last executing test programs: 9.271818283s ago: executing program 0 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8010) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000001ac0)={0x0, 'batadv0\x00', {0x7}, 0x802}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r9 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r10 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000400)={0x40, 0xa, 0x9, "ef1d913a420deae550"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.055692296s ago: executing program 4 (id=150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000200)={0x20, 0x3f, 0xa0, {0xa0, 0x5, "3440a65f4e0bc8da9cf9b392ee579a13dbd8f05c6074e3097542d4e6192781b1cd91fa89c84dd3027b95568a0fe48dc93cc50730bf5cf475edba0d116766609bae6eb008229edb41af15094ac5c4408bd87aa1d3d073fc000e8956f3e705e89ea38d47260bc1eb68c3ffb2dcaddceb3c6255e9aec0e5a6b867b79a7634488277865db0a712a694b278269d8e610f33b259ed8ffc0e0de9d55de2b62c6eee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.651846619s ago: executing program 2 (id=151): syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_emit_ethernet(0x62, &(0x7f00000193c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60d70c00002c3c0020010000000000000000000000000001fe800000000000000000ffa74585aa3c02000400000000fc020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 5.937392845s ago: executing program 1 (id=154): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = memfd_secret(0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x2c, r2, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48054}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r1, 0x2e, 0x4608, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000008000000000000c140e4fc88000000"], 0x28}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x50}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x98, &(0x7f00000001c0)={0xcf1, 0x4f, 0x14}}) 5.862087355s ago: executing program 0 (id=155): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x18800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8, 0x0, 0x401]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.73875363s ago: executing program 1 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000100001040020b7020000000000000000", @ANYRES32=0x0, @ANYBLOB="244100009ce221b7240012800b00010065727370616e000014000280060002003000000006000e", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=0x0, @ANYBLOB="31fdefcf3df13ebf329446c6ffb1eaf3084cbe1bca2ce9ff61978753d581f68bf102437a965490fd2bfc99da804756c5a78ad3ca9502de2d99d9785a7eebf87eb2d16d21f8d91ca3bfd8c79b0b4994ad69fd58ca403e48d048c29a325bcd106d299f924f5331eadadeb63daab7a9eda793b3d1ab01fb58e22735c86592b6"], 0x44}, 0x1, 0x0, 0x0, 0x10008819}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000036c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f0000000340)={0xa, 0x22, 0x6, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x440, 0x0) connect$unix(r5, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0xc080) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000100)='.\x00', &(0x7f0000000600)='befs\x00', 0x1008820, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) 5.680259426s ago: executing program 2 (id=157): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20048050}}], 0x1, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000280)={0x101, 0x9, 0x3, 0x800}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x60) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x1812c09}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x0, 0x3572111cb2a712f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x101200, 0x8) syz_fuse_handle_req(r5, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003c0007012d067000fcdbdf25047c000004006e000c00018006000600800a00"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0) gettid() r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001040)="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", 0xfd}, {&(0x7f0000001200)="369980f4c3583eb274410e75caf5d41137bee403f887d896134fa206c6b0746583ed7ee388e89dc5661574be46262bca5aef05c71d172f5809329c8fb22a4d5556ad02d2fc2854867c5fddb23dbde13026ddbc14773cb42588c2c92b0dd422ebba60d6543cad78b361d2b0dfd125da53f4eeb2c5b4e27b628469d361e0e3dd2d60829d59981f3c4c9ad6fcd76a14994c13b3f18d9220084a8c7d25c7109d15f17704509873366be9188cf13db471c8", 0xaf}, {&(0x7f00000012c0)="663f67a4bc41bac72de53e5546123036aedd6bf9dcbe3e1afce65b24689137bf2deb271c161fd3f054bb6d2fe10b6d0e6bcc45df7a744bc16bb90768801dfbb91798298397e660b65353448703d019c63b20648c1f0ec7fb9d151b3a8f34a693c90670e79e21f825c33f404b", 0x6c}, {&(0x7f0000001340)="607c7bafc75077b48542d2f02fedf14c17579e67b61436a68d63de5276bf4c6afa3cf3ca6f6863a2c4a1df1b8d08ebe4fa8a40990b16344bba8fc14108ba3114fcc235b26671d99f1d318c25301e100b5d56796725839e8528f7bb701bcd90d7bc8198e05663defb207b52471837ed96907a4799", 0x74}], 0x5}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001140)=[{&(0x7f0000004d00)}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000005c0)='7', 0x1}], 0x1}}], 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.554001356s ago: executing program 1 (id=158): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x4000010, r1, 0x1d872000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8000, 0x1, 0xd457, 0x7, {{0x31, 0x4, 0x3, 0x30, 0xc4, 0x65, 0x0, 0xa5, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x3, [{@multicast2, 0x2}, {@broadcast, 0x1}, {@multicast1, 0x7ff}]}, @generic={0x89, 0x8, "1b4442bfef8a"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x3d, 0x0, 0x0, [0x1, 0x9, 0x5, 0x5, 0x3, 0x8]}, @timestamp_addr={0x44, 0x14, 0x5d, 0x1, 0x7, [{@local, 0x7}, {@private=0xa010102, 0x1}]}, @lsrr={0x83, 0x7, 0x1a, [@local]}, @timestamp_prespec={0x44, 0x3c, 0x16, 0x3, 0xe, [{@loopback, 0x5}, {@private=0xa010102, 0x5}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x1000}, {@multicast1, 0xf}, {@broadcast, 0x9}]}, @timestamp={0x44, 0x14, 0x42, 0x0, 0x4, [0x4, 0x1, 0x101, 0xfffffff7]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, 0x0, 0x900, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xb2a1735840c0b4c6}, 0x80) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000500)={0x83f2, 0x7, 0x1, 'queue1\x00', 0xfffffffa}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000001740)={0x1ff, 0x4, 0x1ff, 0x99, &(0x7f00000005c0)=""/153, 0xaa, &(0x7f0000000680)=""/170, 0x1000, &(0x7f0000000740)=""/4096}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000001780)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000001800)={&(0x7f00000017c0)=[r7], 0x1}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000001840)='cachefiles_io_error\x00', r8, 0x0, 0x56}, 0x18) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x78, r9, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x21}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x0, 0x3, 0x0, {0x6, 0x2aa, 0x0, 0x61, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x9, 0x1}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x6, 0x0, {0x400, 0xddc, 0x0, 0x30a, 0x0, 0x1, 0x0, 0x2}, 0x8, 0x5, 0x9}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0xb6, 0x20, 0x7, 0x20}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x20000880) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000001ac0)={0x30}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001b00)={{r2}, "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"}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x28, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x7b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000044) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0xc04c5349, &(0x7f0000002c00)={0x401, 0x6, 0x401}) r11 = openat(r6, &(0x7f0000002c80)='./file0\x00', 0x200, 0x8) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000002cc0)={0x3a}) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x37, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) getsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f0000002d80), &(0x7f0000002dc0)=0x4) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e40)={0x98, r9, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4048050) 5.394646116s ago: executing program 2 (id=159): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, {0xa, 0x4e21, 0x8, @loopback, 0x9}, 0x1, {[0xb3, 0x6, 0x3, 0x3, 0x25, 0x40, 0x55be5137, 0x2]}}, 0x5c) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x18, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x7, 0x2, 0x0, 0x1, [@generic="ecc032"]}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000001c0)=0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, {0xa, 0x4e21, 0x8, @loopback, 0x9}, 0x1, {[0xb3, 0x6, 0x3, 0x3, 0x25, 0x40, 0x55be5137, 0x2]}}, 0x5c) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x18, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x7, 0x2, 0x0, 0x1, [@generic="ecc032"]}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000001c0)=0x1) (async) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) (async) 4.795068727s ago: executing program 4 (id=160): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = msgget$private(0x0, 0x146) msgrcv(r5, &(0x7f00000003c0)={0x0, ""/214}, 0xde, 0x0, 0x2000) msgsnd(r5, &(0x7f0000000b80)={0x2}, 0x8, 0x800) msgrcv(r5, &(0x7f0000000300)={0x0, ""/192}, 0xc8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fd"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x1ff, 0x9, 0x8, 0x9], 0x0, [0x7]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fb000300000000000000020000009500"/64], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x1, 0x800}]}) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x6}) 4.784342395s ago: executing program 0 (id=161): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0xa0502, 0x1be) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000180)='(', 0x1, 0x5}]) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setlease(r3, 0x400, 0x0) fcntl$setown(r3, 0x8, 0x0) fcntl$setlease(r3, 0x400, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 4.71952702s ago: executing program 1 (id=162): write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/112, &(0x7f0000000180)=0x70) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000040) 4.027346305s ago: executing program 2 (id=163): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x2ce1880, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040022, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}, {}]}) 3.919943339s ago: executing program 1 (id=164): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) setrlimit(0x0, &(0x7f0000000340)={0x10, 0xfc4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x4048000) sendmsg$IPSET_CMD_TYPE(r4, 0x0, 0x2008000) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r5, @ANYBLOB="01000400000001000000090000003c000380140002007663616e3000000000000000000000000800030000000000080001000100000014000600fc0200"/74], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x40000) 3.915151384s ago: executing program 2 (id=165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8], &(0x7f0000000180)='GPL\x00', 0xc36, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0xc, @pix={0xd3b, 0x3, 0x384c4150, 0x5, 0x4, 0x5, 0x1, 0x2, 0x0, 0x1, 0x1, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000008000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000500)={0x3}, 0x8) 3.640268358s ago: executing program 4 (id=167): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) recvmmsg(r0, &(0x7f0000000180), 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_usb_connect(0x3, 0xfdde, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x2000, 0x103) (async) mknod$loop(&(0x7f0000000140)='./file7\x00', 0x2000, 0x0) (async) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0xffff, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x80000000]}}) (async) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) 2.64790744s ago: executing program 3 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000100001040020b7020000000000000000", @ANYRES32=0x0, @ANYBLOB="244100009ce221b7240012800b00010065727370616e000014000280060002003000000006000e", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=0x0, @ANYBLOB="31fdefcf3df13ebf329446c6ffb1eaf3084cbe1bca2ce9ff61978753d581f68bf102437a965490fd2bfc99da804756c5a78ad3ca9502de2d99d9785a7eebf87eb2d16d21f8d91ca3bfd8c79b0b4994ad69fd58ca403e48d048c29a325bcd106d299f924f5331eadadeb63daab7a9eda793b3d1ab01fb58e22735c86592b6"], 0x44}, 0x1, 0x0, 0x0, 0x10008819}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000036c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f0000000340)={0xa, 0x22, 0x6, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x440, 0x0) connect$unix(r5, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0xc080) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000100)='.\x00', &(0x7f0000000600)='befs\x00', 0x1008820, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) 2.487419668s ago: executing program 0 (id=169): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x61, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x61, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500), 0x200) unshare(0x2c020400) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) (async) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) (async) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000808) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 2.352136037s ago: executing program 4 (id=170): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x380, 0x0}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffff7bbbbbbbb0000019078ac1414aaac1414aa210c0000780200"/44], 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @rand_addr, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="00000700ffffffff00"/28], 0x50) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) (async) getsockopt(r7, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r8, 0x8, &(0x7f0000000080)=0xde0f) 2.347321932s ago: executing program 3 (id=171): r0 = socket$alg(0x26, 0x5, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) syz_io_uring_setup(0x1c84, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000080)) (async) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000080)) 2.166691219s ago: executing program 3 (id=172): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x78) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x3) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$xdp(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="22613fdba0da05ae867cac56aab11ac819a18aa6c99d7fdee052ea631826c069d9fb7bfb1240a1b5f513daa7ab849014b47dea4039bc6b7006dc77e7d301078cd285f43e95002dab5758ce7e643c117ec7f7f7de04bd2940d7ee88f32c19d3fc098c6338fc038ff837a00b9dd4174284a1408ba88cb80fdb68c80e92dea7e1ab", 0x80}], 0x1, 0x0, 0x0, 0x20000010}, 0x840) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x400c4) sendmsg$qrtr(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x2a, 0x2, 0x8000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000080)="492672fad0ef17b52c5a86f7e69911158fe8a2f7518812b40d84c61d", 0x1c}, {&(0x7f0000000140)="71d6bd40d07e193480c75b71b33f2e16321b04bd9a2bf12cf474180907e2b27d6089d1a3356657ec08ab9fc6520c311a53b8565876b41297abeecec03029", 0x3e}], 0x2, &(0x7f0000000200)=[{0xf8, 0x119, 0x4, "7c1eaa388a2746e8c6d072e286c294519ff050b3add209a6dbb71bf67afda430d35ee90e6269eba404e513904fe3957b7c438ab893bc58dec53c54c6d31d1866749bf5c1422993629cbd2e3be17b8de9ca9eb9cab15e3d90209fe4213510eea3efbbe65e6c86538228979a55cd6fe1095523a9614fbdf32effc5cc36a89becc9c08ad634e2d03102db314dd6138a52332b804d9485ffa8e608981c04c8562f31c6f2321ea6eff700ab354f064816792933104e13abb2f686fedaf86329ae87776991d4d39e4a78f46b857d2c7687cbc56d3c90c8d9d1f4b006278bb8c2b629c97deedad263fd"}, {0x58, 0x10e, 0x2d, "8996cba8e5e7a1730bcb39bccbd3dcb079516e3b605d6fafb226e123d3691321421a85d242f280d9e72ee862200be4c5ca42803058873c27d753a662f7a4cd61242280f64cf2"}, {0xd0, 0x0, 0x7, "13bb49247eaeb0e125f7baacc999d757c4aa44d39ff9ee49c087fe4e3cdd1593c6096b45998606058ef04eab77aa3f9c24b8cef5ea0a6bb04e301938e4550646e1eba999d5a2ea5296bad328d77d3eefdee94e888d93cd6c05c4390372d0e05d84edfc8703a0cf70134d5a083d79d21f166c07ed0c664bf620df446172dae803a4633d3a4ccb78ad06493e5ad866e4352b44d2612f336a6191b8c20766fab9f732b4acd7563050966b78478a37a031112df3eead24316b4e4828"}], 0x220, 0x40000c6}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) pipe(&(0x7f00000004c0)) syz_init_net_socket$netrom(0x6, 0x5, 0xf0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.139614315s ago: executing program 4 (id=173): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000ffff2f3d7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="13200200313402001c0012800b0001006970766c616e00000c0002800600010032"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x80000003) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x53}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000400)=[0x0], 0x1, 0x800}) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.014142152s ago: executing program 3 (id=174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)=@multiplanar_userptr={0x8, 0x1, 0x4, 0x100, 0x2, {}, {0x3, 0x8, 0x81, 0x8, 0x4, 0x2, "3a9728b7"}, 0x81, 0x2, {&(0x7f0000001500)=[{0x310000, 0xc, {&(0x7f0000001480)}, 0x5}, {0x473, 0x0, {&(0x7f00000014c0)}, 0x6}]}, 0xfffffffe, 0x0, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000000c0)=0x2020020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x5}, 0x18) r6 = syz_io_uring_setup(0x110, &(0x7f0000000240)={0x0, 0xfffffff8, 0x4, 0x4000002}, &(0x7f00000007c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)={0x101, 0x8, 0x1}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.406650694s ago: executing program 4 (id=175): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x11, 0xc}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) lseek(r2, 0x289e0cb5, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0)={0xc9d2}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x5, 0x4, {0xffffffffffffffff}, {0xee00}, 0xe6d, 0x2}) quotactl_fd$Q_QUOTAON(r1, 0x0, r3, &(0x7f0000000240)='./file1\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x40008, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x38]}}}}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@subj_user={'subj_user', 0x3d, 'upperdir'}}]}) r6 = open(&(0x7f0000000040)='./file1\x00', 0x81242, 0x1e4) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 1.317206756s ago: executing program 0 (id=176): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x510000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async, rerun: 64) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f00000001c0)={0xcdc, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xcb8, 0x111, 0x0, 0x1, {0xcb4, 0x5, 0x0, 0x1, [{0x2b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3b7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9823}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8e}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x299}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}]}, {0x4b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x274, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x160, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xce}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xad1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7c}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x33}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2ac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x688}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x772}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x4095}, 0x4008015) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)=r0}, 0x20) (async) recvmsg(r0, &(0x7f00000044c0)={&(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000001080)=""/238, 0xee}, {&(0x7f0000001180)=""/84, 0x54}, {&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/222, 0xde}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/23, 0x17}], 0x7, &(0x7f00000034c0)=""/4096, 0x1000}, 0x40000100) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000004680)={r2, &(0x7f0000004500)="2f1b6741f7daad09c81d4c48010313aef6e2016a223590d8b58de2a4664685c6b43aca0bdb0e4e7342a3f82efc57a77c11427d46da1bc90915f47a0c32e1fe3e51dcee49789129eef8efd533b11eab01627803e185ffaadc1c58dcb012bdd55d38b177a199ef421837e50fa15962446d859d959cbf781f2dbb7627a54cc69d8858ae92ceaa1bc54e3269ed734d1e20837f45d6", &(0x7f00000045c0)=""/181}, 0x20) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000046c0)) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000004740), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000004900)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004780)={0x12c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8a8c}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x93b}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}]}, 0x12c}}, 0x4000000) (async, rerun: 64) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000004ac0)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004980)={0xd0, 0x453, 0x800, 0x70bd2c, 0x25dfdbff, "6574ff41ed1bc9f95d0d36ea306c47428c9c95d264321272fce0491465212ae275ac3cae4c3cd7ed8fa44551ce6ccc0aee3d491d914e0c716a784891c5d39ba8780ba0f09654a99930806e48e388712e68ea5dd8ece33eaba97bc769dc1a239ac786c1bf9c56854af7c105ffe8152d4006619bfc91445110b02be7238ec52d6cb736fe8b146edf488c26faf320331679bf702ff4d142701db8ac3666d9d92bda21a1395ed62091aef17295b6a22df7a56d3ad0588cc524e6e4b699bbb80ef4", ["", "", "", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004c40)={'gretap0\x00', &(0x7f0000004b40)={'gretap0\x00', 0x0, 0x10, 0x40, 0x7, 0x4, {{0x29, 0x4, 0x1, 0x1e, 0xa4, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @local, {[@ssrr={0x89, 0xf, 0xd, [@rand_addr=0x64010102, @broadcast, @private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x83, 0x1, 0x9, [{@remote, 0x9}]}, @ssrr={0x89, 0xf, 0x23, [@loopback, @private=0xa010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2e, 0x3, [{0x2, 0x10, "4e2070eb939c8cb74ce5725cc33c"}, {0x6, 0x12, "90f673319a6f9c1ef4cb249a3e989448"}, {0x2, 0x2}, {0x1, 0x4, "b7be"}]}, @timestamp_prespec={0x44, 0x34, 0xfc, 0x3, 0xc, [{@local}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@empty, 0x5}, {@loopback, 0xc}, {@remote, 0xf}, {@empty, 0x1}]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000004c80)={'team_slave_0\x00', 0x0}) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004d40)={r2, 0x58, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000004e80)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004e40)={&(0x7f0000004d80)={0x94, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f00), r0) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x1c, r8, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xcce}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x8001) (async) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000005000)=0x1, 0x4) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000005040)) r9 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000005080)={{{@in6, @in6=@empty}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000005180)=0xe8) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000005200)={&(0x7f00000051c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000005280)={r10, 0x59, 0x2, 0x5, 0x0, [], [0x9, 0x80000001, 0x1, 0x6], [0x80000001, 0x80000000, 0x7, 0x7], [0x4, 0x80000001, 0x8001, 0x5]}) (async) fcntl$getownex(r9, 0x10, &(0x7f0000005300)={0x0, 0x0}) get_robust_list(r11, &(0x7f0000005480)=&(0x7f0000005440)={&(0x7f0000005380)={&(0x7f0000005340)}, 0x0, &(0x7f0000005400)={&(0x7f00000053c0)}}, &(0x7f00000054c0)=0x18) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000005540)={0x3, &(0x7f0000005500)=[{0x5, 0x8, 0x7f, 0x2}, {0x480, 0x5, 0x3, 0x81}, {0x1, 0x6, 0x0, 0x2}]}, 0x10) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005680)={@map=r0, 0x12, 0x0, 0x8, &(0x7f0000005580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000055c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000056c0)={@fallback=r0, r0, 0xa, 0x8, 0x0, @void, @value=r3, @void, @void, r12}, 0x20) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000005700), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000005740)={0x3, 0x5, 0x6}) 1.185039556s ago: executing program 0 (id=177): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x0, 0x5003) socket$packet(0x11, 0x0, 0x300) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{}, {r8, r9+60000000}}, &(0x7f0000000600)) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r10}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.016691588s ago: executing program 3 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000018a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 358.678964ms ago: executing program 2 (id=179): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b15, 0x1, 0x10000, 0x400e4a, 0xff, "203f5ef2effe765eee0080ffffffff7ffff200", 0x8, 0xb}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000858000006d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) getpid() (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000100)=0x80000001, 0x4) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket(0x26, 0x5, 0x0) (async) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) (async) fcntl$getflags(0xffffffffffffffff, 0x401) (async) socket$inet_udplite(0x2, 0x2, 0x88) 190.748657ms ago: executing program 1 (id=180): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x409, 0x40001022, r1, 0x0) (async) fanotify_mark(r2, 0x409, 0x40001022, r1, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x1) (async) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000001e00)=[{{&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/34, 0x22}], 0x3, &(0x7f0000000740)=""/96, 0x60}, 0x6}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000000840)=""/23, 0x17}, {&(0x7f0000000880)=""/38, 0x26}, {&(0x7f00000008c0)=""/218, 0xda}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/163, 0xa3}, {&(0x7f0000001b80)=""/181, 0xb5}, {&(0x7f0000001c40)=""/221, 0xdd}], 0x9}, 0x5}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003dc0)='/sys/kernel/kexec_loaded', 0x880, 0x100) truncate(&(0x7f00000000c0)='./bus\x00', 0x9472) (async) truncate(&(0x7f00000000c0)='./bus\x00', 0x9472) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x94, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfa33}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x23}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd05}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x42}, 0x48084) (async) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x94, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfa33}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x23}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd05}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x42}, 0x48084) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_TIMEOUT(r8, 0x2201, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffffff00ff0000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffffff00ff0000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) 0s ago: executing program 3 (id=181): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x7, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) dup3(r1, r2, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc8ea}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000010cc0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000010d00)={0x9, @sdr={0x384c4150, 0x4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) (rerun: 32) r8 = io_uring_setup(0x6947, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xcf}) (async) r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7559, 0x0, 0x7, 0x362}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x8, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x700, 0x0, 0x20000000}}) (async) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. [ 58.136634][ T30] audit: type=1400 audit(1768846728.094:62): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.159945][ T30] audit: type=1400 audit(1768846728.114:63): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.162357][ T5802] cgroup: Unknown subsys name 'net' [ 58.188668][ T30] audit: type=1400 audit(1768846728.144:64): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.384329][ T5802] cgroup: Unknown subsys name 'cpuset' [ 58.392009][ T5802] cgroup: Unknown subsys name 'rlimit' [ 58.590889][ T30] audit: type=1400 audit(1768846728.544:65): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.623381][ T30] audit: type=1400 audit(1768846728.544:66): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.650043][ T30] audit: type=1400 audit(1768846728.554:67): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.671828][ T30] audit: type=1400 audit(1768846728.554:68): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.692461][ T30] audit: type=1400 audit(1768846728.564:69): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.717248][ T30] audit: type=1400 audit(1768846728.564:70): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.763914][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.773239][ T30] audit: type=1400 audit(1768846728.734:71): avc: denied { relabelto } for pid=5804 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.696689][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.249559][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 64.249573][ T30] audit: type=1400 audit(1768846734.194:76): avc: denied { create } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.290827][ T30] audit: type=1400 audit(1768846734.194:77): avc: denied { read write } for pid=5812 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.291581][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.323672][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.331591][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.331977][ T30] audit: type=1400 audit(1768846734.194:78): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.339171][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.382514][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.412334][ T30] audit: type=1400 audit(1768846734.234:79): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="socket:[5286]" dev="sockfs" ino=5286 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.437343][ T30] audit: type=1400 audit(1768846734.364:80): avc: denied { read } for pid=5812 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.459363][ T30] audit: type=1400 audit(1768846734.364:81): avc: denied { open } for pid=5812 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.472413][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.488474][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.491177][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.497467][ T30] audit: type=1400 audit(1768846734.404:82): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.525276][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.532709][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.533011][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.540595][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.547746][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.554474][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.569547][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.574742][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.590743][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.592550][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.598525][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.605818][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.613467][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.626663][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.627830][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.641841][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.652322][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.007578][ T30] audit: type=1400 audit(1768846734.964:83): avc: denied { module_request } for pid=5812 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.099068][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 65.142258][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 65.153290][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 65.216731][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 65.265265][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 65.376808][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.384916][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.392599][ T5817] bridge_slave_0: entered allmulticast mode [ 65.399248][ T5817] bridge_slave_0: entered promiscuous mode [ 65.406989][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.414136][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.421203][ T5828] bridge_slave_0: entered allmulticast mode [ 65.427928][ T5828] bridge_slave_0: entered promiscuous mode [ 65.434582][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.441649][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.448933][ T5812] bridge_slave_0: entered allmulticast mode [ 65.455801][ T5812] bridge_slave_0: entered promiscuous mode [ 65.472662][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.479781][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.486930][ T5817] bridge_slave_1: entered allmulticast mode [ 65.493579][ T5817] bridge_slave_1: entered promiscuous mode [ 65.500522][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.507705][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.514902][ T5828] bridge_slave_1: entered allmulticast mode [ 65.521552][ T5828] bridge_slave_1: entered promiscuous mode [ 65.528487][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.535717][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.542893][ T5812] bridge_slave_1: entered allmulticast mode [ 65.549524][ T5812] bridge_slave_1: entered promiscuous mode [ 65.626124][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.633299][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.640391][ T5816] bridge_slave_0: entered allmulticast mode [ 65.647506][ T5816] bridge_slave_0: entered promiscuous mode [ 65.654377][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.661465][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.668998][ T5821] bridge_slave_0: entered allmulticast mode [ 65.675610][ T5821] bridge_slave_0: entered promiscuous mode [ 65.684979][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.696047][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.707042][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.716547][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.724117][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.731207][ T5816] bridge_slave_1: entered allmulticast mode [ 65.738077][ T5816] bridge_slave_1: entered promiscuous mode [ 65.744664][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.752266][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.759342][ T5821] bridge_slave_1: entered allmulticast mode [ 65.766064][ T5821] bridge_slave_1: entered promiscuous mode [ 65.774030][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.784406][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.794806][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.872762][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.883975][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.895143][ T5817] team0: Port device team_slave_0 added [ 65.902196][ T5828] team0: Port device team_slave_0 added [ 65.908999][ T5812] team0: Port device team_slave_0 added [ 65.916283][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.926569][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.936955][ T5817] team0: Port device team_slave_1 added [ 65.943870][ T5828] team0: Port device team_slave_1 added [ 65.957391][ T5812] team0: Port device team_slave_1 added [ 66.017828][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.025027][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.051228][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.070980][ T5816] team0: Port device team_slave_0 added [ 66.078113][ T5821] team0: Port device team_slave_0 added [ 66.084306][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.091234][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.117546][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.135649][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.142669][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.168966][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.180222][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.187577][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.213703][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.225689][ T5816] team0: Port device team_slave_1 added [ 66.232547][ T5821] team0: Port device team_slave_1 added [ 66.238490][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.245430][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.271413][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.288309][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.295278][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.321199][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.371275][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.378318][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.404486][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.415754][ T5822] Bluetooth: hci0: command tx timeout [ 66.423411][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.430335][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.456706][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.470264][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.481500][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.507883][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.520101][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.527095][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.554010][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.621943][ T5828] hsr_slave_0: entered promiscuous mode [ 66.628531][ T5828] hsr_slave_1: entered promiscuous mode [ 66.637430][ T5817] hsr_slave_0: entered promiscuous mode [ 66.643929][ T5817] hsr_slave_1: entered promiscuous mode [ 66.649731][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 66.655798][ T5822] Bluetooth: hci1: command tx timeout [ 66.655888][ T5826] Bluetooth: hci2: command tx timeout [ 66.661522][ T5817] Cannot create hsr debugfs directory [ 66.667213][ T5826] Bluetooth: hci3: command tx timeout [ 66.681529][ T5812] hsr_slave_0: entered promiscuous mode [ 66.687532][ T5812] hsr_slave_1: entered promiscuous mode [ 66.693434][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 66.699133][ T5812] Cannot create hsr debugfs directory [ 66.732637][ T5826] Bluetooth: hci4: command tx timeout [ 66.749684][ T5816] hsr_slave_0: entered promiscuous mode [ 66.755989][ T5816] hsr_slave_1: entered promiscuous mode [ 66.761915][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 66.767624][ T5816] Cannot create hsr debugfs directory [ 66.783391][ T5821] hsr_slave_0: entered promiscuous mode [ 66.789365][ T5821] hsr_slave_1: entered promiscuous mode [ 66.795412][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 66.801120][ T5821] Cannot create hsr debugfs directory [ 67.143220][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.165920][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.175576][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.189027][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.217950][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.232669][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.249576][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.259323][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.317181][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.338602][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.350078][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.385142][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.443359][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.459513][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.472821][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.484593][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.532494][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.543845][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.574275][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.587506][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.597779][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.607899][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.629703][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.650115][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.660523][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.667684][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.685320][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.692387][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.700790][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.707872][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.743971][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.751060][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.816182][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.858002][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.865727][ T30] audit: type=1400 audit(1768846737.824:84): avc: denied { sys_module } for pid=5812 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.899225][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.906399][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.936454][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.958836][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.965976][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.054008][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.086451][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.097626][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.118969][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.126056][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.164507][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.174544][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.181643][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.223686][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.230908][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.243630][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.250765][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.278992][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.290349][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.326235][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.398598][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.453036][ T5812] veth0_vlan: entered promiscuous mode [ 68.486762][ T5812] veth1_vlan: entered promiscuous mode [ 68.503449][ T5826] Bluetooth: hci0: command tx timeout [ 68.628128][ T5817] veth0_vlan: entered promiscuous mode [ 68.642884][ T5812] veth0_macvtap: entered promiscuous mode [ 68.660951][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.683183][ T5812] veth1_macvtap: entered promiscuous mode [ 68.691107][ T5817] veth1_vlan: entered promiscuous mode [ 68.732671][ T5826] Bluetooth: hci3: command tx timeout [ 68.732727][ T5140] Bluetooth: hci1: command tx timeout [ 68.743866][ T5822] Bluetooth: hci2: command tx timeout [ 68.758138][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.780210][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.789908][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.805840][ T5817] veth0_macvtap: entered promiscuous mode [ 68.812265][ T5140] Bluetooth: hci4: command tx timeout [ 68.817752][ T1077] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.829609][ T1077] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.844359][ T5817] veth1_macvtap: entered promiscuous mode [ 68.855822][ T1077] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.865081][ T1077] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.875290][ T5828] veth0_vlan: entered promiscuous mode [ 68.911511][ T5821] veth0_vlan: entered promiscuous mode [ 68.925749][ T5828] veth1_vlan: entered promiscuous mode [ 68.939443][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.959330][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.993478][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.002818][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.019555][ T5821] veth1_vlan: entered promiscuous mode [ 69.028285][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.037048][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.049327][ T309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.057930][ T309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.066021][ T5816] veth0_vlan: entered promiscuous mode [ 69.109191][ T5816] veth1_vlan: entered promiscuous mode [ 69.118666][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.124692][ T5821] veth0_macvtap: entered promiscuous mode [ 69.132886][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.150139][ T5828] veth0_macvtap: entered promiscuous mode [ 69.165111][ T5821] veth1_macvtap: entered promiscuous mode [ 69.174522][ T30] audit: type=1400 audit(1768846739.134:85): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.VttGdC/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.246398][ T5828] veth1_macvtap: entered promiscuous mode [ 69.257622][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.286102][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.290489][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.308922][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.319263][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 69.319274][ T30] audit: type=1400 audit(1768846739.274:97): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.319308][ T5816] veth0_macvtap: entered promiscuous mode [ 69.331732][ T30] audit: type=1400 audit(1768846739.284:98): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.404827][ T5933] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 69.417847][ T5816] veth1_macvtap: entered promiscuous mode [ 69.423812][ T30] audit: type=1400 audit(1768846739.284:99): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.475613][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.513981][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.521237][ T30] audit: type=1400 audit(1768846739.474:100): avc: denied { create } for pid=5937 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.527062][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.553086][ T30] audit: type=1326 audit(1768846739.474:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.6" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9a318f749 code=0x0 [ 69.553257][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.599514][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.608178][ T3413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.617735][ T3413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.658281][ T3413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.667895][ T3413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.680230][ T30] audit: type=1400 audit(1768846739.634:102): avc: denied { prog_load } for pid=5942 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.699639][ T30] audit: type=1400 audit(1768846739.634:103): avc: denied { bpf } for pid=5942 comm="syz.0.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.721337][ T30] audit: type=1400 audit(1768846739.634:104): avc: denied { perfmon } for pid=5942 comm="syz.0.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.766670][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.778864][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.788249][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.798501][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.812563][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.860016][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.921610][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.960031][ T30] audit: type=1400 audit(1768846739.904:105): avc: denied { create } for pid=5942 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.014650][ T30] audit: type=1400 audit(1768846739.914:106): avc: denied { write } for pid=5942 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.281171][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.294602][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.306856][ T5946] ip6tnl1: entered promiscuous mode [ 70.313909][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.371516][ T3629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.382419][ T3629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.405427][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.410960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.426935][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.465872][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.479607][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.573180][ T5140] Bluetooth: hci0: command tx timeout [ 70.582761][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.590561][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.719285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.736693][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.744924][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.892087][ T5822] Bluetooth: hci2: command tx timeout [ 70.897598][ T5822] Bluetooth: hci3: command tx timeout [ 70.903430][ T5140] Bluetooth: hci1: command tx timeout [ 70.908914][ T5822] Bluetooth: hci4: command tx timeout [ 70.984191][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.164640][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.228953][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.254672][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.561939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.571822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 71.581714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.702309][ T5949] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.962423][ T5967] Trying to write to read-only block-device nullb0 [ 71.992035][ T5949] usb 5-1: device descriptor read/64, error -71 [ 72.014637][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 72.242043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.250474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.252217][ T5949] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.282279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.291647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.301874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.431807][ T5949] usb 5-1: device descriptor read/64, error -71 [ 72.573013][ T5949] usb usb5-port1: attempt power cycle [ 72.664451][ T5826] Bluetooth: hci0: command tx timeout [ 72.896101][ T5992] tipc: Started in network mode [ 72.901087][ T5992] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 72.909540][ T5992] tipc: Enabled bearer , priority 10 [ 72.919646][ T5991] 0x00000000968d-0x00010000968e : "" [ 72.942909][ T5949] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.956693][ T5991] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x16973 [ 72.972022][ T5823] Bluetooth: hci2: command tx timeout [ 72.977484][ T5140] Bluetooth: hci3: command tx timeout [ 72.983067][ T5822] Bluetooth: hci1: command tx timeout [ 72.988653][ T5826] Bluetooth: hci4: command tx timeout [ 72.994222][ T5949] usb 5-1: device descriptor read/8, error -71 [ 73.028497][ T5991] ftl_cs: FTL header corrupt! [ 73.241803][ T5949] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.293542][ T5949] usb 5-1: device descriptor read/8, error -71 [ 73.354352][ T5998] SELinux: ebitmap: truncated map [ 73.368588][ T6002] Zero length message leads to an empty skb [ 73.396403][ T5998] SELinux: failed to load policy [ 73.573904][ T5949] usb usb5-port1: unable to enumerate USB device [ 73.712014][ T5931] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.735923][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 73.743612][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 73.872806][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 73.900700][ T5931] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 73.939192][ T5931] usb 4-1: config 251 has no interface number 0 [ 73.951915][ T5931] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 73.963907][ T5931] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 73.975858][ T5931] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 73.987387][ T5931] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 74.003595][ T5931] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 74.003820][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 74.030819][ T6008] ceph: No mds server is up or the cluster is laggy [ 74.047136][ T24] tipc: Node number set to 10398378 [ 74.068318][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 74.187703][ T5931] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 74.198147][ T5931] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.212957][ T5931] usb 4-1: config 251 interface 202 has no altsetting 0 [ 74.222903][ T5931] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 74.344465][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 74.344495][ T30] audit: type=1400 audit(1768846744.254:171): avc: denied { create } for pid=6012 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.428534][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 74.473229][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.585034][ T5931] usb 4-1: Product: syz [ 74.667980][ T5931] usb 4-1: Manufacturer: syz [ 74.691228][ T5931] usb 4-1: SerialNumber: syz [ 74.721403][ T6001] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.729068][ T6001] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.735602][ T30] audit: type=1400 audit(1768846744.264:172): avc: denied { write } for pid=6012 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.778393][ T30] audit: type=1400 audit(1768846744.354:173): avc: denied { ioctl } for pid=6012 comm="syz.1.20" path="socket:[9516]" dev="sockfs" ino=9516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.806993][ T30] audit: type=1400 audit(1768846744.424:174): avc: denied { setopt } for pid=6012 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.244678][ T5931] cxacru 4-1:251.202: send of cm 0x90 failed (-71) [ 75.251303][ T5931] cxacru 4-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 75.270668][ T30] audit: type=1400 audit(1768846745.184:175): avc: denied { setopt } for pid=6000 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.321880][ T6029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23'. [ 75.342674][ T5931] cxacru 4-1:251.202: probe with driver cxacru failed with error -22 [ 75.366903][ T30] audit: type=1400 audit(1768846745.324:176): avc: denied { setopt } for pid=6027 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.405690][ T6029] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20001 [ 75.421768][ T5900] IPVS: starting estimator thread 0... [ 75.432575][ T5931] usb 4-1: USB disconnect, device number 2 [ 75.456707][ T6031] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 75.465671][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 75.473811][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 75.563825][ T6030] IPVS: using max 41 ests per chain, 98400 per kthread [ 75.573675][ T30] audit: type=1400 audit(1768846745.524:177): avc: denied { create } for pid=6032 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.769543][ T30] audit: type=1400 audit(1768846745.524:178): avc: denied { bind } for pid=6032 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.792238][ T30] audit: type=1400 audit(1768846745.534:179): avc: denied { connect } for pid=6032 comm="syz.0.24" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.307390][ T5931] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.338206][ T89] cfg80211: failed to load regulatory.db [ 76.524091][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 76.576383][ T5931] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 76.778190][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 76.924484][ T6045] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 77.492646][ T5931] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 77.580949][ T5931] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 77.620523][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.354290][ T5931] usb 3-1: config 0 descriptor?? [ 78.699953][ T6040] Set syz1 is full, maxelem 65536 reached [ 78.835311][ T5931] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 78.903747][ T5931] hdpvr 3-1:0.0: device init failed [ 78.909012][ T5931] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 78.981903][ T5879] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 78.985738][ T5931] usb 3-1: USB disconnect, device number 2 [ 79.136846][ T6049] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 79.168980][ T5879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 10: 67, using maximum allowed: 30 [ 79.191905][ T5879] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 79.207851][ T5879] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 79.222177][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 79.229158][ T6062] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.254496][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 79.264447][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.274379][ T6061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.295115][ T5879] usb 4-1: config 0 descriptor?? [ 79.301027][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.301235][ T6051] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.317744][ T6049] usb 5-1: not running at top speed; connect to a high speed hub [ 79.332612][ T6049] usb 5-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 79.353858][ T6049] usb 5-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.381745][ T6049] usb 5-1: config 1 interface 0 has no altsetting 0 [ 79.394517][ T6049] usb 5-1: string descriptor 0 read error: -22 [ 79.400739][ T6049] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.416246][ T6049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.438588][ T6054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 79.446809][ T6054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 79.461815][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 79.468917][ T6049] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 79.473188][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.498694][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.530081][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.552512][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.571816][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.603036][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.621858][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.631821][ T10] usb 2-1: Manufacturer: syz [ 79.648349][ T10] usb 2-1: config 0 descriptor?? [ 79.664358][ T6049] usb 5-1: USB disconnect, device number 6 [ 79.756111][ T5879] logitech-hidpp-device 0003:046D:C087.0001: hidraw0: USB HID v0.fd Device [HID 046d:c087] on usb-dummy_hcd.3-1/input0 [ 79.895266][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 79.895280][ T30] audit: type=1400 audit(1768846749.854:192): avc: denied { create } for pid=6064 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 80.046660][ T30] audit: type=1400 audit(1768846750.004:193): avc: denied { ioctl } for pid=6064 comm="syz.2.33" path="socket:[8482]" dev="sockfs" ino=8482 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 80.163481][ T10] rc_core: IR keymap rc-hauppauge not found [ 80.170400][ T10] Registered IR keymap rc-empty [ 80.193709][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.371640][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.410398][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 80.437243][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 80.460082][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.482026][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.527149][ T30] audit: type=1400 audit(1768846750.484:194): avc: denied { write } for pid=6081 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.530636][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.559077][ T30] audit: type=1400 audit(1768846750.514:195): avc: denied { getopt } for pid=6081 comm="syz.4.36" laddr=fe80::aa lport=52999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.583304][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.601990][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.629235][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.652956][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.692400][ T5893] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.700038][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.747434][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.756153][ T5931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.812911][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.841074][ T6049] usb 4-1: USB disconnect, device number 3 [ 80.853111][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.873819][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.895358][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 80.915158][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 80.920410][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.948739][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 80.962488][ T5931] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 80.971410][ T5931] usb 1-1: config 251 has no interface number 0 [ 80.978648][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.992309][ T5931] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 81.006002][ T10] usb 2-1: USB disconnect, device number 2 [ 81.011925][ T5931] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 81.023031][ T5893] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.033795][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.042003][ T30] audit: type=1400 audit(1768846750.994:196): avc: denied { read write } for pid=6098 comm="syz.3.40" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.069130][ T5931] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 81.086680][ T5931] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 81.099338][ T5893] usb 3-1: config 0 descriptor?? [ 81.105854][ T30] audit: type=1400 audit(1768846750.994:197): avc: denied { open } for pid=6098 comm="syz.3.40" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.129793][ T5931] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 81.150957][ T5931] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 81.167740][ T30] audit: type=1400 audit(1768846751.034:198): avc: denied { read write } for pid=6098 comm="syz.3.40" name="usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.192184][ T5931] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.205486][ T5931] usb 1-1: config 251 interface 202 has no altsetting 0 [ 81.213897][ T30] audit: type=1400 audit(1768846751.034:199): avc: denied { open } for pid=6098 comm="syz.3.40" path="/dev/usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.238177][ T30] audit: type=1400 audit(1768846751.044:200): avc: denied { ioctl } for pid=6098 comm="syz.3.40" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.264110][ T5931] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 81.300991][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.320000][ T5931] usb 1-1: Product: syz [ 81.343472][ T5931] usb 1-1: Manufacturer: syz [ 81.348019][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.348096][ T5931] usb 1-1: SerialNumber: syz [ 81.364546][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.406045][ T6083] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 81.442062][ T6083] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 81.561764][ T30] audit: type=1400 audit(1768846751.514:201): avc: denied { create } for pid=6109 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.278574][ T5893] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 82.360482][ T6079] Bluetooth: MGMT ver 1.23 [ 82.440605][ T5931] cxacru 1-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 82.458807][ T5931] cxacru 1-1:251.202: probe with driver cxacru failed with error -22 [ 82.484619][ T5931] usb 1-1: USB disconnect, device number 2 [ 82.583249][ T6119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.611755][ T6119] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 82.652876][ T6119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.668401][ T6119] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 82.687085][ T6119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.701764][ T6119] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 82.729311][ T6119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.741770][ T6119] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 82.775800][ T6119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 82.791772][ T6119] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 82.801451][ C0] plantronics 0003:047F:FFFF.0002: hid_field_extract() called with n (132) > 32! (syz.2.35) [ 83.005165][ T5978] usb 3-1: USB disconnect, device number 3 [ 83.201877][ T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 83.535780][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 83.571450][ T24] usb 4-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 83.858301][ T974] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.883752][ T24] usb 4-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.937284][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 83.955166][ T24] usb 4-1: string descriptor 0 read error: -22 [ 83.971198][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.992704][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.017285][ T6130] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 84.061748][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 84.067133][ T6130] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 84.088246][ T974] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 84.104618][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 84.121337][ T974] usb 2-1: config 0 has no interface number 0 [ 84.142266][ T974] usb 2-1: config 0 interface 184 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 84.254949][ T974] usb 2-1: config 0 interface 184 has no altsetting 0 [ 84.272016][ T974] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.281131][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.289237][ T974] usb 2-1: Product: syz [ 84.293541][ T974] usb 2-1: Manufacturer: syz [ 84.298122][ T974] usb 2-1: SerialNumber: syz [ 84.311033][ T974] usb 2-1: config 0 descriptor?? [ 84.381814][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 84.390690][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'. [ 84.704488][ T6145] syzkaller0: entered promiscuous mode [ 84.709972][ T6145] syzkaller0: entered allmulticast mode [ 84.710215][ T974] smsc75xx v1.0.0 [ 84.731915][ T5893] usb 4-1: USB disconnect, device number 4 [ 84.752115][ T5900] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 84.902038][ T5900] usb 1-1: Invalid ep0 maxpacket: 32 [ 85.271761][ T5900] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 85.311124][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 85.311138][ T30] audit: type=1400 audit(1768846755.264:223): avc: denied { write } for pid=6154 comm="syz.2.55" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.338059][ T974] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 85.401721][ T974] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 85.415111][ T974] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 85.421742][ T5900] usb 1-1: Invalid ep0 maxpacket: 32 [ 85.439550][ T974] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 85.456337][ T5900] usb usb1-port1: attempt power cycle [ 85.495891][ T30] audit: type=1400 audit(1768846755.454:224): avc: denied { create } for pid=6159 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 85.673940][ T30] audit: type=1400 audit(1768846755.634:225): avc: denied { read } for pid=6160 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.694520][ T6163] 9p: Bad value for 'port' [ 85.699828][ T30] audit: type=1400 audit(1768846755.654:226): avc: denied { mounton } for pid=6160 comm="syz.4.57" path="/10" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.723971][ T6163] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 85.732493][ T30] audit: type=1400 audit(1768846755.694:227): avc: denied { write } for pid=6160 comm="syz.4.57" name="softnet_stat" dev="proc" ino=4026533240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.858875][ T30] audit: type=1400 audit(1768846755.814:228): avc: denied { connect } for pid=6159 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.898641][ T30] audit: type=1400 audit(1768846755.834:229): avc: denied { read } for pid=6159 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.929458][ T5900] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 85.939993][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 85.951216][ T30] audit: type=1400 audit(1768846755.914:230): avc: denied { read write } for pid=6159 comm="syz.3.56" dev="sockfs" ino=9867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 85.951843][ T6164] ======================================================= [ 85.951843][ T6164] WARNING: The mand mount option has been deprecated and [ 85.951843][ T6164] and is ignored by this kernel. Remove the mand [ 85.951843][ T6164] option from the mount to silence this warning. [ 85.951843][ T6164] ======================================================= [ 85.982308][ T5900] usb 1-1: Invalid ep0 maxpacket: 32 [ 86.010586][ T6049] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.131059][ T5893] usb 2-1: USB disconnect, device number 3 [ 86.282163][ T5900] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 86.302195][ T5900] usb 1-1: Invalid ep0 maxpacket: 32 [ 86.307596][ T5900] usb usb1-port1: unable to enumerate USB device [ 86.322169][ T6049] usb 5-1: Using ep0 maxpacket: 16 [ 86.333722][ T6049] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 86.348526][ T30] audit: type=1400 audit(1768846756.304:231): avc: denied { unlink } for pid=6169 comm="syz.3.60" name="#1" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.351557][ T6049] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 86.391616][ T6049] usb 5-1: config 0 has no interface number 0 [ 86.391972][ T30] audit: type=1400 audit(1768846756.304:232): avc: denied { mount } for pid=6169 comm="syz.3.60" name="/" dev="overlay" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.423316][ T6049] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 86.436029][ T6049] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 86.454942][ T6049] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 86.468641][ T6049] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 29797, setting to 1024 [ 86.480643][ T6049] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 86.493779][ T6049] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 86.501898][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.516614][ T6049] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 86.527582][ T6049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.564390][ T6049] usb 5-1: config 0 descriptor?? [ 86.569922][ T6163] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 86.577294][ T6163] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 86.595985][ T6049] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.662256][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 86.685379][ T5893] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 86.695308][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.710493][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.720762][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.731191][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.731803][ T974] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.744978][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.762245][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.916833][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 86.927041][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 86.933871][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 86.944520][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 86.946651][ T6174] ./file0: Can't lookup blockdev [ 86.954464][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 86.969280][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 86.980608][ T5893] usb 2-1: GET_CAPABILITIES returned 0 [ 86.981790][ T974] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 86.995247][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 87.003258][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.012649][ T974] usb 4-1: Product: syz [ 87.017435][ T974] usb 4-1: Manufacturer: syz [ 87.025304][ T974] usb 4-1: SerialNumber: syz [ 87.038606][ T974] usb 4-1: config 0 descriptor?? [ 87.053988][ T974] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 87.069212][ T974] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 87.197804][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.221948][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.231052][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.240105][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.251557][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.260637][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.269704][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.278774][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.287835][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.297764][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.306836][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.315910][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.325064][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.334140][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.345963][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.355542][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 87.794046][ T5893] usb 2-1: USB disconnect, device number 4 [ 87.968420][ T6187] SELinux: ebitmap: truncated map [ 88.005762][ T6187] SELinux: failed to load policy [ 88.175936][ T974] usb 4-1: USB disconnect, device number 5 [ 88.185331][ T974] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 88.195408][ T974] omninet 4-1:0.0: device disconnected [ 88.478193][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 88.683728][ T24] usb 5-1: USB disconnect, device number 7 [ 88.689848][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 88.758047][ T6194] ceph: No mds server is up or the cluster is laggy [ 88.815868][ T6006] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.013208][ T6006] usb 3-1: not running at top speed; connect to a high speed hub [ 89.061052][ T6006] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 89.075429][ T6006] usb 3-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.108127][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.138551][ T6006] usb 3-1: config 1 interface 0 has no altsetting 0 [ 89.264338][ T6006] usb 3-1: string descriptor 0 read error: -22 [ 89.270646][ T6006] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.300803][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.315241][ T6192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.341403][ T6192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.367457][ T6006] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 89.431735][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 89.478000][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 89.928720][ T24] usb 5-1: config 0 has no interface number 0 [ 90.040777][ T974] usb 3-1: USB disconnect, device number 4 [ 90.054546][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 90.074617][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.096133][ T24] usb 5-1: Product: syz [ 90.111547][ T24] usb 5-1: Manufacturer: syz [ 90.116463][ T24] usb 5-1: SerialNumber: syz [ 90.196316][ T24] usb 5-1: config 0 descriptor?? [ 90.259126][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.463943][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.488342][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.512478][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 90.532185][ T6220] vivid-007: kernel_thread() failed [ 90.546497][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 90.546513][ T30] audit: type=1400 audit(1768846760.484:246): avc: denied { create } for pid=6218 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.586581][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 90.760722][ T30] audit: type=1400 audit(1768846760.484:247): avc: denied { name_bind } for pid=6218 comm="syz.3.75" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 90.813167][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 90.852491][ T30] audit: type=1400 audit(1768846760.484:248): avc: denied { node_bind } for pid=6218 comm="syz.3.75" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 90.892553][ T6232] kvm: user requested TSC rate below hardware speed [ 90.941729][ T30] audit: type=1400 audit(1768846760.484:249): avc: denied { mounton } for pid=6218 comm="syz.3.75" path="/18/file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.964173][ T5900] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.979461][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 91.007467][ T5825] usb 5-1: USB disconnect, device number 8 [ 91.017521][ T5825] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 91.037995][ T30] audit: type=1400 audit(1768846760.544:250): avc: denied { ioctl } for pid=6221 comm="syz.1.76" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.066543][ T5825] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 91.087038][ T5825] quatech2 5-1:0.51: device disconnected [ 91.095287][ T30] audit: type=1400 audit(1768846760.614:251): avc: denied { create } for pid=6221 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.120191][ T6237] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.79'. [ 91.123328][ T30] audit: type=1400 audit(1768846760.614:252): avc: denied { ioctl } for pid=6221 comm="syz.1.76" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10152 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.156122][ T5900] usb 2-1: device descriptor read/64, error -71 [ 91.162976][ T30] audit: type=1400 audit(1768846760.664:253): avc: denied { setopt } for pid=6221 comm="syz.1.76" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.188305][ T6237] process 'syz.3.79' launched './file1' with NULL argv: empty string added [ 91.221977][ T6234] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.79'. [ 91.243516][ T30] audit: type=1400 audit(1768846760.774:254): avc: denied { setopt } for pid=6229 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.265901][ T30] audit: type=1400 audit(1768846761.154:255): avc: denied { execute_no_trans } for pid=6233 comm="syz.3.79" path="/19/file1" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.340629][ T6242] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 91.354122][ T6242] SELinux: failed to load policy [ 91.422204][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.572746][ T5900] usb 2-1: device descriptor read/64, error -71 [ 91.632054][ T6006] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 91.649977][ T6253] can0: slcan on ttyS3. [ 91.667006][ T6255] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 91.692251][ T5900] usb usb2-port1: attempt power cycle [ 91.754676][ T6252] can0 (unregistered): slcan off ttyS3. [ 91.802328][ T5893] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.802446][ T6006] usb 1-1: Using ep0 maxpacket: 8 [ 91.848372][ T6006] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.867676][ T6006] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 91.886284][ T6006] usb 1-1: config 0 has no interface number 0 [ 91.901776][ T6006] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 91.920589][ T6006] usb 1-1: config 0 interface 88 has no altsetting 0 [ 91.940738][ T6006] usb 1-1: string descriptor 0 read error: -22 [ 91.947166][ T6006] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 91.954359][ T5893] usb 3-1: device descriptor read/64, error -71 [ 91.976665][ T6006] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 92.008088][ T6006] usb 1-1: config 0 descriptor?? [ 92.031363][ T6006] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input7 [ 92.051794][ T5900] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 92.065304][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.88'. [ 92.112680][ T5900] usb 2-1: device descriptor read/8, error -71 [ 92.221732][ T5893] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.245549][ T5825] usb 1-1: USB disconnect, device number 7 [ 92.351780][ T5900] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 92.374409][ T5900] usb 2-1: device descriptor read/8, error -71 [ 92.381747][ T5893] usb 3-1: device descriptor read/64, error -71 [ 92.441744][ T6006] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 92.492053][ T5893] usb usb3-port1: attempt power cycle [ 92.503476][ T5900] usb usb2-port1: unable to enumerate USB device [ 92.603651][ T6006] usb 4-1: not running at top speed; connect to a high speed hub [ 92.623136][ T6006] usb 4-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 92.644713][ T6006] usb 4-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.681134][ T6006] usb 4-1: config 1 interface 0 has no altsetting 0 [ 92.690783][ T6006] usb 4-1: string descriptor 0 read error: -22 [ 92.699032][ T6006] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.732417][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.765464][ T6281] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 92.782059][ T6281] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 92.805678][ T6006] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 92.841874][ T5893] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 92.902163][ T5893] usb 3-1: device descriptor read/8, error -71 [ 93.054006][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 93.115613][ T6313] SET target dimension over the limit! [ 93.142802][ T5879] usb 4-1: USB disconnect, device number 6 [ 93.151843][ T5893] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 93.182987][ T5893] usb 3-1: device descriptor read/8, error -71 [ 93.212002][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.332405][ T5893] usb usb3-port1: unable to enumerate USB device [ 93.352925][ T6312] input: syz0 as /devices/virtual/input/input8 [ 93.814736][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.842199][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.872501][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.881111][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.159854][ T5893] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 94.557582][ T6340] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 94.564226][ T6340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.593121][ T6340] vhci_hcd vhci_hcd.0: Device attached [ 94.653229][ T6343] bridge_slave_0: left allmulticast mode [ 94.658927][ T6343] bridge_slave_0: left promiscuous mode [ 94.721059][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.801753][ T5893] usb 2-1: device descriptor read/64, error -71 [ 94.845418][ T6343] bridge_slave_1: left allmulticast mode [ 94.859647][ T6343] bridge_slave_1: left promiscuous mode [ 94.874347][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.916149][ T6343] bond0: (slave bond_slave_0): Releasing backup interface [ 94.929539][ T6343] bond0: (slave bond_slave_1): Releasing backup interface [ 94.952857][ T6343] team0: Port device team_slave_0 removed [ 94.964175][ T10] usb 40-1: SetAddress Request (2) to port 0 [ 94.970709][ T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 94.973622][ T6343] team0: Port device team_slave_1 removed [ 94.985074][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.041787][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.059572][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.079834][ T5893] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.192327][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 95.200204][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.210442][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.225948][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.280575][ T6354] input: syz0 as /devices/virtual/input/input9 [ 95.286827][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 95.324011][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.331529][ T5893] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 95.345691][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.353795][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.360952][ T5879] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 95.378369][ T5893] usb 2-1: config 0 descriptor?? [ 95.483749][ T5893] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 95.490558][ T6343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.516456][ T6341] vhci_hcd: connection reset by peer [ 95.525859][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.573227][ T5879] usb 1-1: Product: syz [ 95.590164][ T5879] usb 1-1: Manufacturer: syz [ 95.596329][ T4360] vhci_hcd vhci_hcd.3: stop threads [ 95.602403][ T5879] usb 1-1: SerialNumber: syz [ 95.611420][ T4360] vhci_hcd vhci_hcd.3: release socket [ 95.632233][ T5879] usb 1-1: config 0 descriptor?? [ 95.638239][ T4360] vhci_hcd vhci_hcd.3: disconnect device [ 95.668493][ T5879] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 95.687789][ T5879] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -8) [ 95.804250][ T5879] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8 [ 96.263812][ T974] usb 1-1: USB disconnect, device number 9 [ 96.646482][ T6366] tmpfs: Unknown parameter 'mpo‚€intereeave' [ 96.724020][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 96.724038][ T30] audit: type=1400 audit(1768846766.604:289): avc: denied { remount } for pid=6363 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.182057][ T30] audit: type=1400 audit(1768846767.134:290): avc: denied { ioctl } for pid=6368 comm="syz.2.105" path="socket:[10303]" dev="sockfs" ino=10303 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.322037][ T30] audit: type=1400 audit(1768846767.264:291): avc: denied { create } for pid=6370 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.463041][ T30] audit: type=1400 audit(1768846767.404:292): avc: denied { create } for pid=6373 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.221926][ T30] audit: type=1400 audit(1768846767.414:293): avc: denied { create } for pid=6373 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.243293][ T30] audit: type=1400 audit(1768846767.424:294): avc: denied { read } for pid=6373 comm="syz.3.107" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.270009][ T30] audit: type=1400 audit(1768846767.424:295): avc: denied { open } for pid=6373 comm="syz.3.107" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.354681][ T30] audit: type=1400 audit(1768846767.584:296): avc: denied { bind } for pid=6375 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.421768][ T5825] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.428475][ T30] audit: type=1400 audit(1768846768.164:297): avc: denied { write } for pid=6375 comm="syz.0.108" path="socket:[10312]" dev="sockfs" ino=10312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.452887][ T5978] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 98.581746][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 98.599159][ T5825] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 98.620461][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.629496][ T5825] usb 3-1: Product: syz [ 98.630433][ T5978] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 98.633812][ T5825] usb 3-1: Manufacturer: syz [ 98.633830][ T5825] usb 3-1: SerialNumber: syz [ 98.668334][ T5825] usb 3-1: config 0 descriptor?? [ 98.675123][ T5978] usb 4-1: config 0 has no interface number 0 [ 98.677822][ T5825] gspca_main: se401-2.14.0 probing 047d:5003 [ 98.681279][ T5978] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.721929][ T5893] gspca_sonixj: reg_r err -110 [ 98.726857][ T5893] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 98.748808][ T5978] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 98.758284][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.779986][ T5978] usb 4-1: Product: syz [ 98.785513][ T5978] usb 4-1: Manufacturer: syz [ 98.791148][ T5978] usb 4-1: SerialNumber: syz [ 98.820171][ T5978] usb 4-1: config 0 descriptor?? [ 99.060799][ T5978] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 99.086925][ T5978] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 99.106043][ T5825] gspca_se401: ExtraFeatures: 16 [ 99.106322][ T5978] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 99.131352][ T5978] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 99.165480][ T5978] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 99.197309][ T5978] usb 4-1: USB disconnect, device number 7 [ 99.231863][ T5978] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 99.258600][ T5978] keyspan 4-1:0.133: device disconnected [ 99.314484][ T5825] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 99.324271][ T30] audit: type=1400 audit(1768846769.284:298): avc: denied { ioctl } for pid=6391 comm="syz.4.110" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.357785][ T5825] usb 3-1: USB disconnect, device number 9 [ 99.431493][ T5900] usb 2-1: USB disconnect, device number 10 [ 99.783910][ T6406] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 99.920232][ T6408] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 100.016088][ T10] usb 40-1: device descriptor read/8, error -110 [ 100.533048][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 100.601947][ T5879] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 100.630145][ T6420] netlink: 'syz.3.117': attribute type 29 has an invalid length. [ 100.763213][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.841761][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.852708][ T5879] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.861921][ T5879] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 100.869905][ T5879] usb 2-1: Manufacturer: syz [ 100.891782][ T5978] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 100.947458][ T10] usb usb40-port1: attempt power cycle [ 100.954725][ T5879] usb 2-1: config 0 descriptor?? [ 101.112369][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 101.358348][ T6428] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 101.368134][ T6428] SELinux: failed to load policy [ 101.546649][ T5978] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 101.555893][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.564302][ T5978] usb 3-1: Product: syz [ 101.568578][ T5978] usb 3-1: Manufacturer: syz [ 101.573248][ T5978] usb 3-1: SerialNumber: syz [ 101.580115][ T5978] usb 3-1: config 0 descriptor?? [ 101.817360][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 101.825109][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 101.853359][ T10] usb usb40-port1: unable to enumerate USB device [ 101.943133][ T5879] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 101.961584][ T5879] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 102.023648][ T5879] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 102.311162][ T6049] usb 3-1: USB disconnect, device number 10 [ 102.377861][ T5879] usb 2-1: USB disconnect, device number 11 [ 102.494732][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 102.494749][ T30] audit: type=1400 audit(1768846772.354:307): avc: denied { wake_alarm } for pid=6440 comm="syz.4.123" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.420229][ T30] audit: type=1400 audit(1768846773.274:308): avc: denied { create } for pid=6454 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.484582][ T6459] 9p: Bad value for 'rfdno' [ 103.487604][ T30] audit: type=1400 audit(1768846773.274:309): avc: denied { read write } for pid=6454 comm="syz.4.126" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.566602][ T30] audit: type=1400 audit(1768846773.274:310): avc: denied { open } for pid=6454 comm="syz.4.126" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.567387][ T6459] program syz.4.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.720611][ T30] audit: type=1400 audit(1768846773.344:311): avc: denied { read write } for pid=6454 comm="syz.4.126" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.745303][ T30] audit: type=1400 audit(1768846773.344:312): avc: denied { open } for pid=6454 comm="syz.4.126" path="/dev/sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.769804][ T6459] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 103.778868][ T30] audit: type=1400 audit(1768846773.524:313): avc: denied { ioctl } for pid=6454 comm="syz.4.126" path="/dev/sg0" dev="devtmpfs" ino=732 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.258083][ T5879] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 104.346919][ T30] audit: type=1400 audit(1768846774.304:314): avc: denied { setopt } for pid=6454 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.461754][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 104.468211][ T5879] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 104.480331][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.508380][ T5879] usb 3-1: config 0 has no interface number 0 [ 104.520284][ T5879] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 104.539459][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.652500][ T5879] usb 3-1: Product: syz [ 104.661758][ T5879] usb 3-1: Manufacturer: syz [ 104.666746][ T5879] usb 3-1: SerialNumber: syz [ 104.668693][ T30] audit: type=1400 audit(1768846774.624:315): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 104.691714][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.697256][ T5879] usb 3-1: config 0 descriptor?? [ 105.102560][ T30] audit: type=1400 audit(1768846774.844:316): avc: denied { create } for pid=6469 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.141607][ T5879] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 105.157215][ T5879] uvcvideo 3-1:0.105: No valid video chain found. [ 105.177075][ T5879] usb 3-1: USB disconnect, device number 11 [ 105.202006][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 105.213991][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.241720][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 105.272193][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 105.298032][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.322624][ T6477] tipc: Started in network mode [ 105.327512][ T6477] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 105.336906][ T6477] tipc: Enabling of bearer rejected, failed to enable media [ 105.346075][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 105.522714][ T10] usb 1-1: config 0 descriptor?? [ 106.239156][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 106.272780][ T6477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.287614][ T4360] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.296799][ T4360] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.307475][ T4360] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.357867][ T89] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.516176][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.528556][ T6483] netlink: 228 bytes leftover after parsing attributes in process `syz.4.134'. [ 106.977048][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.152784][ T6489] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 107.190540][ T4429] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.209969][ T4429] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.313198][ T6495] warning: `syz.0.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.634481][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.643227][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.986595][ T6500] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 108.002025][ T6500] loop6: detected capacity change from 0 to 3664 [ 108.009999][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.017999][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.025915][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.033767][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.041593][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.049455][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.058798][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.061282][ T6501] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 108.076448][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.076510][ T6501] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 108.084323][ T6500] ldm_validate_partition_table(): Disk read failed. [ 108.101961][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.104396][ T6501] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 108.119660][ T6500] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.120154][ T6501] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 108.137509][ T6500] Dev loop6: unable to read RDB block 0 [ 108.137513][ T6501] I/O error, dev loop6, sector 3040 op 0x1:(WRITE) flags 0x8800 phys_seg 79 prio class 2 [ 108.153281][ T6500] loop6: unable to read partition table [ 108.159080][ T6500] loop_reread_partitions: partition scan of loop6 (3„ ¾‚”˜) failed (rc=-5) [ 108.199953][ T6477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.210436][ T6477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.244158][ T6498] 9p: Bad value for 'wfdno' [ 108.351167][ T6477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.361967][ T6477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.446808][ T6477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.457136][ T6477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.539239][ T6052] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.551775][ T6052] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.654692][ T6052] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.671509][ T6052] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.790000][ T5879] usb 1-1: USB disconnect, device number 10 [ 108.953745][ T4498] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.962877][ T4498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.973791][ T4498] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.982171][ T4498] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.212464][ T6525] syz.0.140 uses obsolete (PF_INET,SOCK_PACKET) [ 109.224724][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 109.224738][ T30] audit: type=1400 audit(1768846779.174:326): avc: denied { ioctl } for pid=6515 comm="syz.0.140" path="socket:[11362]" dev="sockfs" ino=11362 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.257317][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 109.263679][ T5140] Bluetooth: hci5: command 0x1003 tx timeout [ 109.311843][ T5879] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.464895][ T5879] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 109.482503][ T5879] usb 2-1: config 0 has no interface number 0 [ 109.500725][ T5879] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.511836][ T6006] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 109.550726][ T5879] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 109.578591][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.611885][ T5879] usb 2-1: Product: syz [ 109.632033][ T5879] usb 2-1: Manufacturer: syz [ 109.644896][ T5879] usb 2-1: SerialNumber: syz [ 109.661521][ T5879] usb 2-1: config 0 descriptor?? [ 109.684753][ T6006] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.701163][ T5879] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 109.716913][ T6006] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.759784][ T6006] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.779642][ T6006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.015581][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.025237][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.034271][ T6006] usb 1-1: usb_control_msg returned -32 [ 110.042339][ T6006] usbtmc 1-1:16.0: can't read capabilities [ 110.045297][ T6535] mmap: syz.4.146 (6535) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.066214][ T6536] overlayfs: failed to resolve './file2': -2 [ 110.150525][ T30] audit: type=1400 audit(1768846780.104:327): avc: denied { create } for pid=6538 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.543757][ T6547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6547 comm=syz.2.148 [ 110.930263][ T30] audit: type=1400 audit(1768846780.884:328): avc: denied { ioctl } for pid=6548 comm="syz.3.149" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.271775][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 111.423598][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 111.437239][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.444245][ T6556] bond1: option ad_actor_sys_prio: invalid value (0) [ 111.455278][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.456132][ T6556] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 111.465273][ T5879] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 111.482412][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.564057][ T5879] usb 5-1: config 0 descriptor?? [ 111.571421][ T6556] bond1 (unregistering): Released all slaves [ 111.897728][ T5978] usb 1-1: USB disconnect, device number 11 [ 111.994908][ T5879] elecom 0003:056E:00FF.0004: unknown main item tag 0x4 [ 112.008995][ T5879] elecom 0003:056E:00FF.0004: unknown main item tag 0x1 [ 112.016933][ T5879] elecom 0003:056E:00FF.0004: unknown main item tag 0x6 [ 112.024680][ T5879] elecom 0003:056E:00FF.0004: reserved main item tag 0xe [ 112.032143][ T5879] elecom 0003:056E:00FF.0004: unknown global tag 0xe [ 112.041740][ T5879] elecom 0003:056E:00FF.0004: item 0 2 1 14 parsing failed [ 112.107032][ T10] usb 2-1: USB disconnect, device number 12 [ 112.123639][ T10] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 112.142109][ T5879] elecom 0003:056E:00FF.0004: probe with driver elecom failed with error -22 [ 112.188060][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 112.203564][ T5879] usb 5-1: USB disconnect, device number 9 [ 112.447373][ T30] audit: type=1400 audit(1768846782.404:329): avc: denied { mount } for pid=6576 comm="syz.2.157" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 112.624071][ T30] audit: type=1400 audit(1768846782.584:330): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 113.380740][ T30] audit: type=1400 audit(1768846783.234:331): avc: denied { execute } for pid=6579 comm="syz.1.158" path="/proc/asound/card2/oss_mixer" dev="proc" ino=4026532646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 113.451042][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 113.517165][ T30] audit: type=1400 audit(1768846783.404:332): avc: denied { connect } for pid=6586 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.962245][ T6590] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 114.374183][ T30] audit: type=1400 audit(1768846784.334:333): avc: denied { setattr } for pid=6601 comm="syz.3.166" name="NETLINK" dev="sockfs" ino=11491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.451810][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 114.626435][ T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 114.698009][ T10] usb 2-1: config 0 has no interface number 0 [ 114.791869][ T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.819205][ T30] audit: type=1400 audit(1768846784.774:334): avc: denied { read write } for pid=6603 comm="syz.2.165" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 114.843442][ T30] audit: type=1400 audit(1768846784.774:335): avc: denied { ioctl open } for pid=6603 comm="syz.2.165" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 114.897702][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 114.917018][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.927103][ T10] usb 2-1: Product: syz [ 114.931266][ T10] usb 2-1: Manufacturer: syz [ 114.937074][ T10] usb 2-1: SerialNumber: syz [ 114.962907][ T5879] IPVS: starting estimator thread 0... [ 114.965817][ T10] usb 2-1: config 0 descriptor?? [ 114.981481][ T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 115.061778][ T6614] IPVS: using max 50 ests per chain, 120000 per kthread [ 115.111472][ T5931] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.332114][ T6618] overlayfs: failed to resolve './file2': -2 [ 115.382058][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 115.395978][ T5931] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 115.405331][ T5931] usb 3-1: config 0 has no interface number 0 [ 115.412561][ T5931] usb 3-1: config 0 interface 89 has no altsetting 0 [ 115.424097][ T5931] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 115.450573][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.465387][ T5931] usb 3-1: Product: syz [ 115.477102][ T5931] usb 3-1: Manufacturer: syz [ 115.482224][ T5931] usb 3-1: SerialNumber: syz [ 115.501068][ T5931] usb 3-1: config 0 descriptor?? [ 115.525849][ T5931] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 115.564373][ T5931] em28xx 3-1:0.89: Video interface 89 found: bulk [ 115.745926][ T6632] trusted_key: syz.3.171 sent an empty control message without MSG_MORE. [ 115.746666][ T30] audit: type=1400 audit(1768846785.704:336): avc: denied { connect } for pid=6626 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.970072][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 115.982041][ T30] audit: type=1400 audit(1768846785.944:337): avc: denied { create } for pid=6636 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.229085][ T30] audit: type=1400 audit(1768846786.184:338): avc: denied { ioctl } for pid=6642 comm="syz.3.174" path="socket:[11597]" dev="sockfs" ino=11597 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.792103][ T5931] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 116.875102][ T5931] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 116.894597][ T5931] em28xx 3-1:0.89: board has no eeprom [ 116.962740][ T5931] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 116.970185][ T5931] em28xx 3-1:0.89: analog set to bulk mode. [ 117.009290][ T10] em28xx 3-1:0.89: Registering V4L2 extension [ 117.028644][ T6657] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.286241][ T6006] usb 2-1: USB disconnect, device number 13 [ 117.836387][ T10] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 117.846923][ T10] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 117.855443][ T6049] usb 3-1: USB disconnect, device number 12 [ 117.864248][ T10] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-19) [ 117.867253][ T6006] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 117.921075][ T6049] em28xx 3-1:0.89: Disconnecting em28xx [ 118.034233][ T10] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 118.041363][ T10] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 118.048501][ T10] em28xx 3-1:0.89: No AC97 audio processor [ 118.061131][ T10] usb 3-1: Decoder not found [ 118.666638][ T30] audit: type=1400 audit(1768846788.244:339): avc: denied { bind } for pid=6656 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.711506][ T10] em28xx 3-1:0.89: failed to create media graph [ 118.717893][ T10] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 118.738112][ T10] em28xx 3-1:0.89: Registering snapshot button... [ 118.776063][ T6671] ================================================================== [ 118.784140][ T6671] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 118.791607][ T6671] Read of size 8 at addr ffff88807c418740 by task v4l_id/6671 [ 118.799056][ T6671] [ 118.801380][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 118.801403][ T6671] Tainted: [L]=SOFTLOCKUP [ 118.801409][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.801424][ T6671] Call Trace: [ 118.801429][ T6671] [ 118.801435][ T6671] dump_stack_lvl+0x116/0x1f0 [ 118.801463][ T6671] print_report+0xcd/0x630 [ 118.801484][ T6671] ? __virt_addr_valid+0x81/0x610 [ 118.801500][ T6671] ? __phys_addr+0xe8/0x180 [ 118.801515][ T6671] ? v4l2_fh_init+0x27d/0x2c0 [ 118.801536][ T6671] kasan_report+0xe0/0x110 [ 118.801557][ T6671] ? v4l2_fh_init+0x27d/0x2c0 [ 118.801580][ T6671] v4l2_fh_init+0x27d/0x2c0 [ 118.801601][ T6671] v4l2_fh_open+0x64/0xa0 [ 118.801622][ T6671] em28xx_v4l2_open+0x24e/0x7e0 [ 118.801647][ T6671] v4l2_open+0x1d2/0x5e0 [ 118.801665][ T6671] ? __pfx_v4l2_open+0x10/0x10 [ 118.801682][ T6671] chrdev_open+0x234/0x6a0 [ 118.801704][ T6671] ? __pfx_chrdev_open+0x10/0x10 [ 118.801723][ T6671] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 118.801749][ T6671] do_dentry_open+0x748/0x1590 [ 118.801769][ T6671] ? __pfx_chrdev_open+0x10/0x10 [ 118.801794][ T6671] vfs_open+0x82/0x3f0 [ 118.801810][ T6671] path_openat+0x2078/0x3140 [ 118.801837][ T6671] ? __pfx_path_openat+0x10/0x10 [ 118.801863][ T6671] do_filp_open+0x20b/0x470 [ 118.801887][ T6671] ? __pfx_do_filp_open+0x10/0x10 [ 118.801917][ T6671] ? alloc_fd+0x471/0x7d0 [ 118.801943][ T6671] do_sys_openat2+0x121/0x290 [ 118.801958][ T6671] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.801974][ T6671] ? count_memcg_events+0x122/0x290 [ 118.801997][ T6671] __x64_sys_openat+0x174/0x210 [ 118.802014][ T6671] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.802031][ T6671] ? do_user_addr_fault+0x843/0x1370 [ 118.802055][ T6671] do_syscall_64+0xcd/0xf80 [ 118.802079][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.802095][ T6671] RIP: 0033:0x7fde730a7407 [ 118.802110][ T6671] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 118.802125][ T6671] RSP: 002b:00007fffcec347c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 118.802141][ T6671] RAX: ffffffffffffffda RBX: 00007fde7383a880 RCX: 00007fde730a7407 [ 118.802151][ T6671] RDX: 0000000000000000 RSI: 00007fffcec35f1c RDI: ffffffffffffff9c [ 118.802161][ T6671] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 118.802170][ T6671] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 118.802179][ T6671] R13: 00007fffcec34a10 R14: 00007fde739a1000 R15: 000055ed59d624d8 [ 118.802195][ T6671] [ 118.802200][ T6671] [ 119.058355][ T6671] Allocated by task 10: [ 119.062482][ T6671] kasan_save_stack+0x33/0x60 [ 119.067156][ T6671] kasan_save_track+0x14/0x30 [ 119.071808][ T6671] __kasan_kmalloc+0xaa/0xb0 [ 119.076373][ T6671] em28xx_v4l2_init+0x114/0x4080 [ 119.081310][ T6671] em28xx_init_extension+0x13a/0x200 [ 119.086568][ T6671] request_module_async+0x61/0x70 [ 119.091569][ T6671] process_one_work+0x9ba/0x1b20 [ 119.096485][ T6671] worker_thread+0x6c8/0xf10 [ 119.101053][ T6671] kthread+0x3c5/0x780 [ 119.105097][ T6671] ret_from_fork+0x983/0xb10 [ 119.109749][ T6671] ret_from_fork_asm+0x1a/0x30 [ 119.114494][ T6671] [ 119.116807][ T6671] Freed by task 10: [ 119.120589][ T6671] kasan_save_stack+0x33/0x60 [ 119.125240][ T6671] kasan_save_track+0x14/0x30 [ 119.129899][ T6671] kasan_save_free_info+0x3b/0x60 [ 119.134899][ T6671] __kasan_slab_free+0x5f/0x80 [ 119.139639][ T6671] kfree+0x2f8/0x6e0 [ 119.143506][ T6671] em28xx_v4l2_init+0x22b5/0x4080 [ 119.148508][ T6671] em28xx_init_extension+0x13a/0x200 [ 119.153768][ T6671] request_module_async+0x61/0x70 [ 119.158787][ T6671] process_one_work+0x9ba/0x1b20 [ 119.163702][ T6671] worker_thread+0x6c8/0xf10 [ 119.168269][ T6671] kthread+0x3c5/0x780 [ 119.172314][ T6671] ret_from_fork+0x983/0xb10 [ 119.176892][ T6671] ret_from_fork_asm+0x1a/0x30 [ 119.181636][ T6671] [ 119.183935][ T6671] The buggy address belongs to the object at ffff88807c418000 [ 119.183935][ T6671] which belongs to the cache kmalloc-8k of size 8192 [ 119.197963][ T6671] The buggy address is located 1856 bytes inside of [ 119.197963][ T6671] freed 8192-byte region [ffff88807c418000, ffff88807c41a000) [ 119.211919][ T6671] [ 119.214228][ T6671] The buggy address belongs to the physical page: [ 119.220608][ T6671] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c418 [ 119.229341][ T6671] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 119.237811][ T6671] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 119.245764][ T6671] page_type: f5(slab) [ 119.249723][ T6671] raw: 00fff00000000040 ffff88813ff27280 0000000000000000 dead000000000001 [ 119.258297][ T6671] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 119.266886][ T6671] head: 00fff00000000040 ffff88813ff27280 0000000000000000 dead000000000001 [ 119.275541][ T6671] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 119.284191][ T6671] head: 00fff00000000003 ffffea0001f10601 00000000ffffffff 00000000ffffffff [ 119.292838][ T6671] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 119.301495][ T6671] page dumped because: kasan: bad access detected [ 119.307880][ T6671] page_owner tracks the page as allocated [ 119.313567][ T6671] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5498, tgid 5498 (dhcpcd-run-hook), ts 34902289897, free_ts 34901057579 [ 119.334379][ T6671] post_alloc_hook+0x1af/0x220 [ 119.339125][ T6671] get_page_from_freelist+0xd0b/0x31a0 [ 119.344565][ T6671] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 119.350435][ T6671] alloc_pages_mpol+0x1fb/0x550 [ 119.355263][ T6671] new_slab+0x2c3/0x430 [ 119.359398][ T6671] ___slab_alloc+0xe18/0x1c90 [ 119.364060][ T6671] __slab_alloc.constprop.0+0x63/0x110 [ 119.369492][ T6671] __kmalloc_cache_noprof+0x485/0x800 [ 119.374837][ T6671] tomoyo_init_log+0xc8a/0x2140 [ 119.379667][ T6671] tomoyo_supervisor+0x302/0x13b0 [ 119.384668][ T6671] tomoyo_env_perm+0x191/0x200 [ 119.389403][ T6671] tomoyo_find_next_domain+0xec1/0x20b0 [ 119.394925][ T6671] tomoyo_bprm_check_security+0x12d/0x1d0 [ 119.400620][ T6671] security_bprm_check+0x1b9/0x1e0 [ 119.405709][ T6671] bprm_execve+0x81e/0x1620 [ 119.410188][ T6671] do_execveat_common.isra.0+0x4a5/0x610 [ 119.415797][ T6671] page last free pid 5498 tgid 5498 stack trace: [ 119.422095][ T6671] __free_frozen_pages+0x7df/0x1170 [ 119.427272][ T6671] __put_partials+0x130/0x170 [ 119.431921][ T6671] qlist_free_all+0x4c/0xf0 [ 119.436397][ T6671] kasan_quarantine_reduce+0x195/0x1e0 [ 119.441836][ T6671] __kasan_slab_alloc+0x69/0x90 [ 119.446666][ T6671] __kmalloc_noprof+0x2f6/0x910 [ 119.451489][ T6671] tomoyo_supervisor+0x45b/0x13b0 [ 119.456485][ T6671] tomoyo_env_perm+0x191/0x200 [ 119.461224][ T6671] tomoyo_find_next_domain+0xec1/0x20b0 [ 119.466746][ T6671] tomoyo_bprm_check_security+0x12d/0x1d0 [ 119.472444][ T6671] security_bprm_check+0x1b9/0x1e0 [ 119.477533][ T6671] bprm_execve+0x81e/0x1620 [ 119.482015][ T6671] do_execveat_common.isra.0+0x4a5/0x610 [ 119.487623][ T6671] __x64_sys_execve+0x8e/0xb0 [ 119.492276][ T6671] do_syscall_64+0xcd/0xf80 [ 119.496758][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.502626][ T6671] [ 119.504926][ T6671] Memory state around the buggy address: [ 119.510526][ T6671] ffff88807c418600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.518560][ T6671] ffff88807c418680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 119.526596][ T6671] >ffff88807c418700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.534629][ T6671] ^ [ 119.540751][ T6671] ffff88807c418780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.548792][ T6671] ffff88807c418800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.556824][ T6671] ================================================================== [ 119.593320][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input11 [ 119.602312][ T30] audit: type=1400 audit(1768846788.244:340): avc: denied { name_bind } for pid=6656 comm="syz.0.177" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 119.625948][ T30] audit: type=1400 audit(1768846788.834:341): avc: denied { watch } for pid=6667 comm="syz.1.180" path="/29" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.651159][ T6671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.658357][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 119.668850][ T6671] Tainted: [L]=SOFTLOCKUP [ 119.673159][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.683198][ T6671] Call Trace: [ 119.686461][ T6671] [ 119.689381][ T6671] dump_stack_lvl+0x3d/0x1f0 [ 119.693981][ T6671] vpanic+0x640/0x6f0 [ 119.697956][ T6671] panic+0xca/0xd0 [ 119.701666][ T6671] ? __pfx_panic+0x10/0x10 [ 119.706066][ T6671] ? v4l2_fh_init+0x27d/0x2c0 [ 119.710741][ T6671] ? preempt_schedule_common+0x44/0xc0 [ 119.716190][ T6671] ? preempt_schedule_thunk+0x16/0x30 [ 119.721552][ T6671] ? check_panic_on_warn+0x1f/0xb0 [ 119.726653][ T6671] check_panic_on_warn+0xab/0xb0 [ 119.731580][ T6671] end_report+0x107/0x160 [ 119.735901][ T6671] kasan_report+0xee/0x110 [ 119.740310][ T6671] ? v4l2_fh_init+0x27d/0x2c0 [ 119.744982][ T6671] v4l2_fh_init+0x27d/0x2c0 [ 119.749478][ T6671] v4l2_fh_open+0x64/0xa0 [ 119.753800][ T6671] em28xx_v4l2_open+0x24e/0x7e0 [ 119.758646][ T6671] v4l2_open+0x1d2/0x5e0 [ 119.762878][ T6671] ? __pfx_v4l2_open+0x10/0x10 [ 119.767631][ T6671] chrdev_open+0x234/0x6a0 [ 119.772041][ T6671] ? __pfx_chrdev_open+0x10/0x10 [ 119.776973][ T6671] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 119.783300][ T6671] do_dentry_open+0x748/0x1590 [ 119.788054][ T6671] ? __pfx_chrdev_open+0x10/0x10 [ 119.792990][ T6671] vfs_open+0x82/0x3f0 [ 119.797046][ T6671] path_openat+0x2078/0x3140 [ 119.801633][ T6671] ? __pfx_path_openat+0x10/0x10 [ 119.806568][ T6671] do_filp_open+0x20b/0x470 [ 119.811072][ T6671] ? __pfx_do_filp_open+0x10/0x10 [ 119.816107][ T6671] ? alloc_fd+0x471/0x7d0 [ 119.820448][ T6671] do_sys_openat2+0x121/0x290 [ 119.825120][ T6671] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.830306][ T6671] ? count_memcg_events+0x122/0x290 [ 119.835478][ T6671] __x64_sys_openat+0x174/0x210 [ 119.840300][ T6671] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.845641][ T6671] ? do_user_addr_fault+0x843/0x1370 [ 119.850898][ T6671] do_syscall_64+0xcd/0xf80 [ 119.855378][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.861243][ T6671] RIP: 0033:0x7fde730a7407 [ 119.865628][ T6671] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 119.885209][ T6671] RSP: 002b:00007fffcec347c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 119.893594][ T6671] RAX: ffffffffffffffda RBX: 00007fde7383a880 RCX: 00007fde730a7407 [ 119.901537][ T6671] RDX: 0000000000000000 RSI: 00007fffcec35f1c RDI: ffffffffffffff9c [ 119.909479][ T6671] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 119.917421][ T6671] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 119.925364][ T6671] R13: 00007fffcec34a10 R14: 00007fde739a1000 R15: 000055ed59d624d8 [ 119.933310][ T6671] [ 119.936592][ T6671] Kernel Offset: disabled [ 119.940886][ T6671] Rebooting in 86400 seconds..