscuous mode [ 401.053363][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.056273][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.309891][ T34] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 401.435229][ T9289] team0 (unregistering): Port device team_slave_1 removed [ 401.476769][ T34] usb 13-1: config index 0 descriptor too short (expected 35577, got 27) [ 401.480144][ T34] usb 13-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 401.480151][ T9289] team0 (unregistering): Port device team_slave_0 removed [ 401.483564][ T34] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 401.498058][ T34] usb 13-1: config 1 has no interface number 0 [ 401.501232][ T34] usb 13-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 401.505878][ T34] usb 13-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 401.511466][ T34] usb 13-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 401.515312][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.532484][ T34] snd_usb_pod 13-1:1.1: Line 6 Pocket POD found [ 401.780872][T19149] binder_alloc: binder_alloc_mmap_handler: 19142 200000ffc000-200000ffd000 already mapped failed -16 [ 401.956377][ T40] audit: type=1400 audit(2000000050.559:1682): avc: denied { execute } for pid=19159 comm="syz.1.3831" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=118495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 402.121468][ T40] audit: type=1326 audit(2000000050.729:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19169 comm="syz.1.3835" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc278d9aeb9 code=0x0 [ 402.140615][ T34] snd_usb_pod 13-1:1.1: Line 6 Pocket POD now attached [ 402.219152][T19174] syzkaller0: entered promiscuous mode [ 402.221184][T19174] syzkaller0: entered allmulticast mode [ 402.355547][ T34] usb 13-1: USB disconnect, device number 5 [ 402.359626][ T34] snd_usb_pod 13-1:1.1: Line 6 Pocket POD now disconnected [ 402.382777][ T40] audit: type=1400 audit(2000000050.989:1684): avc: denied { create } for pid=19175 comm="syz.9.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 402.594083][T19191] bond0: (slave syz_tun): Releasing backup interface [ 402.803818][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.809207][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.813133][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.816764][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.819448][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.842541][T19193] speed is unknown, defaulting to 1000 [ 402.902479][ T9289] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.100695][ T9289] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.131567][T19193] chnl_net:caif_netlink_parms(): no params data found [ 403.174948][T19193] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.177295][T19193] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.179584][T19193] bridge_slave_0: entered allmulticast mode [ 403.182931][T19193] bridge_slave_0: entered promiscuous mode [ 403.186114][T19193] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.188404][T19193] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.191151][T19193] bridge_slave_1: entered allmulticast mode [ 403.193938][T19193] bridge_slave_1: entered promiscuous mode [ 403.208370][T19193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.216175][T19193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.230813][T19193] team0: Port device team_slave_0 added [ 403.234059][T19193] team0: Port device team_slave_1 added [ 403.246928][T19193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.249154][T19193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.257435][T19193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.273419][ T9289] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.279725][T19193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.283320][T19193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.291686][T19193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.314751][T19193] hsr_slave_0: entered promiscuous mode [ 403.317677][T19193] hsr_slave_1: entered promiscuous mode [ 403.320293][T19193] debugfs: 'hsr0' already exists in 'hsr' [ 403.322226][T19193] Cannot create hsr debugfs directory [ 403.405875][T19193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.406630][T19212] netlink: 'syz.8.3847': attribute type 1 has an invalid length. [ 403.415091][T19212] Cannot find add_set index 65532 as target [ 403.470300][ T9289] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.488269][T19193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.502126][T19219] loop5: detected capacity change from 0 to 7 [ 403.506222][ C1] blk_print_req_error: 10 callbacks suppressed [ 403.506233][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.512286][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.516407][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.520313][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.524473][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.528352][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.532404][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.535428][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.538082][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.541217][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.543978][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.546966][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.551355][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.555316][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.558555][T18252] ldm_validate_partition_table(): Disk read failed. [ 403.560890][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.564850][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.569067][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.573036][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.577822][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 403.580978][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 403.583708][T18252] Dev loop5: unable to read RDB block 0 [ 403.586014][T18252] loop5: unable to read partition table [ 403.588026][T18252] loop5: partition table beyond EOD, truncated [ 403.596415][T19193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.601821][T19219] ldm_validate_partition_table(): Disk read failed. [ 403.607926][T19219] Dev loop5: unable to read RDB block 0 [ 403.616771][T19219] loop5: unable to read partition table [ 403.620343][T19219] loop5: partition table beyond EOD, truncated [ 403.623571][T19219] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 403.625858][T19221] ptrace attach of "/syz-executor exec"[19222] was attempted by "/syz-executor exec"[19221] [ 403.944064][ T9289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.949393][ T9289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.953988][ T9289] bond0 (unregistering): Released all slaves [ 404.058474][ T9289] bond1 (unregistering): Released all slaves [ 404.151979][T19246] can0: slcan on pty22. [ 404.158608][ T29] sy: Port: 1 Link DOWN [ 404.159375][T19235] speed is unknown, defaulting to 1000 [ 404.277163][T19244] can0 (unregistered): slcan off pty22. [ 404.385123][T19260] input: syz1 as /devices/virtual/input/input108 [ 404.394285][T19260] netlink: 'syz.1.3858': attribute type 2 has an invalid length. [ 404.397660][T19260] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3858'. [ 404.444616][T19193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 404.452076][T19193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 404.459289][T19193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.483903][T19193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.524498][ T40] audit: type=1400 audit(2000000053.129:1685): avc: denied { accept } for pid=19262 comm="syz.1.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.689908][ T9289] hsr_slave_0: left promiscuous mode [ 404.697757][ T9289] hsr_slave_1: left promiscuous mode [ 404.700720][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.703786][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.710450][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.712925][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.734675][ T9289] veth1_macvtap: left promiscuous mode [ 404.736522][ T9289] veth0_macvtap: left promiscuous mode [ 404.738357][ T9289] veth1_vlan: left promiscuous mode [ 404.740633][ T9289] veth0_vlan: left promiscuous mode [ 404.884607][ T5947] Bluetooth: hci1: command tx timeout [ 404.979987][ T34] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 405.093964][ T9289] team0 (unregistering): Port device team_slave_1 removed [ 405.124156][ T9289] team0 (unregistering): Port device team_slave_0 removed [ 405.140180][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 405.143213][ T34] usb 6-1: too many configurations: 214, using maximum allowed: 8 [ 405.147970][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 405.152137][ T34] usb 6-1: can't read configurations, error -61 [ 405.175439][ T9257] smc: removing ib device sy [ 405.290048][ T34] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 405.342025][T19291] input: syz0 as /devices/virtual/input/input109 [ 405.360864][T18252] udevd[18252]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 405.426215][T19193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.457732][T19193] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.461462][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 405.465635][ T34] usb 6-1: too many configurations: 214, using maximum allowed: 8 [ 405.485331][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 405.488494][ T34] usb 6-1: can't read configurations, error -61 [ 405.493326][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.495707][ T9310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.495716][ T34] usb usb6-port1: attempt power cycle [ 405.501420][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3863'. [ 405.504272][T19297] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3863'. [ 405.508876][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.511199][ T9310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.670383][T19308] syz_tun: entered promiscuous mode [ 405.680141][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3865'. [ 405.706126][T19308] syz_tun (unregistering): left promiscuous mode [ 405.755767][T19193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.840310][ T34] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 405.870528][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 405.884071][ T34] usb 6-1: too many configurations: 214, using maximum allowed: 8 [ 405.891288][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 405.893716][ T34] usb 6-1: can't read configurations, error -61 [ 405.937529][T19193] veth0_vlan: entered promiscuous mode [ 405.946235][T19193] veth1_vlan: entered promiscuous mode [ 405.967125][T19193] veth0_macvtap: entered promiscuous mode [ 405.971714][T19193] veth1_macvtap: entered promiscuous mode [ 405.983866][T19193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.990660][T19193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.999168][ T9288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.003452][T19328] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 406.011879][ T9297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.024460][ T34] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 406.040931][ T9297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.043751][ T9297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.064570][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 406.066638][ T34] usb 6-1: too many configurations: 214, using maximum allowed: 8 [ 406.068877][ T9288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.070354][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 406.072111][ T9288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.074169][ T34] usb 6-1: can't read configurations, error -61 [ 406.079525][ T34] usb usb6-port1: unable to enumerate USB device [ 406.124761][ T9288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.127267][ T9288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.143102][ T40] audit: type=1400 audit(2000000054.749:1686): avc: denied { mounton } for pid=19193 comm="syz-executor" path="/syzkaller.UuYoV4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=121283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 406.168088][T19342] xt_limit: Overflow, try lower: 271964/0 [ 406.219430][T19344] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 406.238087][T19346] syzkaller0: entered promiscuous mode [ 406.240200][T19346] syzkaller0: entered allmulticast mode [ 406.249336][T19349] netlink: 'syz.4.3872': attribute type 1 has an invalid length. [ 406.394256][T19361] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3874'. [ 406.960027][ T5947] Bluetooth: hci1: command tx timeout [ 407.349693][T19397] netlink: 190972 bytes leftover after parsing attributes in process `syz.8.3886'. [ 407.405349][T19399] tmpfs: Invalid uid '0x00000000ffffffff' [ 407.575960][ T40] audit: type=1800 audit(2000000056.179:1687): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3884" name="/" dev="fuse" ino=9 res=0 errno=0 [ 407.800695][ T34] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 407.834988][T19422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3894'. [ 407.955853][ T34] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.959538][ T34] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 407.965135][ T34] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.969226][ T34] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 407.974261][ T34] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 407.980961][ T34] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.981683][T19429] netlink: 'syz.1.3895': attribute type 1 has an invalid length. [ 407.984852][ T34] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.988100][T19429] netlink: 'syz.1.3895': attribute type 1 has an invalid length. [ 407.992531][ T34] usb 13-1: Product: syz [ 407.996650][ T34] usb 13-1: Manufacturer: syz [ 408.003507][ T34] cdc_wdm 13-1:1.0: skipping garbage [ 408.005261][ T34] cdc_wdm 13-1:1.0: skipping garbage [ 408.008330][ T34] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 408.010950][ T34] cdc_wdm 13-1:1.0: Unknown control protocol [ 408.203728][T17792] usb 13-1: USB disconnect, device number 6 [ 408.232122][T19442] program syz.4.3902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.845784][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.854843][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.859995][ T29] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 408.863795][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.868374][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.872129][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.889904][ T6001] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 408.894566][ T40] audit: type=1400 audit(2000000057.499:1688): avc: denied { map } for pid=19461 comm="syz.1.3909" path="socket:[119502]" dev="sockfs" ino=119502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 408.900483][T19465] speed is unknown, defaulting to 1000 [ 409.011170][ T29] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 409.014055][ T29] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 409.017293][ T29] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 409.020852][ T29] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 409.024326][ T29] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 409.029752][ T29] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 409.035978][ T29] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 409.039862][ T29] usb 13-1: Product: syz [ 409.041400][ T29] usb 13-1: Manufacturer: syz [ 409.048226][ T29] cdc_wdm 13-1:1.0: skipping garbage [ 409.050845][ T5947] Bluetooth: hci1: command tx timeout [ 409.051906][ T29] cdc_wdm 13-1:1.0: skipping garbage [ 409.055442][ T29] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 409.057318][ T29] cdc_wdm 13-1:1.0: Unknown control protocol [ 409.060137][ T6001] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.064096][ T6001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 409.068026][ T6001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 409.071353][ T6001] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 409.075993][ T6001] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.079047][ T6001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.085599][ T6001] usb 9-1: config 0 descriptor?? [ 409.087514][T19465] chnl_net:caif_netlink_parms(): no params data found [ 409.162320][T19465] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.164766][T19465] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.166993][T19465] bridge_slave_0: entered allmulticast mode [ 409.169669][T19465] bridge_slave_0: entered promiscuous mode [ 409.172986][T19465] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.175295][T19465] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.177689][T19465] bridge_slave_1: entered allmulticast mode [ 409.180399][T19465] bridge_slave_1: entered promiscuous mode [ 409.197484][T19465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.202889][T19465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.217656][T19465] team0: Port device team_slave_0 added [ 409.220836][T19465] team0: Port device team_slave_1 added [ 409.234518][T19465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.236780][T19465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.245209][T19465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.251337][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.251663][T19465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.253235][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.256123][T19465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.258059][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.268655][T19465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.271141][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.277207][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.279632][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.282064][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.284498][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.286915][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.289360][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.292717][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.294866][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.297306][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.299737][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.302296][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.304340][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.306169][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.307182][T19465] hsr_slave_0: entered promiscuous mode [ 409.308257][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.311600][T19465] hsr_slave_1: entered promiscuous mode [ 409.312066][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.314764][T19465] debugfs: 'hsr0' already exists in 'hsr' [ 409.316722][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.318747][T19465] Cannot create hsr debugfs directory [ 409.321028][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.321253][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.321442][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.329488][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.331650][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.333708][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.335572][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.337557][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.339398][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.341388][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.343409][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.345243][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.347427][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.349415][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.351418][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.353429][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.355296][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.357279][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.359247][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.361090][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.363413][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.365391][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.367225][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.369182][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.371484][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.373440][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.375884][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.378159][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.380607][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.382935][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.385373][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.387837][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.390271][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.392731][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.395012][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.397386][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.399777][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.402005][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.404441][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.406838][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.409070][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.411399][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.413827][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.416265][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.418486][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.420823][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.423282][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.425521][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.427882][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.430342][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.432792][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.435319][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.437703][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.439938][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.442371][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.444806][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.447046][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.449444][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.452071][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.454341][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.456937][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.459239][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.461646][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.464107][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.466516][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.468744][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.471086][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.473531][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.475954][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.478329][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.480580][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.482959][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.485367][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.488593][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.491268][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.493891][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.496577][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.499181][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.501830][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.504318][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.507039][ C0] cdc_wdm 13-1:1.0: Stall on int endpoint [ 409.509330][ C0] cdc_wdm 13-1:1.0: Cannot schedule work [ 409.511604][ C0] cdc_wdm 13-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 409.515820][ T29] usb 13-1: USB disconnect, device number 7 [ 409.706457][ T6001] usbhid 9-1:0.0: can't add hid device: -71 [ 409.708527][ T6001] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 409.713453][ T6001] usb 9-1: USB disconnect, device number 20 [ 409.898110][T19465] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 409.904381][T19465] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 409.906595][T19498] netlink: 'syz.1.3912': attribute type 2 has an invalid length. [ 409.909071][T19498] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3912'. [ 409.910775][T19465] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 409.917792][T19465] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 409.951604][ T40] audit: type=1400 audit(2000000058.559:1689): avc: denied { unmount } for pid=14136 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 409.974462][T19465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.977461][T19517] netlink: zone id is out of range [ 409.979193][T19517] netlink: zone id is out of range [ 409.981799][T19517] netlink: zone id is out of range [ 409.983791][T19465] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.983883][T19517] netlink: zone id is out of range [ 409.988402][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.990624][ T9289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.990964][T19517] netlink: zone id is out of range [ 409.997243][T19517] netlink: zone id is out of range [ 409.997528][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.999256][T19517] netlink: zone id is out of range [ 410.001512][ T9289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.007040][T19517] netlink: zone id is out of range [ 410.009119][T19517] netlink: zone id is out of range [ 410.054206][T19523] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 410.056249][T19523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.058820][T19523] vhci_hcd vhci_hcd.0: Device attached [ 410.118903][T19532] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3915'. [ 410.134464][T19465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.248346][ T40] audit: type=1400 audit(2000000058.849:1690): avc: denied { setattr } for pid=19543 comm="syz.8.3918" name="PACKET" dev="sockfs" ino=122118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.248503][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3918'. [ 410.300663][ T6021] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 410.303136][T19465] veth0_vlan: entered promiscuous mode [ 410.308354][T19465] veth1_vlan: entered promiscuous mode [ 410.323622][T19465] veth0_macvtap: entered promiscuous mode [ 410.327835][T19465] veth1_macvtap: entered promiscuous mode [ 410.336426][T19465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.346385][T19465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.357290][ T9297] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.363051][ T9297] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.365876][ T9297] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.369180][ T9297] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.409485][ T9297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.415319][ T9297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.427507][ T9288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.437547][ T9288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.560763][T19551] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 410.677728][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3924'. [ 410.678176][T19582] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 410.682374][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3924'. [ 410.883311][T19524] vhci_hcd: connection reset by peer [ 410.885600][ T9310] vhci_hcd vhci_hcd.1: stop threads [ 410.887290][ T9310] vhci_hcd vhci_hcd.1: release socket [ 410.899864][ T9310] vhci_hcd vhci_hcd.1: disconnect device [ 410.975230][ T5947] Bluetooth: hci3: command tx timeout [ 411.120161][ T5947] Bluetooth: hci1: command tx timeout [ 411.171487][T19631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 411.181998][T19631] exFAT-fs (nullb0): invalid boot record signature [ 411.184797][T19631] exFAT-fs (nullb0): failed to read boot sector [ 411.187431][T19631] exFAT-fs (nullb0): failed to recognize exfat type [ 411.257040][T19638] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 411.312270][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3938'. [ 411.315158][T19644] net_ratelimit: 62 callbacks suppressed [ 411.315168][T19644] openvswitch: netlink: Missing key (keys=40, expected=80) [ 411.581823][ T40] audit: type=1400 audit(2000000060.189:1691): avc: denied { setopt } for pid=19656 comm="syz.8.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 411.696021][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3948'. [ 411.699653][T19678] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3948'. [ 411.798479][T19686] netlink: 'syz.8.3952': attribute type 10 has an invalid length. [ 411.807995][T19686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.812479][T19686] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 411.840488][T19688] qnx6: unable to read the first superblock [ 411.842487][T19688] qnx6: unable to read the first superblock [ 411.844457][T19688] qnx6: unable to read the first superblock [ 411.850901][T19688] QAT: Invalid ioctl -2144835806 [ 412.125406][T19701] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 412.181658][T19712] bridge_slave_0: invalid flags given to default FDB implementation [ 412.182407][T19714] netlink: 'syz.1.3959': attribute type 1 has an invalid length. [ 412.194927][T19714] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 412.213218][T19717] input: syz1 as /devices/virtual/input/input110 [ 412.314515][T19725] [U]  [ 412.345077][T19730] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3964'. [ 412.373192][T19731] delete_channel: no stack [ 412.491414][ T40] audit: type=1400 audit(2000000061.099:1692): avc: denied { listen } for pid=19748 comm="syz.8.3969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 412.690673][ T6001] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 412.733850][T19776] overlay: Bad value for 'workdir' [ 412.843867][ T6001] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.847596][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.847616][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 412.847629][ T6001] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.859108][ T6001] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.862969][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.868028][ T6001] usb 6-1: config 0 descriptor?? [ 413.040564][ T5947] Bluetooth: hci3: command tx timeout [ 413.057967][T19793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=19793 comm=syz.4.3979 [ 413.289648][ T6001] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 413.417112][T19813] ip6t_REJECT: ECHOREPLY is not supported [ 413.422931][T19815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3988'. [ 413.572097][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3989'. [ 413.654588][T19828] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 413.755337][T19836] batman_adv: batadv0: Adding interface: gretap1 [ 413.757372][T19836] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.766377][T19836] batman_adv: batadv0: Interface activated: gretap1 [ 413.770272][T19836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.806474][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3994'. [ 413.812299][T19840] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 414.351776][T19817] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 414.446581][ T40] audit: type=1326 audit(2000000063.049:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.4.3996" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25c039aeb9 code=0x0 [ 414.776299][T19869] ucma_write: process 373 (syz.8.4000) changed security contexts after opening file descriptor, this is not allowed. [ 414.833136][T19873] netlink: 'syz.8.4001': attribute type 1 has an invalid length. [ 414.926118][T19867] speed is unknown, defaulting to 1000 [ 415.119955][ T64] Bluetooth: hci3: command tx timeout [ 415.227260][ T40] audit: type=1400 audit(2000000063.829:1694): avc: denied { write } for pid=19878 comm="syz.1.4003" lport=33997 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 415.251376][T17792] usb 6-1: USB disconnect, device number 61 [ 415.293565][ T40] audit: type=1400 audit(2000000063.899:1695): avc: denied { write } for pid=19886 comm="syz.8.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 415.429907][ T6021] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 415.460030][T19892] bond0: Error: Cannot enslave bond to itself. [ 415.545858][T19895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.642527][T19932] netlink: 696 bytes leftover after parsing attributes in process `syz.8.4012'. [ 415.652185][T19933] fuse: Bad value for 'fd' [ 415.725502][T19942] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 415.728158][T19942] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4014'. [ 415.809588][T19953] loop6: detected capacity change from 0 to 7 [ 415.813392][T19953] Dev loop6: unable to read RDB block 7 [ 415.815356][T19953] loop6: unable to read partition table [ 415.817244][T19953] loop6: partition table beyond EOD, truncated [ 415.819320][T19953] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 415.840642][ T5947] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 415.845989][ T64] Bluetooth: hci0: command 0x0401 tx timeout [ 415.901439][T19904] cgroup: fork rejected by pids controller in /syz5 [ 415.966639][T19968] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4018'. [ 416.143140][T19980] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 416.208586][T19987] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 416.218929][T19986] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 416.221921][ T40] audit: type=1400 audit(2000000064.819:1696): avc: denied { read } for pid=19988 comm="syz.4.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 416.253041][T19993] 9p: Bad value for 'rq' [ 416.253372][T19994] 9p: Bad value for 'rq' [ 416.285727][T20000] loop6: detected capacity change from 0 to 7 [ 416.288715][T20000] Dev loop6: unable to read RDB block 7 [ 416.291744][T20000] loop6: unable to read partition table [ 416.293749][T20000] loop6: partition table beyond EOD, truncated [ 416.295824][T20000] loop_reread_partitions: partition scan of loop6 (被x q) failed (rc=-5) [ 416.333815][T19989] sp0: Synchronizing with TNC [ 416.395805][T19998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4023'. [ 416.798120][T20043] tmpfs: Unknown parameter 'inodeP2' [ 416.805087][T20043] netlink: 'syz.5.4040': attribute type 1 has an invalid length. [ 416.827566][T20043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.832257][T20043] __nla_validate_parse: 2 callbacks suppressed [ 416.832269][T20043] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4040'. [ 416.872373][ T40] audit: type=1804 audit(2000000065.479:1697): pid=20048 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.4041" name="file0" dev="hugetlbfs" ino=123536 res=1 errno=0 [ 416.882845][T20049] overlayfs: failed to resolve './file0': -2 [ 417.125285][T20069] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 417.128624][T20069] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 417.135243][T20069] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.4047'. [ 417.210303][ T64] Bluetooth: hci3: command tx timeout [ 417.418513][ T40] audit: type=1400 audit(2000000066.019:1698): avc: denied { connect } for pid=20084 comm="syz.5.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 417.760283][ T6009] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 417.900447][ T6009] usb 10-1: device descriptor read/64, error -71 [ 417.900875][T20104] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 418.084526][T20117] netlink: 400 bytes leftover after parsing attributes in process `syz.4.4059'. [ 418.087586][T20117] openvswitch: netlink: Flow key attr not present in new flow. [ 418.120688][ T40] audit: type=1400 audit(2000000066.729:1699): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49580 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 418.131235][ T40] audit: type=1400 audit(2000000066.729:1700): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=49580 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 418.149135][ T6009] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 418.208387][T20121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.306533][ T6009] usb 10-1: device descriptor read/64, error -71 [ 418.310714][T20121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.406829][T20121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.410446][ T6009] usb usb10-port1: attempt power cycle [ 418.511489][T20121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.586536][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4067'. [ 418.597188][ T9309] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.626800][T20145] team0 (unregistering): Port device team_slave_0 removed [ 418.632059][T20145] team0 (unregistering): Port device team_slave_1 removed [ 418.641482][T17811] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 418.646967][ T89] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.655803][ T89] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.668787][ T9303] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.715568][T20149] ALSA: mixer_oss: invalid OSS volume '' [ 418.760082][ T6009] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 418.779089][T20158] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 418.780519][ T6009] usb 10-1: device descriptor read/8, error -71 [ 418.792690][T17811] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.808609][T17811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 418.814281][T17811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 418.818396][T17811] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.818989][T20162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4074'. [ 418.824151][T17811] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.830886][T17811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.836153][T17811] usb 6-1: config 0 descriptor?? [ 419.020046][ T6009] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 419.042589][ T6009] usb 10-1: device descriptor read/8, error -71 [ 419.046685][T20168] speed is unknown, defaulting to 1000 [ 419.150105][ T6009] usb usb10-port1: unable to enumerate USB device [ 419.188648][ T9309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.191579][ T9309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.244091][T20136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.249420][T20136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.259601][T17811] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 419.618739][T20191] team0: Device gtp0 is of different type [ 419.923979][ T40] audit: type=1400 audit(2000000068.529:1701): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 419.931794][ T40] audit: type=1400 audit(2000000068.529:1702): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 420.003086][T20203] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 420.036761][T20206] QAT: Invalid ioctl -2144835806 [ 420.081726][T20212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4086'. [ 420.103708][ T40] audit: type=1400 audit(2000000068.709:1703): avc: denied { read } for pid=20207 comm="syz.8.4085" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 420.113725][ T40] audit: type=1400 audit(2000000068.709:1704): avc: denied { open } for pid=20207 comm="syz.8.4085" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 420.167500][ T40] audit: type=1400 audit(2000000068.769:1705): avc: denied { ioctl } for pid=20207 comm="syz.8.4085" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 420.296358][T20221] cgroup2: Unknown parameter 'euid' [ 420.408669][T20227] loop6: detected capacity change from 0 to 7 [ 420.412909][T18252] Dev loop6: unable to read RDB block 7 [ 420.414718][T18252] loop6: unable to read partition table [ 420.416681][T18252] loop6: partition table beyond EOD, truncated [ 420.422269][T20227] Dev loop6: unable to read RDB block 7 [ 420.424621][T20227] loop6: unable to read partition table [ 420.427081][T20227] loop6: partition table beyond EOD, truncated [ 420.429169][T20227] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 420.641250][T20233] speed is unknown, defaulting to 1000 [ 421.389985][ T6021] usb 6-1: reset high-speed USB device number 62 using dummy_hcd [ 421.556975][ T6021] usb 6-1: device firmware changed [ 421.563195][ T9] usb 6-1: USB disconnect, device number 62 [ 421.565568][ T40] audit: type=1326 audit(2000000070.169:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20260 comm="syz.5.4099" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faba619aeb9 code=0x0 [ 421.584953][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4100'. [ 421.585012][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4100'. [ 421.587989][T20264] netlink: 'syz.4.4100': attribute type 30 has an invalid length. [ 421.591136][T20265] netlink: 'syz.4.4100': attribute type 30 has an invalid length. [ 421.597578][ T9302] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.610532][ T9302] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.614191][ T9302] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.619434][T20265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20265 comm=syz.4.4100 [ 421.619639][ T9302] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.655554][T20268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4101'. [ 421.720012][ T9] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 421.764193][T20277] policy can only be matched on NF_INET_PRE_ROUTING [ 421.764210][T20277] unable to load match [ 421.769453][T20276] netlink: 'syz.4.4103': attribute type 1 has an invalid length. [ 421.790208][T20276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.793108][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4103'. [ 421.796354][T20276] bond1: entered allmulticast mode [ 421.808060][T20277] bond1: (slave ip6gretap1): making interface the new active one [ 421.810813][T20277] ip6gretap1: entered allmulticast mode [ 421.813374][T20277] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 421.884648][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.894915][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.898899][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.905322][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.909170][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.920517][ T9] usb 6-1: config 0 descriptor?? [ 422.168579][T20299] mkiss: ax0: crc mode is auto. [ 422.347765][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 422.349742][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 422.359590][ T9] usb 6-1: USB disconnect, device number 63 [ 422.530038][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4111'. [ 422.534549][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4111'. [ 422.565243][T20311] netlink: 'syz.5.4112': attribute type 4 has an invalid length. [ 422.573521][T20311] netlink: 'syz.5.4112': attribute type 4 has an invalid length. [ 422.722164][T20310] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 422.736128][T20317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4115'. [ 422.764178][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 422.769522][T20319] syzkaller0: entered promiscuous mode [ 422.772493][T20319] syzkaller0: entered allmulticast mode [ 422.833736][T20330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4119'. [ 422.882583][ T40] audit: type=1326 audit(2000000071.489:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.1.4121" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc278d9aeb9 code=0x7ffc0000 [ 422.892072][ T40] audit: type=1326 audit(2000000071.489:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.1.4121" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc278d9aeb9 code=0x7ffc0000 [ 422.902515][T20337] tmpfs: Unknown parameter 'gRpquota_inode_iardlimit' [ 422.926420][T20343] netlink: 'syz.4.4120': attribute type 1 has an invalid length. [ 422.928895][T20343] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4120'. [ 422.948576][T20347] loop6: detected capacity change from 0 to 7 [ 422.951765][T20347] Dev loop6: unable to read RDB block 7 [ 422.953528][T20347] loop6: unable to read partition table [ 422.955430][T20347] loop6: partition table beyond EOD, truncated [ 422.960013][T20347] loop_reread_partitions: partition scan of loop6 (被x RE) failed (rc=-5) [ 423.091988][T20360] syzkaller0: entered promiscuous mode [ 423.094372][T20360] syzkaller0: entered allmulticast mode [ 423.275287][T20375] loop6: detected capacity change from 0 to 7 [ 423.278270][T18252] Dev loop6: unable to read RDB block 7 [ 423.280439][T18252] loop6: unable to read partition table [ 423.282295][T18252] loop6: partition table beyond EOD, truncated [ 423.286169][T20375] Dev loop6: unable to read RDB block 7 [ 423.288005][T20375] loop6: unable to read partition table [ 423.290175][T20375] loop6: partition table beyond EOD, truncated [ 423.293882][T20375] loop_reread_partitions: partition scan of loop6 (被x ER) failed (rc=-5) [ 423.316937][T20377] JFS: charset not found [ 423.323352][T20379] openvswitch: netlink: Flow actions attr not present in new flow. [ 423.417511][T20382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.670138][ T29] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 423.677642][ T40] audit: type=1400 audit(2000000072.279:1709): avc: denied { read } for pid=20390 comm="syz.8.4141" path="socket:[128088]" dev="sockfs" ino=128088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 423.819911][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 423.824054][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.827124][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.830479][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.834656][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.840289][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.844002][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.981153][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4142'. [ 423.995806][T20394] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 424.050486][ T29] usb 10-1: GET_CAPABILITIES returned 0 [ 424.052386][ T29] usbtmc 10-1:16.0: can't read capabilities [ 424.233319][T20399] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 424.235698][T20399] overlayfs: failed to set xattr on upper [ 424.237682][T20399] overlayfs: ...falling back to redirect_dir=nofollow. [ 424.240878][T20399] overlayfs: ...falling back to metacopy=off. [ 424.243605][T20399] overlayfs: ...falling back to index=off. [ 424.246094][T20399] overlayfs: ...falling back to uuid=null. [ 424.262293][ T29] usb 10-1: USB disconnect, device number 9 [ 424.381813][T20401] loop6: detected capacity change from 0 to 524288000 [ 424.431924][T20401] loop6: detected capacity change from 524288000 to 0 [ 424.440928][T20401] overlayfs: failed to set uuid (406/file0, err=-1); falling back to uuid=null. [ 424.444816][T20401] overlayfs: failed to verify upper root origin [ 424.683320][ T40] audit: type=1400 audit(2000000073.289:1710): avc: denied { create } for pid=20421 comm="syz.8.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.692139][ T40] audit: type=1400 audit(2000000073.289:1711): avc: denied { ioctl } for pid=20421 comm="syz.8.4149" path="socket:[128111]" dev="sockfs" ino=128111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.755317][T20429] SQUASHFS error: Failed to read block 0x0: -5 [ 424.757340][T20429] unable to read squashfs_super_block [ 424.770547][T20431] netlink: 'syz.8.4152': attribute type 3 has an invalid length. [ 424.775636][T20431] sctp: [Deprecated]: syz.8.4152 (pid 20431) Use of int in maxseg socket option. [ 424.775636][T20431] Use struct sctp_assoc_value instead [ 424.905057][ T40] audit: type=1400 audit(2000000073.509:1712): avc: granted { setsecparam } for pid=20455 comm="syz.1.4159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 424.933598][T20459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4159'. [ 424.943336][T20463] misc userio: The device must be registered before sending interrupts [ 424.956977][ T40] audit: type=1400 audit(2000000073.559:1713): avc: granted { setsecparam } for pid=20455 comm="syz.1.4159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 424.960667][T20462] netlink: 'syz.8.4160': attribute type 1 has an invalid length. [ 425.057355][T20465] netlink: 'syz.5.4162': attribute type 21 has an invalid length. [ 425.060525][T20461] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 425.061079][T20465] netlink: 'syz.5.4162': attribute type 39 has an invalid length. [ 425.162936][ T40] audit: type=1400 audit(2000000073.769:1714): avc: denied { write } for pid=20466 comm="syz.8.4163" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 425.238064][T20467] speed is unknown, defaulting to 1000 [ 425.366837][T20470] speed is unknown, defaulting to 1000 [ 425.651132][ T40] audit: type=1400 audit(2000000074.259:1715): avc: denied { append } for pid=20496 comm="syz.1.4170" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 425.722208][T20499] bond2: option xmit_hash_policy: invalid value (6) [ 425.727514][T20499] bond2 (unregistering): Released all slaves [ 425.733438][T20503] openvswitch: netlink: Key type 193 is out of range max 32 [ 425.734597][T20504] openvswitch: netlink: Key type 193 is out of range max 32 [ 425.756190][T20503] binder: 20502:20503 ioctl 40046205 0 returned -22 [ 425.815461][T20507] cgroup2: Unknown parameter 'memory_hugetlb_' [ 425.857898][T20507] kvm: kvm [20506]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 425.861557][T20507] kvm: kvm [20506]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 425.918882][T20507] kvm_intel: kvm [20506]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 425.934774][T20507] kvm: kvm [20506]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 425.937986][T20507] kvm: kvm [20506]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 425.982911][T20516] dvmrp8: entered allmulticast mode [ 426.260278][ T40] audit: type=1400 audit(2000000074.859:1716): avc: denied { write } for pid=20526 comm="syz.1.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 426.372408][T20543] overlay: ./bus is not a directory [ 426.399741][T20540] bridge_slave_0: left allmulticast mode [ 426.402773][T20540] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.748278][T20572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4192'. [ 426.812780][T17792] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 426.960257][T17792] usb 6-1: Using ep0 maxpacket: 32 [ 426.972231][T17792] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 426.976244][T17792] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 426.990061][T17792] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 426.994834][T17792] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 426.998866][T17792] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 427.004785][T17792] usb 6-1: config 0 interface 0 has no altsetting 0 [ 427.009292][T17792] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 427.013653][T17792] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 427.016342][T17792] usb 6-1: Product: syz [ 427.017665][T17792] usb 6-1: Manufacturer: syz [ 427.019174][T17792] usb 6-1: SerialNumber: syz [ 427.024583][T17792] usb 6-1: config 0 descriptor?? [ 427.027959][T17792] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 427.033228][T17792] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 427.233271][T20561] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 427.236545][T20583] trusted_key: encrypted_key: insufficient parameters specified [ 427.238119][T17792] usb 6-1: USB disconnect, device number 64 [ 427.249288][T17792] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 427.274174][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4197'. [ 427.482734][T20593] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4200'. [ 427.559172][T20595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.570656][T20595] CIFS mount error: No usable UNC path provided in device string! [ 427.570656][T20595] [ 427.575079][T20595] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 427.635733][T20597] __nla_validate_parse: 1 callbacks suppressed [ 427.635751][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4202'. [ 427.705678][T20600] Can't find ip_set type bitmap:ip [ 427.831815][T20613] qnx6: unable to read the first superblock [ 427.834476][T20613] qnx6: unable to read the first superblock [ 427.837023][T20613] qnx6: unable to read the first superblock [ 428.027293][T20633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20633 comm=syz.4.4213 [ 428.066526][T20637] validate_nla: 65 callbacks suppressed [ 428.066538][T20637] netlink: 'syz.5.4215': attribute type 13 has an invalid length. [ 428.186288][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4217'. [ 428.249024][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4215'. [ 428.284432][T20641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20641 comm=syz.8.4216 [ 428.419136][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 428.419153][ T40] audit: type=1400 audit(2000000077.019:1721): avc: denied { mounton } for pid=20665 comm="syz.4.4222" path="mnt:[4026532933]" dev="nsfs" ino=4026532933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 428.562425][T20663] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 428.581684][T20682] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4225'. [ 428.676419][T20685] overlayfs: missing 'lowerdir' [ 429.506234][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4233'. [ 430.056817][T20722] netlink: 'syz.8.4239': attribute type 9 has an invalid length. [ 430.060448][T20722] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4239'. [ 430.297402][T20732] syzkaller0: entered promiscuous mode [ 430.299713][T20732] syzkaller0: entered allmulticast mode [ 430.694229][ T40] audit: type=1400 audit(2000000079.299:1722): avc: denied { setattr } for pid=20742 comm="syz.5.4245" name="radio2" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 430.741270][T20748] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 431.339788][ T40] audit: type=1400 audit(2000000079.939:1723): avc: denied { setattr } for pid=20779 comm="syz.5.4259" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 431.348460][ T40] audit: type=1400 audit(2000000079.949:1724): avc: denied { lock } for pid=20779 comm="syz.5.4259" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 431.534746][ T40] audit: type=1400 audit(2000000080.139:1725): avc: denied { setopt } for pid=20787 comm="syz.8.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 431.645379][ T40] audit: type=1326 audit(2000000080.249:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.5.4260" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faba619aeb9 code=0x0 [ 431.659188][T20795] random: crng reseeded on system resumption [ 431.691072][T20795] Restarting kernel threads ... [ 431.696951][T20795] Done restarting kernel threads. [ 431.764220][T20803] syzkaller0: entered promiscuous mode [ 431.765944][T20803] syzkaller0: entered allmulticast mode [ 431.852704][ T40] audit: type=1400 audit(2000000080.459:1727): avc: denied { bind } for pid=20808 comm="syz.4.4266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 431.981790][T20825] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4270'. [ 432.484285][ T40] audit: type=1400 audit(2000000081.089:1728): avc: denied { getopt } for pid=20845 comm="syz.5.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 432.543979][T20846] cdrom: dropping to single frame dma [ 432.606524][T20844] speed is unknown, defaulting to 1000 [ 432.690637][T20845] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 432.985088][T20867] netlink: 'syz.5.4282': attribute type 1 has an invalid length. [ 433.008863][T20867] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4282'. [ 433.049567][T20867] block device autoloading is deprecated and will be removed. [ 433.159407][T20870] binder: Bad value for 'max' [ 433.162728][ T40] audit: type=1326 audit(2000000081.769:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20869 comm="syz.5.4283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba619aeb9 code=0x7ffc0000 [ 433.172130][ T40] audit: type=1326 audit(2000000081.769:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20869 comm="syz.5.4283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba619aeb9 code=0x7ffc0000 [ 433.429997][ T5976] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 433.515094][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 433.515106][ T40] audit: type=1400 audit(2000000082.119:1733): avc: denied { append } for pid=20877 comm="syz.4.4287" name="pfkey" dev="proc" ino=4026533319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 433.584009][T20881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4288'. [ 433.600284][ T5976] usb 10-1: Using ep0 maxpacket: 16 [ 433.615372][ T5976] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 433.618062][ T5976] usb 10-1: config 0 has no interface number 0 [ 433.645248][ T5976] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 433.648445][ T5976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.653034][ T5976] usb 10-1: Product: syz [ 433.654540][ T5976] usb 10-1: Manufacturer: syz [ 433.656010][ T5976] usb 10-1: SerialNumber: syz [ 433.660851][ T5976] usb 10-1: config 0 descriptor?? [ 433.666612][ T5976] hub 10-1:0.132: bad descriptor, ignoring hub [ 433.668494][ T5976] hub 10-1:0.132: probe with driver hub failed with error -5 [ 433.675943][ T5976] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.132/input/input114 [ 433.892767][T20897] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.895960][T20897] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.964598][T20897] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.968700][T20897] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.048618][T20897] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.053883][T20897] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.120373][ T5976] usb 10-1: USB disconnect, device number 10 [ 434.131505][T20897] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.135271][T20897] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.219428][ T40] audit: type=1400 audit(2000000082.819:1734): avc: denied { write } for pid=20898 comm="syz.8.4294" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.228928][ T40] audit: type=1400 audit(2000000082.829:1735): avc: denied { mounton } for pid=20898 comm="syz.8.4294" path="/198/file0" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.249941][ T40] audit: type=1400 audit(2000000082.829:1736): avc: denied { remount } for pid=20898 comm="syz.8.4294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 434.283413][ T9302] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.289969][ T9302] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.299573][ T9302] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.303255][ T9302] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.316643][ T9302] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.322062][ T9302] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.324771][ T40] audit: type=1400 audit(2000000082.929:1737): avc: denied { unmount } for pid=17798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 434.339497][ T1150] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.342706][ T1150] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.368507][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4295'. [ 434.565069][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'. [ 434.568866][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'. [ 434.693652][T20907] speed is unknown, defaulting to 1000 [ 434.704652][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4299'. [ 434.709687][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4299'. [ 435.452868][T20924] dvmrp17: entered allmulticast mode [ 435.494614][T20928] CIFS: iocharset name too long [ 435.677884][T20933] netlink: 'syz.8.4303': attribute type 9 has an invalid length. [ 435.877790][T20944] netlink: 'syz.8.4305': attribute type 1 has an invalid length. [ 435.882984][T20944] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 435.930382][ T40] audit: type=1400 audit(2000000084.529:1738): avc: denied { map } for pid=20948 comm="syz.8.4306" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 435.945367][ T40] audit: type=1400 audit(2000000084.529:1739): avc: denied { execute } for pid=20948 comm="syz.8.4306" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 436.392637][T20960] syzkaller0: entered promiscuous mode [ 436.394824][T20960] syzkaller0: entered allmulticast mode [ 436.457534][T20968] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4310'. [ 436.460844][T20969] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4310'. [ 436.599411][T20979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.601850][T20979] IPv6: NLM_F_CREATE should be set when creating new route [ 436.678679][T20984] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4316'. [ 436.723325][T20987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20987 comm=syz.5.4317 [ 436.768431][T20989] overlayfs: missing 'lowerdir' [ 436.999694][T20992] sctp: [Deprecated]: syz.5.4319 (pid 20992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.999694][T20992] Use struct sctp_sack_info instead [ 437.185309][T20997] speed is unknown, defaulting to 1000 [ 437.665715][T21037] netlink: 'syz.8.4330': attribute type 1 has an invalid length. [ 437.695397][T21037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.740263][T21037] bond1: (slave veth5): Enslaving as an active interface with a down link [ 438.480674][ T64] Bluetooth: hci3: command tx timeout [ 438.582060][T21047] /dev/sr0: Can't open blockdev [ 438.784414][T21049] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 438.824590][T21058] SELinux: security_context_str_to_sid () failed with errno=-22 [ 438.857291][T21056] __nla_validate_parse: 5 callbacks suppressed [ 438.857310][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4334'. [ 438.866073][T21062] binder: 21060:21062 ioctl 8040451b 200000000180 returned -22 [ 439.015879][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4337'. [ 439.380750][T17811] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 439.541420][T17811] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 439.544901][T17811] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.549788][T17811] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 439.555207][T17811] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 439.558514][T17811] usb 13-1: Manufacturer: syz [ 439.565049][T17811] usb 13-1: config 0 descriptor?? [ 439.619988][T17811] rc_core: IR keymap rc-hauppauge not found [ 439.622594][T17811] Registered IR keymap rc-empty [ 439.626342][T17811] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 439.636011][T17811] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input115 [ 439.794965][ T6001] usb 13-1: USB disconnect, device number 8 [ 439.922064][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4348'. [ 439.925806][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4348'. [ 439.988173][T21108] syzkaller0: entered promiscuous mode [ 439.991124][T21108] syzkaller0: entered allmulticast mode [ 440.128657][ T40] audit: type=1400 audit(2000000088.729:1740): avc: denied { map } for pid=21111 comm="syz.4.4352" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 440.136281][ T40] audit: type=1400 audit(2000000088.729:1741): avc: denied { execute } for pid=21111 comm="syz.4.4352" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 440.149340][T21114] MPI: mpi too large (124808 bits) [ 440.233282][T21122] Bluetooth: hci0: unsupported parameter 255 [ 440.235364][T21122] Bluetooth: hci0: unsupported parameter 255 [ 440.719932][ T53] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 440.884003][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4373'. [ 440.906800][ T53] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 440.910177][ T53] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 440.916030][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 440.924317][ T53] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 440.929017][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 440.933760][ T53] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 440.943512][ T53] usb 10-1: string descriptor 0 read error: -22 [ 440.946235][ T53] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 440.950131][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.954439][ T53] usb 10-1: config 0 descriptor?? [ 440.956660][T21147] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.960879][ T53] hub 10-1:0.0: bad descriptor, ignoring hub [ 440.963347][ T53] hub 10-1:0.0: probe with driver hub failed with error -5 [ 440.968941][ T53] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input116 [ 441.050461][ T64] Bluetooth: hci3: command tx timeout [ 441.129957][T21179] speed is unknown, defaulting to 1000 [ 441.238599][ T53] usb 10-1: USB disconnect, device number 11 [ 441.820862][T21192] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4377'. [ 441.822047][ T40] audit: type=1400 audit(2000000090.419:1742): avc: denied { create } for pid=21190 comm="syz.5.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 441.826670][T21192] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4377'. [ 441.838977][ T40] audit: type=1400 audit(2000000090.429:1743): avc: denied { write } for pid=21190 comm="syz.5.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 441.844352][T21192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4377'. [ 441.938256][T21199] openvswitch: netlink: IP tunnel dst address not specified [ 442.007099][T18252] udevd[18252]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 442.014615][T21199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=21199 comm=syz.5.4379 [ 442.160581][T21198] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 442.226046][ T40] audit: type=1400 audit(2000000090.829:1744): avc: denied { execute } for pid=21217 comm="syz.4.4383" path="/proc/484/task/486/net/protocols" dev="proc" ino=4026532944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 442.271331][ T40] audit: type=1400 audit(2000000090.879:1745): avc: denied { write } for pid=21231 comm="syz.5.4385" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 442.290246][ T40] audit: type=1400 audit(2000000090.889:1746): avc: denied { read } for pid=21231 comm="syz.5.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 442.338054][ T40] audit: type=1400 audit(2000000090.939:1747): avc: denied { ioctl } for pid=21231 comm="syz.5.4385" path="socket:[133551]" dev="sockfs" ino=133551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 442.348817][ T40] audit: type=1400 audit(2000000090.949:1748): avc: denied { map } for pid=21233 comm="syz.8.4386" path="/proc/702/net/ip6_flowlabel" dev="proc" ino=4026534369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 443.127064][T21234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 443.131755][T21234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 443.137981][T21234] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 443.150460][T21234] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 443.154881][T21234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.157665][T21234] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 443.165452][T21234] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 443.168589][T21234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 443.171307][T21234] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 443.178104][T21234] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 443.182085][T21234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.184847][T21234] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 443.189080][T21234] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 443.305622][T21247] can0: slcan on ttyprintk. [ 443.311294][T21244] netlink: 'syz.4.4389': attribute type 10 has an invalid length. [ 443.332410][ T5947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.341520][T21244] bond0: (slave wlan1): Opening slave failed [ 443.342931][ T5947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.346252][T21244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4389'. [ 443.349988][T21252] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 9, id = 0 [ 443.354454][ T5947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.359892][T21244] 9pnet: Found fid 0 not clunked [ 443.363741][ T5947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.367331][ T5947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.383236][T21247] can0 (unregistered): slcan off ttyprintk. [ 443.415954][T21248] speed is unknown, defaulting to 1000 [ 443.506355][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4395'. [ 443.660020][ T5976] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 443.700345][T21248] chnl_net:caif_netlink_parms(): no params data found [ 443.790150][T21248] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.793280][T21248] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.796390][T21248] bridge_slave_0: entered allmulticast mode [ 443.800526][T21248] bridge_slave_0: entered promiscuous mode [ 443.805286][T21248] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.808171][T21248] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.809959][ T5976] usb 13-1: Using ep0 maxpacket: 16 [ 443.813476][T21248] bridge_slave_1: entered allmulticast mode [ 443.819499][T21248] bridge_slave_1: entered promiscuous mode [ 443.821813][ T5976] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.825771][ T5976] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.840062][ T5976] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 443.845501][ T5976] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 443.849345][ T5976] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.850969][ T40] audit: type=1400 audit(2000000092.449:1749): avc: denied { name_bind } for pid=21278 comm="syz.5.4400" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 443.862912][T21248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.868835][T21248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.874543][ T5976] usb 13-1: config 0 descriptor?? [ 443.908679][T21248] team0: Port device team_slave_0 added [ 443.912788][T21248] team0: Port device team_slave_1 added [ 443.945868][T21248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.948186][T21248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.959520][T21248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.966592][T21248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.969725][T21248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.980693][T21248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.015314][T21248] hsr_slave_0: entered promiscuous mode [ 444.017706][T21248] hsr_slave_1: entered promiscuous mode [ 444.020042][T21248] debugfs: 'hsr0' already exists in 'hsr' [ 444.021863][T21248] Cannot create hsr debugfs directory [ 444.229872][T21295] Invalid logical block size (3) [ 444.284106][T21295] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 444.289200][ T5976] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 444.299573][T21295] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 444.302324][ T5976] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 444.306074][ T5976] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 444.308729][ T5976] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 444.313409][ T5976] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 444.318546][ T5976] input: HID 0955:7214 Haptics as /devices/virtual/input/input117 [ 444.345414][ T5976] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 444.348941][ T5976] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 444.486000][T21256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.489749][T21256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.550334][T21311] __nla_validate_parse: 2 callbacks suppressed [ 444.550353][T21311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4393'. [ 444.694599][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4407'. [ 444.710613][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4407'. [ 444.799972][T21324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=21324 comm=syz.4.4408 [ 444.890929][ T1422] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 444.894903][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.899745][T21248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.907514][T21248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.916393][T21248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.921556][T21248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.957994][T21342] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 444.995232][T21248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.007308][T21248] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.014518][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.017616][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.025855][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.027921][ T9309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.139260][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 445.139277][ T40] audit: type=1400 audit(2000000093.739:1751): avc: denied { connect } for pid=21356 comm="syz.5.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 445.200618][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 445.200651][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 445.200967][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 445.201014][ T5294] Bluetooth: hci0: command 0x0401 tx timeout [ 445.239474][T21248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.289874][T21248] veth0_vlan: entered promiscuous mode [ 445.302585][T21248] veth1_vlan: entered promiscuous mode [ 445.311920][ T40] audit: type=1400 audit(2000000093.919:1752): avc: denied { create } for pid=21372 comm="syz.5.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 445.322023][ T40] audit: type=1400 audit(2000000093.919:1753): avc: denied { bind } for pid=21372 comm="syz.5.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 445.340513][T21248] veth0_macvtap: entered promiscuous mode [ 445.346672][T21248] veth1_macvtap: entered promiscuous mode [ 445.363465][T21248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.373543][T21248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.383171][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.394066][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.397775][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.408557][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.431803][T21376] set match dimension is over the limit! [ 445.440018][ T64] Bluetooth: hci5: command tx timeout [ 445.449785][T21376] set match dimension is over the limit! [ 445.450221][T21382] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4418'. [ 445.459626][T21376] set match dimension is over the limit! [ 445.462715][T18311] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 445.468679][T21382] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4418'. [ 445.470956][T21376] set match dimension is over the limit! [ 445.488323][T18311] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 445.494088][T21376] set match dimension is over the limit! [ 445.497470][T21376] set match dimension is over the limit! [ 445.501061][T21382] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4418'. [ 445.503535][T18311] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 445.509484][T21376] set match dimension is over the limit! [ 445.512805][T21376] set match dimension is over the limit! [ 445.516407][ T9309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.520531][T21376] set match dimension is over the limit! [ 445.523483][T18311] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 445.528112][ T9309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.532200][T21376] set match dimension is over the limit! [ 445.542419][T21382] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4418'. [ 445.553570][T21382] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4418'. [ 445.562362][T21382] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4418'. [ 445.566310][ T9303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.569787][ T9303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.580895][T21382] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4418'. [ 445.589936][ T6009] usb 13-1: reset high-speed USB device number 9 using dummy_hcd [ 445.661706][ T40] audit: type=1400 audit(2000000094.259:1754): avc: denied { accept } for pid=21389 comm="syz.4.4421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 445.698969][T21394] syzkaller0: entered promiscuous mode [ 445.701865][T21394] syzkaller0: entered allmulticast mode [ 445.720275][ T6009] usb 13-1: device descriptor read/64, error -32 [ 445.960196][ T6009] usb 13-1: reset high-speed USB device number 9 using dummy_hcd [ 446.090745][ T6009] usb 13-1: device descriptor read/64, error -32 [ 446.330093][ T6009] usb 13-1: reset high-speed USB device number 9 using dummy_hcd [ 446.351853][ T6009] usb 13-1: device descriptor read/8, error -32 [ 446.612924][T21438] netlink: 'syz.5.4429': attribute type 1 has an invalid length. [ 446.617264][ T40] audit: type=1400 audit(2000000095.219:1755): avc: denied { getopt } for pid=21437 comm="syz.5.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 446.837963][T21452] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 446.843514][T21452] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 446.847411][T21452] CPU: 2 UID: 0 PID: 21452 Comm: syz.4.4432 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.852246][T21452] Tainted: [L]=SOFTLOCKUP [ 446.854194][T21452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.858703][T21452] RIP: 0010:h5_recv+0x108/0x960 [ 446.860953][T21452] Code: 49 c1 ef 03 4b 8d 04 37 48 89 04 24 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 2c 34 a3 f9 48 8b 04 24 <80> 38 00 0f 85 b7 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 446.869190][T21452] RSP: 0018:ffffc90005c87be0 EFLAGS: 00010293 [ 446.871957][T21452] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff8863c6ec [ 446.875469][T21452] RDX: ffff888023858000 RSI: ffffffff8863c734 RDI: ffff888023858000 [ 446.879154][T21452] RBP: ffffc90005c87d70 R08: 0000000000000005 R09: 0000000000000000 [ 446.882429][T21452] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 446.885188][ T40] audit: type=1400 audit(2000000095.489:1756): avc: denied { write } for pid=5919 comm="syz-executor" path="pipe:[7216]" dev="pipefs" ino=7216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 446.885435][T21452] R13: 0000000000000001 R14: dffffc0000000000 R15: 000000000000005f [ 446.897634][T21452] FS: 00007f25c12a26c0(0000) GS:ffff8880d67db000(0000) knlGS:0000000000000000 [ 446.901635][T21452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.904502][T21452] CR2: 00007f25c12a1ff8 CR3: 0000000032043000 CR4: 0000000000352ef0 [ 446.908030][T21452] Call Trace: [ 446.909523][T21452] [ 446.910934][T21452] ? __pfx_h5_recv+0x10/0x10 [ 446.912668][T21452] hci_uart_tty_receive+0x259/0x7e0 [ 446.914544][T21452] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 446.916786][T21452] tty_ioctl+0x909/0x1690 [ 446.918466][T21452] ? __pfx_tty_ioctl+0x10/0x10 [ 446.920385][T21452] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 446.922842][T21452] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 446.925482][T21452] ? selinux_file_ioctl+0x139/0x290 [ 446.927562][T21452] ? selinux_file_ioctl+0xb4/0x290 [ 446.929507][T21452] ? __pfx_tty_ioctl+0x10/0x10 [ 446.931469][T21452] __x64_sys_ioctl+0x18e/0x210 [ 446.933316][T21452] do_syscall_64+0xc9/0xf80 [ 446.935101][T21452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.937417][T21452] RIP: 0033:0x7f25c039aeb9 [ 446.939151][T21452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.946658][T21452] RSP: 002b:00007f25c12a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.949853][T21452] RAX: ffffffffffffffda RBX: 00007f25c0616090 RCX: 00007f25c039aeb9 [ 446.952901][T21452] RDX: 0000200000000100 RSI: 0000000000005412 RDI: 0000000000000003 [ 446.955931][T21452] RBP: 00007f25c0408c1f R08: 0000000000000000 R09: 0000000000000000 [ 446.958974][T21452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.962142][T21452] R13: 00007f25c0616128 R14: 00007f25c0616090 R15: 00007ffc9a18dd08 [ 446.965216][T21452] [ 446.966429][T21452] Modules linked in: [ 446.968968][ T53] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 446.969104][T21452] ---[ end trace 0000000000000000 ]--- [ 446.999944][ T40] audit: type=1400 audit(2000000095.599:1757): avc: denied { read } for pid=5324 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 447.008942][ T40] audit: type=1400 audit(2000000095.599:1758): avc: denied { search } for pid=5324 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.016563][T21452] RIP: 0010:h5_recv+0x108/0x960 [ 447.019366][T21452] Code: 49 c1 ef 03 4b 8d 04 37 48 89 04 24 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 2c 34 a3 f9 48 8b 04 24 <80> 38 00 0f 85 b7 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 447.027448][T21452] RSP: 0018:ffffc90005c87be0 EFLAGS: 00010293 [ 447.030172][T21452] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff8863c6ec [ 447.033518][T21452] RDX: ffff888023858000 RSI: ffffffff8863c734 RDI: ffff888023858000 [ 447.036771][T21452] RBP: ffffc90005c87d70 R08: 0000000000000005 R09: 0000000000000000 [ 447.039874][ T40] audit: type=1400 audit(2000000095.599:1759): avc: denied { search } for pid=5324 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.040340][T21452] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 447.048734][ T40] audit: type=1400 audit(2000000095.599:1760): avc: denied { add_name } for pid=5324 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.060664][T21452] R13: 0000000000000001 R14: dffffc0000000000 R15: 000000000000005f [ 447.064132][T21452] FS: 00007f25c12a26c0(0000) GS:ffff8880d68db000(0000) knlGS:0000000000000000 [ 447.067542][T21452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.097224][T21452] CR2: 000055aba78f9300 CR3: 0000000032043000 CR4: 0000000000352ef0 [ 447.109756][T21452] Kernel panic - not syncing: Fatal exception [ 447.113153][T21452] Kernel Offset: disabled [ 447.114950][T21452] Rebooting in 86400 seconds..