last executing test programs:

1m10.187350412s ago: executing program 2 (id=3):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xe2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000380)={0x80, 0x0, 0x1ff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0xd39, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000001400)=0x4000005, 0x4)
bind$inet(r4, &(0x7f0000001440)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000001480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r4, &(0x7f00000014c0), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000001500)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
connect$inet(r4, &(0x7f0000001540)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1)
close(r5)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001380)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000580)={0xd84, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x53, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x6000, 0x101, 0x95, 0x7, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x8}, {0x3, 0x2}, {0x6}, {0x2, 0x4}, {0x7, 0x5}, {}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x6, 0x9}, {0x4, 0x7}, {0x4, 0x9}, {0x4, 0x3}, {0x5}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x7, 0x0, 0x1, 0x3, 0x1, 0xfff8]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7f, 0x8, 0x3, 0xbd, 0x8, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0x4}, {0x6}, {0x5, 0x2}, {0x5, 0x7}, {0x5, 0x6}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x2}, {0x1}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x2}, {0x3, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xb, 0x6, 0x2, 0x8, 0x74d6, 0x8, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x77c6, 0x2, 0xb19, 0x200, 0x8, 0xf, 0xfff8, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x8, 0xfff9, 0x2, 0x0, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xd, 0x2, 0xfff9, 0x200, 0x2, 0x4dcf, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x48, 0x1, 0x18, 0x1b, 0x6, 0x30, 0x19, 0x1, 0x1, 0xb, 0x1, 0x18, 0x2, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x6, 0x48, 0x1]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x1b, 0x9, 0x1b, 0x18, 0x12, 0x1, 0x12, 0x4, 0x1b, 0x30, 0x16, 0x5, 0xb, 0x2, 0x30, 0xc, 0xc, 0x6c, 0x1, 0x6, 0xb, 0x2a, 0x16, 0x36, 0x36, 0x36, 0xb, 0x5, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x3, 0x8, 0x0, 0x4, 0x4, 0xff]}}]}]}, @NL80211_ATTR_TX_RATES={0x1f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x4}, {0x1}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x1, 0x8}, {0x4}, {0x2, 0xa}, {0x5, 0xa}, {0x4, 0x9}, {0x5, 0x1}, {0x1}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xdd, 0x52, 0x6, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x6}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xf65e, 0x4bb4, 0x2, 0x8, 0x181, 0x2639, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x8, 0x6, 0x7, 0x1000, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x263, 0x6, 0x6, 0x5, 0x4, 0x35ce, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x200, 0x9, 0x2, 0x2, 0x2, 0x800, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x0, 0x65, 0x9, 0x8ff, 0x401, 0x5]}}]}, @NL80211_BAND_2GHZ={0x10c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x18, 0x1b, 0x1, 0x12, 0x5, 0x70, 0x1b, 0x2, 0x48, 0x4, 0x3, 0x48, 0x9, 0x12, 0x6, 0x30, 0x5, 0x6]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x9}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x5}, {0x1, 0x5}, {}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x3, 0x3}, {}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x1}, {0x4, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x1}, {0x5}, {0x7, 0x5}, {0x1, 0x6}, {}, {0x7, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x1, 0x9}, {0x6, 0x6}, {0x7, 0x6}, {0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x9}, {0x3}, {0x1, 0x6}, {0x6, 0x7}, {0x3, 0x1}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x5}, {0x4, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x6, 0x4}, {0x0, 0x7}, {0x2}, {0x2, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x9, 0x8, 0x2, 0x4, 0x4, 0x401, 0x9]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x7}, {0x2, 0x8}, {0x2, 0x5}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x6, 0x1}, {0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x2, 0x4}, {0x5, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xa9e9, 0x0, 0x7, 0x1ff, 0xcf, 0x100, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x12, 0x24, 0x6c, 0x3, 0x5, 0x60, 0xc, 0x24, 0x6, 0x48, 0x4, 0x24, 0x30, 0x12, 0x28, 0x60, 0x5, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6bae, 0x3, 0x10, 0xff, 0x6, 0xff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd, 0xffbe, 0x6, 0xedb, 0xf, 0xb182, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x254, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x2}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {}, {0x0, 0xa}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0x2}, {0x5, 0x5}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x2, 0x6}, {0x7, 0x6}, {0x7, 0x6}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x3, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x0, 0xb2, 0x7, 0x0, 0xa15, 0x2]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0xa}, {0x3, 0x9}, {0x2}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x1}, {0x4, 0x3}, {0x7, 0x4}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x4, 0x3}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x1}, {0x2, 0x7}, {0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0x10}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0xa}, {0x1}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb3f8, 0x3, 0x9, 0x1, 0x5, 0x4, 0x9, 0xfeff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x9}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x4, 0x4, 0x7, 0x2, 0x9, 0x9, 0x7]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0xa}, {0x5, 0xa}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x3}, {0x3, 0x6}, {0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x6, 0xc, 0x2, 0x9, 0x5, 0x3, 0xc, 0xb, 0x3, 0x6c, 0x18, 0xb, 0xb, 0xb, 0x5, 0x36, 0x12, 0x60]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xa, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x1}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x53, 0x48, 0x0, 0x18, 0x1b, 0x18, 0x4, 0x3, 0x24, 0x48, 0x9, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x250, 0x7, 0x8001, 0x4000, 0x4, 0xffff, 0x7f, 0xfeff]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x3}, {0x4, 0x9}, {0x2, 0x5}, {0x4, 0x9}, {0x5}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x3, 0x3}, {0x6, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x7}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x7, 0x1}, {0x1, 0x1}, {0x6}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x9}, {0x4, 0xa}, {0x7, 0x8}, {0x6}, {0x3, 0x9}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x6}, {}, {0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x5}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x101, 0xe, 0x1, 0x2dc5, 0x9a, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x7, 0x3, 0x17, 0x0, 0x0, 0x2, 0x5]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff9, 0x2, 0x10f7, 0x81, 0xfff, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x65, 0x33, 0x24, 0x1, 0x3, 0x6c, 0x5, 0x16, 0x5, 0x1, 0x27, 0x30, 0x6, 0x16, 0x24, 0x6, 0x18, 0x48, 0x6, 0x18]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x5, 0x9}, {0x2, 0x2}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x5}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x6, 0xa}, {}, {0x0, 0x4}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x4, 0xa}, {0x7}, {0x4, 0x7}, {0x2, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0x5}, {0x4, 0x7}, {0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0x5}, {0x3}, {0x3, 0x2}, {0x7, 0x4}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x8}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x4, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x5}, {0x3}, {0x6}, {0x3, 0x7}, {0x0, 0x8}, {0x6}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x16, 0x7f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xff00, 0x24b, 0xd6, 0x5, 0x3, 0x7, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x5230, 0x3ff, 0x0, 0x8, 0x6f, 0x2]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x2}, {0x1, 0x1}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x2, 0x8}, {0x3, 0x2}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x6}, {0x6}, {0x4, 0x9}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x400, 0x8, 0xe, 0xc, 0x4013, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x6, 0x888, 0x3, 0x6, 0x5, 0x618c, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x1, 0x7, 0x3, 0x6, 0x7f, 0xff]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0xa}, {}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x1d, 0x16, 0x3, 0x36, 0x6, 0x12, 0x2, 0x48, 0x3, 0xc, 0x12, 0x9, 0x24, 0x30, 0x40, 0x5, 0x5, 0x1b, 0x60, 0x18, 0x30, 0x24, 0x12, 0x3, 0x2, 0x18, 0x1b, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xca42, 0x3, 0xf489, 0x4, 0x3, 0x12e7, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xff, 0x5, 0x7904, 0xb718, 0x392, 0x8001, 0xd32a]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x8}, {0x7, 0x2}, {0x2, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x5}, {0x7}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x1}, {0x7, 0x9}, {0x3, 0x3}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x7}, {0x1, 0x5}, {0x3}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x1}, {0x5, 0x5}, {0x6, 0x2}, {0x4, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0xa}, {0x4, 0x5}, {0x3, 0x1}, {0x1, 0x3}, {0x2, 0x8}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x6c, 0xc, 0xc, 0x18, 0x48, 0x4, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xf, 0x23, 0xee, 0x8, 0x5f, 0x1]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x200, 0x22, 0x7, 0x7, 0x2c5e, 0x8, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0x24, 0x2e, 0x60, 0x12, 0x12, 0x6c, 0x60, 0x16, 0x6c, 0x5, 0x2, 0x60, 0x60, 0x4, 0x18, 0xc, 0x67, 0x12, 0x48, 0x9, 0x30, 0x4, 0x7b, 0x18, 0x18, 0x30, 0x16, 0x36, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x1}, {0x2, 0xa}, {0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x1, 0x9}, {0x3}, {0x4, 0x8}, {0x0, 0x5}, {0x7, 0x9}, {0x1}, {0x6, 0x9}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x8}, {0x5, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7b, 0x5, 0x4, 0x9, 0x0, 0x39, 0x9, 0x36]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x1, 0x8, 0x9, 0x2, 0x8, 0x3e63]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x9, 0x12, 0x1, 0x28, 0x18, 0x9, 0x6, 0x1, 0x30, 0x1]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x7}, {0x3, 0x8}, {0x4, 0x1}, {0x4}, {0x7, 0x6}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x5}, {0x5, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0x4}, {0x4, 0x5}, {0x3, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x5, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0x2}, {0x3, 0x9}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x5, 0xa}, {0x5}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x27, 0x40, 0x7f, 0x7, 0x4, 0x39b7, 0x7ff]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0xa}, {0x4, 0x8}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x8}, {0x1}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0xa}, {0x6, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x3, 0x5}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x2}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x7}, {0x6, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x4}, {0x2, 0x6}, {0x7, 0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x4}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x1b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x6, 0x7}, {0x2, 0xa}, {0x5, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x3, 0x8, 0x6, 0x3, 0x0, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x100, 0x778, 0x8, 0x948, 0xffff, 0x7f6, 0x5]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x8}, {0x6, 0x6}, {0x2, 0x1c}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0x9}, {0x4, 0x1}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x1b, 0x60, 0x29, 0x2, 0x48, 0x16, 0x1, 0x0, 0xb, 0x6, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x90}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x6}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x5}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x9}, {0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x6, 0x9}, {0x4, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x2, 0x9}, {0x6, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x5}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x3}, {0x5, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x5}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x3}, {}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x5, 0x2}, {0x5, 0x8}, {0x1}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x7}, {0x1}, {0x5, 0x8}, {0x0, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x3, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x7, 0x4}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x9}, {0x2, 0x1}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x3}, {0x7, 0x6}, {0x6, 0x8}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec2b, 0x401, 0x400, 0x7, 0xfff, 0x7fff, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd11e, 0x800, 0x0, 0x3, 0x9, 0x6, 0xc1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x38, 0x3, 0xa81, 0x2, 0x2c3d, 0xd932, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff8, 0x6, 0x81, 0x6, 0x8, 0x7, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x2, 0xa}, {0x7, 0x9}, {0x4}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0x4}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x1}, {0x3, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0x1}, {0x1, 0x2}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x5}, {0x0, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x48, 0x1, 0x30, 0x16, 0x2, 0x16, 0xc, 0x1, 0x6, 0x6, 0x52, 0x5, 0x6c, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0x8, 0x4, 0x0, 0x24, 0x0, 0x5]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x7}, {0x5, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0x1c}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x1}, {0x3, 0xa}, {0x6, 0x4}, {0x2}, {0x2, 0x5}, {0x2, 0x7}, {0x3, 0x8}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x7}, {0x1, 0x1e}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x2}, {0x4, 0x1}, {0x4, 0x8}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x8}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x9}, {0x7}, {0x3, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x8}, {0x7, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x3, 0x6}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x9}, {0x3, 0x3}, {0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x6}, {0x5, 0x7}, {}, {0x6}, {0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x5, 0x6}, {0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x4}, {0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x6}, {0x2}, {0x3, 0x1}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x16, 0x48, 0x9, 0x1b, 0xc41b6bb302f41080, 0x0, 0x60, 0x0, 0x2, 0x9, 0x9, 0xc]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x8, 0x3, 0x1, 0x6, 0x3, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xc000, 0x8, 0x3, 0xfff, 0x4, 0x8000, 0xd540]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x2, 0x79, 0x14, 0x16, 0x60, 0x6c, 0x4, 0x60, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x4}, {}, {0x5, 0xa}, {0x7, 0x9}, {0x3}, {0x7}, {0x6, 0x8}, {0x4, 0xa}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x9}, {0x6, 0x8}, {0x2, 0x5}, {0x4, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0x2}, {0x2, 0x5}, {0x1}, {0x4, 0x1f}, {0x4, 0x5}, {0x7, 0x7}, {0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x5}, {0x6, 0x2}, {0x2, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x30, 0x56, 0x2, 0x31, 0x2, 0x12, 0x1b, 0x6, 0x6c, 0x30, 0x6c, 0x2, 0x5, 0x3, 0x16, 0x4, 0xb, 0x16, 0x24, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xd84}, 0x1, 0x0, 0x0, 0x800}, 0x87)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000340)=[{0x24}, {0x6, 0x0, 0x3}]})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r9=>0x0})
sendto$packet(r3, &(0x7f0000000080)="5a181e9f51242cb3d81414ef4a74", 0xe, 0x90, &(0x7f00000000c0)={0x11, 0x8, r9, 0x1, 0x6, 0x6, @random="41532721c29a"}, 0x14)
syz_usb_connect(0x3, 0x32, &(0x7f00000013c0)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904"], 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xff, 0x0, 0xb8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x5}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="050f050000c4427d787dc1a2cec8c7d02be6559cff8f484f671f5b0d859f979ca16acc23d27fefb81aed90"], 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x5, &(0x7f0000000180)=@string={0x5, 0x3, "087717"}}]})

1m7.125311605s ago: executing program 2 (id=16):
r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080))
dup2(r0, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f0000000140)=@ethtool_ts_info})
stat(&(0x7f0000000040)='./proc\x00', &(0x7f00000001c0))

1m7.073051007s ago: executing program 2 (id=17):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067ff9bf6c5f6a2ad0b050bc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100020810", 0x58}], 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x2f)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e27, 0x401, @mcast1, 0xa0004}, 0x1c)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x9, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xdc}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1m7.033202358s ago: executing program 2 (id=18):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000008c0)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mnt\x00', 0x0)
mount(&(0x7f0000000980)=@filename='./dev/sda1\x00', &(0x7f00000009c0)='./mnt\x00', &(0x7f0000000a00)='ext4\x00', 0x8410, 0x0)
setxattr$system_posix_acl(&(0x7f0000000a40)='./mnt\x00', &(0x7f0000000a80)='system.posix_acl_access\x00', &(0x7f0000000ac0)={{}, {}, [], {0x4, 0x7}, [], {0x10, 0x1}}, 0x24, 0x1)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r0=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10c)
write(r4, &(0x7f0000000400)='9', 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x8040, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r4, 0x4068aea3, &(0x7f0000000b00)={0xe1, 0x0, 0x2000})
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x9)
syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r6, &(0x7f00000004c0)=[{{&(0x7f0000000780)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)='A', 0x1}], 0x1}}], 0x1, 0x34008000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x1000)
syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6c2, 0x4, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x200, 0x0, 0x20146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x4, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

1m6.508060381s ago: executing program 2 (id=25):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = syz_open_procfs(r1, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0)
recvfrom$inet_nvme(r3, 0x0, 0x0, 0x10000, 0x0, 0x0)
r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000000c0)=0x2)
write(r4, &(0x7f0000000040)="3f10e1f43b910934faeccb8e8cb9dbdd0cb795c5132f015eeba3348a779194fc72d372afbb545bd8d2d509fbe46beaa5934ecab72118565b9ea568d4eb72988efbee2a39a911cf43f3cc9c6fa23ab1d11e8ddf7b2f99029b9d703a7ecf63da3e52c0a2", 0x63)

50.85943004s ago: executing program 32 (id=25):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = syz_open_procfs(r1, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0)
recvfrom$inet_nvme(r3, 0x0, 0x0, 0x10000, 0x0, 0x0)
r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000000c0)=0x2)
write(r4, &(0x7f0000000040)="3f10e1f43b910934faeccb8e8cb9dbdd0cb795c5132f015eeba3348a779194fc72d372afbb545bd8d2d509fbe46beaa5934ecab72118565b9ea568d4eb72988efbee2a39a911cf43f3cc9c6fa23ab1d11e8ddf7b2f99029b9d703a7ecf63da3e52c0a2", 0x63)

49.839126794s ago: executing program 4 (id=90):
setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x7}}, 0x24, 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ef)
lsetxattr$security_capability(&(0x7f0000000300)='./file1\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x387)
mount$overlay(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
truncate(&(0x7f0000000740)='./file0/file1\x00', 0xe2)
setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x7}}, 0x24, 0x3) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ef) (async)
lsetxattr$security_capability(&(0x7f0000000300)='./file1\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040), 0x4) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1c8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x387) (async)
mount$overlay(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
truncate(&(0x7f0000000740)='./file0/file1\x00', 0xe2) (async)

49.819741065s ago: executing program 4 (id=95):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x99})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x42002, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x2})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @multicast})
write$tun(r5, &(0x7f0000000500)={@val={0x0, 0x6005}, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x16, 0x868, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @echo={0x8, 0x0, 0x0, 0x54f0, 0x40}}}}}}, 0x36)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='3', 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f0000000100)=[{{&(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x4, "04d9"}]}}}], 0x18}}], 0x2, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)

49.009153154s ago: executing program 4 (id=101):
r0 = socket(0x10, 0x802, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2ac, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x178, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x716b}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x38}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x66c8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffa0}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe70}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x76}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6d}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x24040000}, 0x8800)
write(r0, &(0x7f0000000140)="fc00000018000703ab092500090007000a070000000000060000369321000700ff2500000005d00000000000000398996c92773411419da79bb94b46fe00006cf0abbb0000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab00f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc)

26.47952049s ago: executing program 33 (id=101):
r0 = socket(0x10, 0x802, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2ac, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x178, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x716b}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x38}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x66c8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffa0}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe70}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x76}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6d}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x24040000}, 0x8800)
write(r0, &(0x7f0000000140)="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", 0xfc)

12.105280017s ago: executing program 3 (id=204):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20100, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1a12})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000080))
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000480)="0f011a66b83c2900000f23c80f21f866350c00d0000f23f866b9800000c00f326635000100000f30ba2100ed3e6664660f54e866660f3881b8cfa8baf80c66b8345dc08966efbafc0c66ed66b9ee0900000f320fb4020f01c4", 0x59}], 0x1, 0x31, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.408586739s ago: executing program 3 (id=206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0xbc, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x14, 0x3, "0e70ceb8d410784567b3fed6c12e0df1"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

10.406793499s ago: executing program 3 (id=207):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2001}, 0x18, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x2000}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
socket$unix(0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}], 0x20}, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000"], 0x1c}}, 0x0)
setreuid(0x0, r6)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.36095098s ago: executing program 3 (id=209):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x8001)
r5 = getpgid(0x0)
fcntl$setownex(r4, 0xf, &(0x7f00000001c0)={0x1, r5})
fcntl$setsig(r4, 0xa, 0x26)
sendmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="11", 0x1}], 0x1}}], 0x1, 0x40015)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076001f03000000020000000008000000ffffffff0c0000800800f000", @ANYRES32, @ANYBLOB], 0x24}], 0x1}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00')
write$tcp_mem(r6, &(0x7f0000000300)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x2}, 0x48)
ioctl$USBDEVFS_RESET(r6, 0x5514)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, &(0x7f0000000600))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0x4, 0x2000, &(0x7f0000016000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/mtrr\x00', 0x4602, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x4020072, 0xffffffffffffffff, 0x0)
write(r12, &(0x7f00000005c0)='b', 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

10.279888641s ago: executing program 5 (id=153):
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000180)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x104)
getdents(r0, 0xfffffffffffffffd, 0x58)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0xb, r1, 0x0, 0x0)

8.638475111s ago: executing program 3 (id=212):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r1, 0xc138fd0c, &(0x7f0000000240)="0400000000000000000000003801")
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2cede71bdcba3c07b818a5f9e7726f6f746d6f18903f793ac2d7e60fc53030303030303430303031303053e23a8408e91d748251b927815ba44d282630d7c4a37a31680bb0504cbb1db8ef531985799c221fe67ec83ef5a1ea0c79d055b276452f9e6c82a8abc72d9a1398bbfc3cf6f82f71dc1469aec80ee21c73ce46a883ed3eb698513880667917c2a11deb4a5426e44064f42b02acdaa39136644eede2bc8c83d4a1554fe2e8689852391be4b3a272adb64a08", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e2d7d7f8bc305dd375b5c0cd73be44f49ff53cee22008484706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d9e607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbf38b61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc500", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0x69, 0x3d411004, 0x2, 0xb, 0x6, 0xcccb, 0x0, 0x0, 0x40, 0x7}}, 0x50)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fadbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23fff90a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000000100000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c0015"], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x8010)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000006c0)={'ip6tnl0\x00', 0x9010})
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r6, &(0x7f00000003c0)=r7, 0x12)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r5, 0xa64c000)

8.519394274s ago: executing program 3 (id=215):
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x438300, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x40) (async)
getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f0000000280)=0x21)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x9, 0x40, 0x80, 0x100, 0x5de0d1e1, 0x2480130})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0xc0000001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x42}, {0x7, 0x1, 0x1, 0x9f1a, 0x6, 0x7, 0x7}]})
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xe8040, 0x0) (async)
setpriority(0x1, 0xffffffffffffffff, 0xd1f4) (async)
close(r0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f00000000c0)={'U-', 0x6}, 0x16, 0x0)

8.444275296s ago: executing program 5 (id=153):
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000180)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x104)
getdents(r0, 0xfffffffffffffffd, 0x58)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0xb, r1, 0x0, 0x0)

6.448852854s ago: executing program 5 (id=153):
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000180)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x104)
getdents(r0, 0xfffffffffffffffd, 0x58)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0xb, r1, 0x0, 0x0)

4.465868022s ago: executing program 5 (id=153):
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000180)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x104)
getdents(r0, 0xfffffffffffffffd, 0x58)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0xb, r1, 0x0, 0x0)

2.49929913s ago: executing program 1 (id=225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0xbc, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x14, 0x3, "0e70ceb8d410784567b3fed6c12e0df1"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

2.444802501s ago: executing program 1 (id=226):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1d7)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
umount2(&(0x7f0000000340)='./file0\x00', 0x9)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x80000000, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
write(r0, &(0x7f0000000140)="01", 0x1)
quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})

2.379124893s ago: executing program 1 (id=235):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x201, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x100002, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffffd, 0x18b, 0x1000, 0x2, 0x8000005], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x2, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x8000, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0xd82, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x201, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x100002, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffffd, 0x18b, 0x1000, 0x2, 0x8000005], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x2, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x8000, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0xd82, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
dup(r1) (async)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

2.322574044s ago: executing program 0 (id=228):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x200440c1}, 0x800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0x0)
pwritev2(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x6, &(0x7f0000000340)=[{0x6, 0x5, 0x2400000}, {0x2, 0x2, 0x3}, {0x100, 0x24f, 0x7}, {0x401, 0x9, 0x9}, {0x1, 0x5, 0xffffffffffffffff}, {0x2, 0x101, 0x3}, {0x9, 0x10}, {0x2, 0x2, 0x4}], 0x8, 0xd6e, 0x38, 0x8, 0x15, 0x2})
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2100000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e21000008000700000003e808000300000000080c00058008000100524153000c00068008"], 0xa4}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x6, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc011}, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000480)={0x1000, 0x4, 0x10000000, 0xc}, 0x10)
sendto(r5, &(0x7f00000004c0)="340000001a000100010000000000000002202000000000000000000008001c0001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0)
read(r4, &(0x7f0000000200)=""/100, 0x64)

2.322381194s ago: executing program 5 (id=153):
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000180)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x104)
getdents(r0, 0xfffffffffffffffd, 0x58)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0xb, r1, 0x0, 0x0)

231.675565ms ago: executing program 0 (id=229):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2000, 0x160)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000040)='./file1/file0\x00', 0x4)
r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0xc0000, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x30)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2000, 0x160) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async)
renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000040)='./file1/file0\x00', 0x4) (async)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0xc0000, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x30) (async)

231.364174ms ago: executing program 1 (id=230):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r1 = gettid() (async, rerun: 64)
prlimit64(0x0, 0xb, &(0x7f0000000040), 0x0) (rerun: 64)
rt_sigqueueinfo(r1, 0x21, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) (async)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xa})

152.643216ms ago: executing program 1 (id=231):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101000, 0x46)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
write$cgroup_int(r0, &(0x7f0000000080)=0x7f, 0x12)
r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x4000)
ioctl$BLKRASET(r2, 0x1262, &(0x7f0000000100)=0x40)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', <r4=>0x0, 0x29, 0x6, 0xf, 0x7, 0x33, @private1, @local, 0x10, 0x7, 0xe9, 0xfffffff7}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', <r5=>0x0, 0x700, 0x7800, 0x4272, 0x9, {{0x30, 0x4, 0x2, 0x1, 0xc0, 0x66, 0x0, 0x3, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x23, 0xdf, [@local, @remote, @local, @broadcast, @local, @rand_addr=0x64010101, @empty, @remote]}, @lsrr={0x83, 0x23, 0xb1, [@local, @local, @multicast2, @private=0xa010100, @multicast2, @broadcast, @multicast2, @empty]}, @noop, @timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x6, [{@rand_addr=0x64010100, 0x85}]}, @ssrr={0x89, 0x17, 0x37, [@local, @multicast2, @remote, @rand_addr=0x64010102, @private=0xa010100]}, @timestamp={0x44, 0x8, 0x6e, 0x0, 0x0, [0x761e]}, @rr={0x7, 0x7, 0x59, [@remote]}, @timestamp_addr={0x44, 0x2c, 0xf3, 0x1, 0x4, [{@multicast2, 0x40}, {@multicast1, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xc2f}, {@local, 0x1}, {@broadcast, 0x3}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x20000805)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x12)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f00000006c0)={0x2, &(0x7f0000000680)=[{0x3, 0xf6, &(0x7f0000000540)="954232ff11292cd4d2a8c3439cf07c1310c6693012809521e7742afbe889ba3195c43d47f4376ee2c8723cd63a758c619ea95540236ecb0720efe4bf7ed1005abae0d04b382b2e35980e8d57129a61a71c2c07478c3146de26c0cdc67d3795cf3d998d41d470a0b5c90d397dd4c3d870d24b79b7209e89d0d68ae68eb810d5996393ba8312ee88d1b738208c9872384d08cde834d1af2dec956cba94228cd88c5a2d142943f2de6c874a9d299ae011894c5f020aee13b4a8f5902c7e4eaa0950cba3d9f438c42495dfe2f3912b92f80867786dcc3f7c436a1735e40c5f2528098fc3748d4842d69092477e089b9dbf178ac603e965d9", 0x1}, {0x2, 0x13, &(0x7f0000000640)="e9e1fb23467a8a29c9a959c718fd22f43ea290", 0x1, 0x1}]})
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = fcntl$dupfd(r0, 0x406, r6)
sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x8001)
r8 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000840)={0x8, 'dummy0\x00', {'dvmrp1\x00'}, 0x2})
sendmsg$nl_generic(r7, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x154, 0x36, 0x20, 0x70bd28, 0x25dfdbfd, {0x20}, [@nested={0x40, 0x107, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0xc, 0x140, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0xc, 0x94, 0x0, 0x0, @u64=0x100}, @nested={0x4, 0x78}, @nested={0x4, 0x10c}, @typed={0x4, 0xe8}]}, @generic="4c56bb305f99b6265827ea184d50cea720255df777fa5d181a855f09f6b018590ed39593c6631f9fa799f7241bc9fac95e658a08216a7905b378bbc103ce2c38a2c1a90c231d3f8fad14db4446fa9c94d1daa3f612fb4b9c67ed07b7d6f34c09f869e90e0183", @generic="06e2c525f5048cc44c15a5d5fe82a56c50614d73e17207f8951fbce844a6eaa25645ffcf0ea2e932310ff1fd79f3905117c34436927283248b17509a2938fcbd07495a6cd6425c8f98653c6faf74f0a3f77f76", @generic="e2937b3cb1196438e419f99c652be10bb1ee772cb99998f5ab768fef4bc6187727ff7d43f7a2a6691b80355865282c5d9ba517f8208c98b758f9", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x4}]}, 0x154}}, 0x824)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000ac0)=0x4)
r9 = syz_open_dev$mouse(&(0x7f0000000b00), 0x7ab6bb5b, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b80)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x124, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0x3, 0x5, 0xd1]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5cb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffff801}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x39a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x101]}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x78e, 0x683c, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xeb, 0x2d]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x42}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb9ad}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ef}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3a8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x24040050)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000d80))
r11 = syz_open_dev$loop(&(0x7f0000000dc0), 0x0, 0x40080)
ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000e00)={r7, 0x7fffffff, {0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x9, 0x14, 0xc, "81ad0acea1e82024fd52af5b720250a5deb990de3d68cc6bbb00a8a7c581606848b25116ab7c6f608fdff05a4ab1c94d2783a20239f83a09ed9e537717e95756", "20f382ff6d7a67fee7a07965a54dce24b6c427d5ec7a74359785286ce143e9906ab8bf3ff95c1f3efed3a8c65a0b0cf231d4a97538a4da3fb6f3f3a0d53b0639", "d02e962e537d41d2979b4d29adcde6bbf81011f9797e8f4c3e0f4c09e7a8cf68", [0x200, 0x6]}})
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/rcu_expedited', 0x0, 0x40)
setsockopt$inet_MCAST_LEAVE_GROUP(r12, 0x0, 0x2d, &(0x7f0000000f80)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88)

151.394846ms ago: executing program 0 (id=232):
r0 = socket(0xa, 0x801, 0x0)
getsockopt(r0, 0x0, 0x40, 0x0, &(0x7f0000000000)=0x54)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0x8, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff9}, 'syz0\x00', 0xd})
ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000001c0)={0x6, 0x74, 0x3ff})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f00000002c0)={0x11, 0x6, r6, 0x1, 0x2, 0x6, @local}, 0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)={0x70, r4, 0x721, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008050}, 0x5)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x166a8d727d938966)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x801)

126.423237ms ago: executing program 0 (id=233):
sched_setattr(0x0, &(0x7f0000000380)={0xfffffffffffffee2, 0x3, 0x34, 0x8001, 0x3, 0x7, 0x1ffffffffffe, 0x7, 0x48, 0xa}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
read$rfkill(r0, 0x0, 0x0)

105.278568ms ago: executing program 0 (id=234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0xbc, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x15, 0x3, "0e70ceb8d410784567b3fed6c12e0df100"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

103.937737ms ago: executing program 1 (id=236):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200f1f0000001f09ff7f0000030000000000000000cb4fdca0560f920d54f365c1b1d43ee48c0a63bcb0db0248691e534887ad552f38606ca366851556ed4ee81703dcee3df5c4ec32aeec4b2c124c97033017aab6de135931b249297b5f67f3db77e3660d509b96fe3f154cb85d41ef4cd9a60454e9f82e0ab7928908c8d2ff63fe67e143329d784e219ba4978c3a4bf719ecf8153c7d94f3041b2e65cc0d7766a3a27fb8b57ccce84d393bdf01ace24bf46759192db163c89f3ad62f35766931ad4c9f551f71782182a1acaf22c0d02daaf91f472c72a26614ca897752cee7271ba7f7d31ccb22b9"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000640)={0x0, 0x4, 0x0, 0x1000, &(0x7f0000012000/0x1000)=nil})
mount$cgroup(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800006, &(0x7f00000000c0)={[{@none}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = signalfd(r2, &(0x7f0000000100)={[0x4]}, 0x8)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000680)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000ec0)=""/4052, 0xfd4}, {&(0x7f0000001ec0)=""/203, 0xcb}, {&(0x7f0000001fc0)=""/110, 0x6e}, {&(0x7f0000002040)=""/250, 0xfa}, {&(0x7f0000002140)=""/286, 0x11e}, {&(0x7f0000002280)=""/79, 0x4f}, {&(0x7f0000002300)=""/257, 0x101}, {&(0x7f0000002440)=""/129, 0x81}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xe91}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000002500)={0x79, 0x0, 0xaac})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', <r5=>0x0, 0x1, 0x10, 0xfff, 0x4000, {{0x17, 0x4, 0x2, 0x9, 0x5c, 0x67, 0x0, 0xcc, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}, {[@lsrr={0x83, 0x1b, 0x5, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2]}, @timestamp={0x44, 0xc, 0x95, 0x0, 0x0, [0xfffffff0, 0x8]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x2}, @cipso={0x86, 0x16, 0x2, [{0x1, 0x10, "e09ef0a29cba1d6e6b950b900e64"}]}, @end, @end]}}}}})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r7=>0x0}, &(0x7f00000004c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8)
sendmsg$nl_xfrm(r3, &(0x7f0000000e00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000009c0)=@updsa={0x3dc, 0x1a, 0x200, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x4e24, 0x81, 0x4e22, 0x0, 0x2, 0x13ea21304f5e4fa8, 0x20, 0x3b, r5, r6}, {@in=@multicast1, 0x4d3, 0x3c}, @in=@rand_addr=0x64010102, {0x7, 0x8, 0x8000000000000001, 0xe3, 0x8, 0x4, 0x7, 0x1}, {0x0, 0x100, 0x67c8, 0x200}, {0x9, 0x9, 0x1}, 0x70bd2c, 0x3506, 0xa, 0x0, 0x7f, 0x20}, [@algo_auth={0x125, 0x1, {{'xcbc(aes)\x00'}, 0x6e8, "26428dbbc6e2935da8d806b89ab8bc38c3e46924642e4043e38b3099358b1f2c617a151f826fe2a872c66f60835a9975d6e2cb579ce8ab50e57c41a6c5101f80c55dc48965d880ed7a41bbec589f8a91ebfcf656c93d9e5a25dd1d000f69c31e5bc91d8e55dbbeb85eda2bc2bc1282ed7e12e9df9607e95e8d0f63450168f857f97d8bfb492d300976ab4b31e7ba9e57ebea2f45e647a5cf73922635ac7e90ea5d765a5dfd2ba925103096709cc701509361571742bff3381028ed944b866ad79a8798c070945a7fb5f2f8dd4358e383e38185197d0d21431af7f5f815"}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4e23, 0x1, 0x4e23, 0x4b, 0xa, 0x80, 0xa0, 0x1d, r7, r8}, {0x603d, 0x0, 0x6, 0x0, 0x8, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x8}, {0x8001, 0xffffffffffff7fff, 0xb, 0x8}, 0xbec, 0x0, 0x3}}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010100, @in6=@remote, 0x2, 0x3, 0x4}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@empty, 0x0, 0x2}}, @tmpl={0xc4, 0x5, [{{@in6=@empty, 0x4d4, 0x32}, 0x14, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xf9, 0x800, 0xf1ff, 0x4}, {{@in6=@remote, 0x4d5, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x0, 0x5, 0x4, 0x1ae, 0xa68}, {{@in=@rand_addr=0x64010102, 0x4d2, 0xff}, 0x2, @in=@broadcast, 0x3506, 0x3, 0x1, 0x4, 0x1f21e69c, 0xa2a, 0xf10}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x20000840}, 0x8090)
r9 = dup(r2)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000008c0)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000900)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@textreal={0x8, 0x0}], 0x1, 0x25, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000980)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_NMI(r10, 0xae9a)

47.208899ms ago: executing program 0 (id=237):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='fuseblk\x00', &(0x7f00000002c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
read(r3, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x56, 0xe, 0x20, '\x00', 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 5 (id=153):
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000180)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x104)
getdents(r0, 0xfffffffffffffffd, 0x58)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0xb, r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts.
[   28.226938][   T36] audit: type=1400 audit(1791735623.620:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.230424][  T286] cgroup: Unknown subsys name 'net'
[   28.249632][   T36] audit: type=1400 audit(1791735623.620:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.277250][   T36] audit: type=1400 audit(1791735623.650:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.277951][  T286] cgroup: Unknown subsys name 'devices'
[   28.397545][  T286] cgroup: Unknown subsys name 'hugetlb'
[   28.403203][  T286] cgroup: Unknown subsys name 'rlimit'
[   28.519200][   T36] audit: type=1400 audit(1791735623.910:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.542462][   T36] audit: type=1400 audit(1791735623.910:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.567246][   T36] audit: type=1400 audit(1791735623.910:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.591579][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   28.600474][   T36] audit: type=1400 audit(1791735623.990:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.625923][   T36] audit: type=1400 audit(1791735623.990:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.639341][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.651998][   T36] audit: type=1400 audit(1791735624.030:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.685751][   T36] audit: type=1400 audit(1791735624.030:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.185898][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.193007][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.200448][  T294] bridge_slave_0: entered allmulticast mode
[   30.206999][  T294] bridge_slave_0: entered promiscuous mode
[   30.216756][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.223839][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.231080][  T295] bridge_slave_0: entered allmulticast mode
[   30.237582][  T295] bridge_slave_0: entered promiscuous mode
[   30.243888][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.251086][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.258367][  T294] bridge_slave_1: entered allmulticast mode
[   30.264689][  T294] bridge_slave_1: entered promiscuous mode
[   30.272704][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.279895][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.287027][  T295] bridge_slave_1: entered allmulticast mode
[   30.293373][  T295] bridge_slave_1: entered promiscuous mode
[   30.331729][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.338847][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.345987][  T293] bridge_slave_0: entered allmulticast mode
[   30.352265][  T293] bridge_slave_0: entered promiscuous mode
[   30.368540][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.375866][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.383027][  T293] bridge_slave_1: entered allmulticast mode
[   30.389533][  T293] bridge_slave_1: entered promiscuous mode
[   30.425683][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.432778][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.440011][  T296] bridge_slave_0: entered allmulticast mode
[   30.446634][  T296] bridge_slave_0: entered promiscuous mode
[   30.466372][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.473516][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.480878][  T296] bridge_slave_1: entered allmulticast mode
[   30.487290][  T296] bridge_slave_1: entered promiscuous mode
[   30.599080][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.606445][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.613758][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.620833][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.640098][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.647207][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.654502][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.661679][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.671092][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.678181][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.685511][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.692566][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.744595][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.751718][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.759125][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.766194][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.776628][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.783972][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.791828][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.799194][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.806919][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.814124][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.821663][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.829028][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.847847][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.855031][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.887178][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.894360][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.902153][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.909456][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.917442][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.924486][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.945720][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.952818][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.961970][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.969119][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.987441][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.994521][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.002379][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.009475][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.044898][  T296] veth0_vlan: entered promiscuous mode
[   31.053917][  T294] veth0_vlan: entered promiscuous mode
[   31.073391][  T293] veth0_vlan: entered promiscuous mode
[   31.087557][  T295] veth0_vlan: entered promiscuous mode
[   31.101333][  T294] veth1_macvtap: entered promiscuous mode
[   31.108057][  T296] veth1_macvtap: entered promiscuous mode
[   31.122495][  T293] veth1_macvtap: entered promiscuous mode
[   31.140983][  T295] veth1_macvtap: entered promiscuous mode
[   31.190300][  T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.237670][  T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   31.310730][  T311] rust_binder: 316: undelivered freeze notification, 0000000000000001
[   31.362658][  T327] FAULT_INJECTION: forcing a failure.
[   31.362658][  T327] name failslab, interval 1, probability 0, space 0, times 1
[   31.378026][  T327] CPU: 0 UID: 0 PID: 327 Comm: syz.0.6 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   31.378066][  T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   31.378089][  T327] Call Trace:
[   31.378096][  T327]  <TASK>
[   31.378105][  T327]  __dump_stack+0x21/0x30
[   31.378147][  T327]  dump_stack_lvl+0x140/0x1c0
[   31.378183][  T327]  ? __cfi_dump_stack_lvl+0x10/0x10
[   31.378220][  T327]  dump_stack+0x19/0x20
[   31.378253][  T327]  should_fail_ex+0x3c2/0x510
[   31.378276][  T327]  should_failslab+0xac/0x100
[   31.378299][  T327]  __kmalloc_cache_noprof+0x41/0x470
[   31.378342][  T327]  ? alloc_tty_struct+0xb4/0x7e0
[   31.378379][  T327]  alloc_tty_struct+0xb4/0x7e0
[   31.378413][  T327]  ? __cfi_ida_alloc_range+0x10/0x10
[   31.378445][  T327]  ? __cfi_alloc_tty_struct+0x10/0x10
[   31.378481][  T327]  ? __kasan_check_write+0x18/0x20
[   31.378514][  T327]  ? mutex_lock+0x97/0x1d0
[   31.378541][  T327]  ? __cfi_mutex_lock+0x10/0x10
[   31.378569][  T327]  tty_init_dev+0x5d/0x4f0
[   31.378601][  T327]  ? devpts_new_index+0xea/0x160
[   31.378632][  T327]  ptmx_open+0xe1/0x2f0
[   31.378659][  T327]  chrdev_open+0x4eb/0x610
[   31.378706][  T327]  ? __cfi_chrdev_open+0x10/0x10
[   31.378743][  T327]  ? bpf_lsm_file_open+0xd/0x20
[   31.378769][  T327]  ? __cfi_chrdev_open+0x10/0x10
[   31.378808][  T327]  do_dentry_open+0x97f/0x1510
[   31.378837][  T327]  vfs_open+0x86/0x240
[   31.378862][  T327]  ? __cfi_vfs_open+0x10/0x10
[   31.378888][  T327]  ? may_open+0x352/0x430
[   31.378913][  T327]  path_openat+0x2c49/0x35a0
[   31.378939][  T327]  ? schedule+0xc5/0x240
[   31.378962][  T327]  ? kasan_save_alloc_info+0x3a/0x50
[   31.378991][  T327]  ? getname+0x1b/0x30
[   31.379023][  T327]  ? x64_sys_call+0xe69/0x2ee0
[   31.379048][  T327]  ? do_syscall_64+0x57/0xf0
[   31.379070][  T327]  ? do_filp_open+0x440/0x440
[   31.379098][  T327]  do_filp_open+0x1f2/0x440
[   31.379124][  T327]  ? __cfi_do_filp_open+0x10/0x10
[   31.379154][  T327]  ? alloc_fd+0x4c1/0x570
[   31.379191][  T327]  do_sys_openat2+0x134/0x1d0
[   31.379218][  T327]  ? fput+0x1a4/0x230
[   31.379242][  T327]  ? do_sys_open+0x100/0x100
[   31.379271][  T327]  __x64_sys_openat+0x13a/0x170
[   31.379301][  T327]  x64_sys_call+0xe69/0x2ee0
[   31.379332][  T327]  do_syscall_64+0x57/0xf0
[   31.379353][  T327]  ? clear_bhb_loop+0x50/0xa0
[   31.379383][  T327]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   31.379412][  T327] RIP: 0033:0x7feb32d9e1d9
[   31.379443][  T327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   31.379463][  T327] RSP: 002b:00007feb33c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   31.379498][  T327] RAX: ffffffffffffffda RBX: 00007feb33025fa0 RCX: 00007feb32d9e1d9
[   31.379516][  T327] RDX: 0000000000008040 RSI: 0000200000000480 RDI: ffffffffffffff9c
[   31.379533][  T327] RBP: 00007feb32e35888 R08: 0000000000000000 R09: 0000000000000000
[   31.379548][  T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.379562][  T327] R13: 00007feb33026038 R14: 00007feb33025fa0 R15: 00007fffed7a7fb8
[   31.379580][  T327]  </TASK>
[   31.745648][  T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   31.907739][  T311] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   31.917692][  T311] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   31.928247][  T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   31.939228][  T311] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   31.955465][  T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.999628][  T329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   32.007041][  T329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   32.015496][  T311] pl2303 2-1:1.0: pl2303 converter detected
[   32.025247][  T311] usb 2-1: pl2303 converter now attached to ttyUSB0
[   32.095202][  T336] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   32.116203][   T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   32.126761][  T355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2097 sclass=netlink_route_socket pid=355 comm=syz.0.20
[   32.241238][  T329] netlink: 'syz.1.7': attribute type 4 has an invalid length.
[   32.250681][  T336] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[   32.263585][   T31] usb 3-1: device descriptor read/64, error -71
[   32.269988][  T336] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   32.278530][  T336] usb 4-1: Product: syz
[   32.285507][  T336] usb 4-1: config 0 descriptor??
[   32.294046][  T336] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   32.302516][  T336] usb 4-1: Detected FT232H
[   32.415598][  T329] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110
[   32.422941][  T329] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[   32.430464][  T329] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[   32.439463][  T329] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[   32.495226][  T336] ftdi_sio ttyUSB1: Unable to read latency timer: -32
[   32.515195][   T31] usb 3-1: device descriptor read/64, error -71
[   32.703090][  T336] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5
[   32.710863][  T336] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1
[   32.719461][  T329] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[   32.727786][  T329] pl2303 ttyUSB0: error sending break = -32
[   32.743727][  T336] usb 2-1: USB disconnect, device number 2
[   32.752070][  T336] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   32.760198][   T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   32.768258][  T336] pl2303 2-1:1.0: device disconnected
[   32.905130][   T31] usb 3-1: device descriptor read/64, error -71
[   33.145350][   T31] usb 3-1: device descriptor read/64, error -71
[   33.259451][   T31] usb usb3-port1: attempt power cycle
[   33.272466][   T36] kauditd_printk_skb: 85 callbacks suppressed
[   33.272485][   T36] audit: type=1400 audit(1791735628.660:159): avc:  denied  { create } for  pid=365 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   33.300061][   T36] audit: type=1400 audit(1791735628.690:160): avc:  denied  { mount } for  pid=364 comm="syz.0.23" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   33.324470][   T36] audit: type=1400 audit(1791735628.690:161): avc:  denied  { read write } for  pid=364 comm="syz.0.23" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   33.347917][   T36] audit: type=1400 audit(1791735628.690:162): avc:  denied  { open } for  pid=364 comm="syz.0.23" path="/9/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   33.371585][   T36] audit: type=1400 audit(1791735628.690:163): avc:  denied  { mounton } for  pid=364 comm="syz.0.23" path="/9/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   33.555163][   T62] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   33.565266][  T337] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   33.605164][   T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   33.626207][   T31] usb 3-1: device descriptor read/8, error -71
[   33.706219][   T62] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.716436][   T62] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   33.729640][  T337] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   33.732246][   T62] usb 1-1: string descriptor 0 read error: -22
[   33.739354][  T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.745301][   T62] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   33.754599][  T337] usb 2-1: Product: syz
[   33.762880][   T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.767530][  T337] usb 2-1: Manufacturer: syz
[   33.779137][   T62] cdc_ether 1-1:1.0: skipping garbage
[   33.779158][   T62] usb 1-1: bad CDC descriptors
[   33.789497][  T337] usb 2-1: SerialNumber: syz
[   33.794716][   T31] usb 3-1: device descriptor read/8, error -71
[   33.979833][  T336] usb 1-1: USB disconnect, device number 2
[   34.045128][   T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   34.066048][   T31] usb 3-1: device descriptor read/8, error -71
[   34.196243][   T31] usb 3-1: device descriptor read/8, error -71
[   34.299992][   T36] audit: type=1400 audit(1791735629.690:164): avc:  denied  { write } for  pid=373 comm="syz.2.17" path="socket:[4376]" dev="sockfs" ino=4376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.300190][  T374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   34.324003][   T36] audit: type=1400 audit(1791735629.690:165): avc:  denied  { nlmsg_write } for  pid=373 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.353111][   T31] usb usb3-port1: unable to enumerate USB device
[   34.360147][   T36] audit: type=1400 audit(1791735629.730:166): avc:  denied  { bind } for  pid=373 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.379930][   T36] audit: type=1400 audit(1791735629.730:167): avc:  denied  { connect } for  pid=373 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   34.399394][   T36] audit: type=1400 audit(1791735629.730:168): avc:  denied  { bind } for  pid=373 comm="syz.2.17" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   34.400643][  T376] FAULT_INJECTION: forcing a failure.
[   34.400643][  T376] name failslab, interval 1, probability 0, space 0, times 0
[   34.432207][  T376] CPU: 0 UID: 0 PID: 376 Comm: syz.2.18 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   34.432233][  T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   34.432244][  T376] Call Trace:
[   34.432250][  T376]  <TASK>
[   34.432256][  T376]  __dump_stack+0x21/0x30
[   34.432285][  T376]  dump_stack_lvl+0x140/0x1c0
[   34.432310][  T376]  ? __cfi_dump_stack_lvl+0x10/0x10
[   34.432336][  T376]  ? class_find_device+0x318/0x390
[   34.432362][  T376]  dump_stack+0x19/0x20
[   34.432386][  T376]  should_fail_ex+0x3c2/0x510
[   34.432414][  T376]  should_failslab+0xac/0x100
[   34.432431][  T376]  __kmalloc_cache_noprof+0x41/0x470
[   34.432455][  T376]  ? pty_unix98_install+0xba/0x6b0
[   34.432477][  T376]  pty_unix98_install+0xba/0x6b0
[   34.432497][  T376]  tty_init_dev+0xe6/0x4f0
[   34.432522][  T376]  ptmx_open+0xe1/0x2f0
[   34.432540][  T376]  ? selinux_file_open+0x46c/0x630
[   34.432564][  T376]  chrdev_open+0x4eb/0x610
[   34.432589][  T376]  ? __cfi_chrdev_open+0x10/0x10
[   34.432614][  T376]  ? bpf_lsm_file_open+0xd/0x20
[   34.432631][  T376]  ? __cfi_chrdev_open+0x10/0x10
[   34.432655][  T376]  do_dentry_open+0x97f/0x1510
[   34.432675][  T376]  vfs_open+0x86/0x240
[   34.432692][  T376]  ? __cfi_vfs_open+0x10/0x10
[   34.432710][  T376]  ? may_open+0x352/0x430
[   34.432727][  T376]  path_openat+0x2c49/0x35a0
[   34.432744][  T376]  ? schedule+0xc5/0x240
[   34.432761][  T376]  ? kasan_save_alloc_info+0x3a/0x50
[   34.432782][  T376]  ? getname+0x1b/0x30
[   34.432804][  T376]  ? x64_sys_call+0xe69/0x2ee0
[   34.432821][  T376]  ? do_syscall_64+0x57/0xf0
[   34.432836][  T376]  ? do_filp_open+0x440/0x440
[   34.432855][  T376]  do_filp_open+0x1f2/0x440
[   34.432872][  T376]  ? __cfi_do_filp_open+0x10/0x10
[   34.432895][  T376]  ? alloc_fd+0x4c1/0x570
[   34.432921][  T376]  do_sys_openat2+0x134/0x1d0
[   34.432940][  T376]  ? fput+0x1a4/0x230
[   34.432956][  T376]  ? do_sys_open+0x100/0x100
[   34.432977][  T376]  __x64_sys_openat+0x13a/0x170
[   34.432997][  T376]  x64_sys_call+0xe69/0x2ee0
[   34.433013][  T376]  do_syscall_64+0x57/0xf0
[   34.433026][  T376]  ? clear_bhb_loop+0x50/0xa0
[   34.433046][  T376]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   34.433096][  T376] RIP: 0033:0x7f146059e1d9
[   34.433115][  T376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.433137][  T376] RSP: 002b:00007f14614fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   34.433161][  T376] RAX: ffffffffffffffda RBX: 00007f1460825fa0 RCX: 00007f146059e1d9
[   34.433173][  T376] RDX: 0000000000008040 RSI: 0000200000000480 RDI: ffffffffffffff9c
[   34.433185][  T376] RBP: 00007f1460635888 R08: 0000000000000000 R09: 0000000000000000
[   34.433195][  T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.433205][  T376] R13: 00007f1460826038 R14: 00007f1460825fa0 R15: 00007ffcb2a24348
[   34.433219][  T376]  </TASK>
[   34.766481][  T386] =======================================================
[   34.766481][  T386] WARNING: The mand mount option has been deprecated and
[   34.766481][  T386]          and is ignored by this kernel. Remove the mand
[   34.766481][  T386]          option from the mount to silence this warning.
[   34.766481][  T386] =======================================================
[   34.806213][  T386] No source specified
[   34.850219][   T31] usb 4-1: USB disconnect, device number 2
[   34.865401][   T31] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[   34.883117][   T31] ftdi_sio 4-1:0.0: device disconnected
[   35.007297][  T337] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[   35.013960][  T337] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[   35.029037][  T337] cdc_ncm 2-1:1.0: setting rx_max = 2048
[   35.205155][   T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   35.214270][  T337] cdc_ncm 2-1:1.0: setting tx_max = 88
[   35.225264][  T337] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   35.240276][  T337] usb 2-1: USB disconnect, device number 3
[   35.247074][  T337] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[   35.357168][   T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   35.367529][   T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   35.377816][   T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   35.389186][   T31] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   35.398497][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.411123][  T394] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   35.420769][  T394] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   35.430590][   T31] pl2303 4-1:1.0: pl2303 converter detected
[   35.445288][   T31] usb 4-1: pl2303 converter now attached to ttyUSB0
[   35.654340][  T394] netlink: 'syz.3.24': attribute type 4 has an invalid length.
[   35.770659][  T405] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure
[   35.825260][  T394] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110
[   35.835333][  T394] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[   35.845155][  T394] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[   35.865354][  T394] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[   36.136037][  T394] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[   36.154264][  T394] pl2303 ttyUSB0: error sending break = -32
[   36.187075][   T31] usb 4-1: USB disconnect, device number 3
[   36.205182][   T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   36.213245][   T31] pl2303 4-1:1.0: device disconnected
[   36.525091][   T62] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   36.686466][   T62] usb 2-1: unable to get BOS descriptor or descriptor too short
[   36.704802][   T62] usb 2-1: not running at top speed; connect to a high speed hub
[   36.713627][   T62] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[   36.739792][   T62] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   36.752086][   T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.761534][  T416] FAULT_INJECTION: forcing a failure.
[   36.761534][  T416] name failslab, interval 1, probability 0, space 0, times 0
[   36.774620][   T62] usb 2-1: Product: syz
[   36.780737][   T62] usb 2-1: Manufacturer: syz
[   36.785684][  T416] CPU: 0 UID: 0 PID: 416 Comm: syz.3.31 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   36.785718][  T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   36.785734][  T416] Call Trace:
[   36.785742][  T416]  <TASK>
[   36.785751][  T416]  __dump_stack+0x21/0x30
[   36.785794][  T416]  dump_stack_lvl+0x140/0x1c0
[   36.785830][  T416]  ? __cfi_dump_stack_lvl+0x10/0x10
[   36.785865][  T416]  ? check_stack_object+0x81/0x150
[   36.785897][  T416]  dump_stack+0x19/0x20
[   36.785929][  T416]  should_fail_ex+0x3c2/0x510
[   36.785953][  T416]  should_failslab+0xac/0x100
[   36.785977][  T416]  __kmalloc_cache_noprof+0x41/0x470
[   36.786013][  T416]  ? getname_flags+0x2e5/0x6b0
[   36.786047][  T416]  ? strncpy_from_user+0x22c/0x280
[   36.786071][  T416]  getname_flags+0x2e5/0x6b0
[   36.786109][  T416]  __x64_sys_unlink+0x3e/0x60
[   36.786138][  T416]  x64_sys_call+0x286c/0x2ee0
[   36.786164][  T416]  do_syscall_64+0x57/0xf0
[   36.786185][  T416]  ? clear_bhb_loop+0x50/0xa0
[   36.786216][  T416]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   36.786244][  T416] RIP: 0033:0x7fc7ce59e1d9
[   36.786270][  T416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.786292][  T416] RSP: 002b:00007fc7cf4fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[   36.786319][  T416] RAX: ffffffffffffffda RBX: 00007fc7ce825fa0 RCX: 00007fc7ce59e1d9
[   36.786348][  T416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000005580
[   36.786365][  T416] RBP: 00007fc7ce635888 R08: 0000000000000000 R09: 0000000000000000
[   36.786381][  T416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.786396][  T416] R13: 00007fc7ce826038 R14: 00007fc7ce825fa0 R15: 00007ffe4fb4e3e8
[   36.786418][  T416]  </TASK>
[   36.790836][   T62] usb 2-1: SerialNumber: syz
[   37.236506][   T62] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   37.245105][  T336] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   37.396380][  T336] usb 4-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   37.409496][  T336] usb 4-1: config 0 interface 0 has no altsetting 0
[   37.417013][  T336] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[   37.426415][  T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.435165][   T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   37.443073][  T336] usb 4-1: config 0 descriptor??
[   37.449582][   T62] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   37.475095][   T62] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[   37.607008][   T31] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[   37.616240][   T31] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   37.624396][   T31] usb 1-1: Product: syz
[   37.633636][   T31] usb 1-1: config 0 descriptor??
[   37.641958][   T31] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   37.654228][   T31] usb 1-1: Detected FT232H
[   37.666026][  T336] hid-led 0003:1294:1320.0001: unbalanced collection at end of report description
[   37.675832][  T336] hid-led 0003:1294:1320.0001: probe with driver hid-led failed with error -22
[   37.841466][   T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   37.852922][   T62] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   37.862050][   T62] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[   38.049305][   T31] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5
[   38.056799][   T62] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[   38.075173][   T31] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   38.088095][   T62] usb 2-1: USB disconnect, device number 4
[   38.590994][  T425] capability: warning: `syz.1.34' uses 32-bit capabilities (legacy support in use)
[   39.440156][   T36] kauditd_printk_skb: 26 callbacks suppressed
[   39.440178][   T36] audit: type=1400 audit(1791735634.830:195): avc:  denied  { map } for  pid=429 comm="syz.1.35" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   39.472145][  T430] rust_binder: 429:430 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 128, size: 18446744073709551556)
[   39.485438][  T430] rust_binder: 429:430 error while translating object: EINVAL
[   39.493266][  T430] rust_binder: Failure in copy_transaction_data: EINVAL
[   39.493332][  T430] rust_binder: 429:430 transaction call to 429:0 failed EINVAL, code 0 size 88-24 line thread.rs:913
[   39.511909][   T36] audit: type=1400 audit(1791735634.860:196): avc:  denied  { call } for  pid=429 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   39.531626][   T36] audit: type=1400 audit(1791735634.860:197): avc:  denied  { transfer } for  pid=429 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   39.551797][  T430] FAULT_INJECTION: forcing a failure.
[   39.551797][  T430] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   39.565303][  T430] CPU: 1 UID: 0 PID: 430 Comm: syz.1.35 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   39.565348][  T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   39.565366][  T430] Call Trace:
[   39.565374][  T430]  <TASK>
[   39.565385][  T430]  __dump_stack+0x21/0x30
[   39.565434][  T430]  dump_stack_lvl+0x140/0x1c0
[   39.565477][  T430]  ? __cfi_dump_stack_lvl+0x10/0x10
[   39.565531][  T430]  dump_stack+0x19/0x20
[   39.565571][  T430]  should_fail_ex+0x3c2/0x510
[   39.565599][  T430]  should_fail+0xf/0x20
[   39.565622][  T430]  should_fail_usercopy+0x1e/0x30
[   39.565651][  T430]  set_fd_set+0x2d/0x90
[   39.565681][  T430]  core_sys_select+0x628/0x7f0
[   39.565713][  T430]  ? __cfi_core_sys_select+0x10/0x10
[   39.565743][  T430]  ? _raw_spin_lock_irq+0x93/0x120
[   39.565791][  T430]  ? __cfi_set_user_sigmask+0x10/0x10
[   39.565816][  T430]  ? mutex_unlock+0x90/0x240
[   39.565849][  T430]  __se_sys_pselect6+0x268/0x320
[   39.565879][  T430]  ? __x64_sys_pselect6+0x110/0x110
[   39.565911][  T430]  ? __kasan_check_write+0x18/0x20
[   39.565949][  T430]  __x64_sys_pselect6+0xe9/0x110
[   39.565980][  T430]  x64_sys_call+0x2980/0x2ee0
[   39.566009][  T430]  do_syscall_64+0x57/0xf0
[   39.566032][  T430]  ? clear_bhb_loop+0x50/0xa0
[   39.566065][  T430]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   39.566097][  T430] RIP: 0033:0x7feeea19e1d9
[   39.566120][  T430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.566143][  T430] RSP: 002b:00007feeeb0af028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[   39.566173][  T430] RAX: ffffffffffffffda RBX: 00007feeea425fa0 RCX: 00007feeea19e1d9
[   39.566194][  T430] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000
[   39.566213][  T430] RBP: 00007feeea235888 R08: 0000200000000280 R09: 0000200000000380
[   39.566231][  T430] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[   39.566249][  T430] R13: 00007feeea426038 R14: 00007feeea425fa0 R15: 00007ffd3daa9e38
[   39.566273][  T430]  </TASK>
[   39.566997][  T336] rust_binder: 429: undelivered TRANSACTION_ERROR: 29201
[   40.025229][  T311] usb 4-1: USB disconnect, device number 4
[   40.045276][  T336] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   40.055461][  T436] netlink: 52 bytes leftover after parsing attributes in process `syz.3.38'.
[   40.095014][   T36] audit: type=1400 audit(1791735635.480:198): avc:  denied  { read write } for  pid=439 comm="syz.3.39" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   40.119878][   T36] audit: type=1400 audit(1791735635.510:199): avc:  denied  { open } for  pid=439 comm="syz.3.39" path="/6/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   40.158148][   T36] audit: type=1400 audit(1791735635.510:200): avc:  denied  { ioctl } for  pid=439 comm="syz.3.39" path="/6/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   40.212975][  T311] usb 1-1: USB disconnect, device number 3
[   40.222699][  T311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   40.235116][  T336] usb 2-1: Using ep0 maxpacket: 32
[   40.244568][  T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.262562][   T36] audit: type=1400 audit(1791735635.650:201): avc:  denied  { read } for  pid=442 comm="syz.3.40" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   40.287541][  T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.297563][  T443] input: syz0 as /devices/virtual/input/input4
[   40.304210][  T311] ftdi_sio 1-1:0.0: device disconnected
[   40.326348][  T336] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   40.340019][  T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.350427][   T36] audit: type=1400 audit(1791735635.650:202): avc:  denied  { ioctl } for  pid=442 comm="syz.3.40" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   40.381747][   T36] audit: type=1400 audit(1791735635.650:203): avc:  denied  { mount } for  pid=442 comm="syz.3.40" name="/" dev="configfs" ino=2382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   40.404493][  T336] usb 2-1: config 0 descriptor??
[   40.412942][  T336] hub 2-1:0.0: USB hub found
[   40.421926][   T36] audit: type=1400 audit(1791735635.650:204): avc:  denied  { search } for  pid=442 comm="syz.3.40" name="/" dev="configfs" ino=2382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.681393][  T336] hub 2-1:0.0: 1 port detected
[   40.755108][  T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   40.915269][  T465] Zero length message leads to an empty skb
[   40.925118][  T312] usb 4-1: Using ep0 maxpacket: 8
[   40.932002][  T312] usb 4-1: config index 0 descriptor too short (expected 1060, got 36)
[   40.940398][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.951651][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.961667][  T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   40.974857][  T312] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[   40.984132][  T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.996556][  T312] usb 4-1: config 0 descriptor??
[   41.155127][   T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   41.240654][  T312] sony 0003:1345:3008.0002: can't set operational mode: step 1
[   41.248443][  T312] sony 0003:1345:3008.0002: Failed to set controller into operational mode
[   41.257785][  T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.272802][  T312] sony 0003:1345:3008.0002: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.3-1/input0
[   41.289789][  T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.295232][   T31] usb 1-1: device descriptor read/64, error -71
[   41.300861][  T312] sony 0003:1345:3008.0002: failed to claim input
[   41.316265][  T336] hub 2-1:0.0: activate --> -90
[   41.535117][   T31] usb 1-1: device descriptor read/64, error -71
[   41.718408][  T337] usb 2-1: USB disconnect, device number 5
[   41.785088][   T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   41.925098][   T31] usb 1-1: device descriptor read/64, error -71
[   41.935177][  T336] usb 2-1-port1: config error
[   42.175117][   T31] usb 1-1: device descriptor read/64, error -71
[   42.285236][   T31] usb usb1-port1: attempt power cycle
[   42.397207][  T478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=478 comm=syz.1.51
[   42.635085][   T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   42.666147][   T31] usb 1-1: device descriptor read/8, error -71
[   42.705098][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   42.806125][   T31] usb 1-1: device descriptor read/8, error -71
[   42.866145][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.885135][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.905416][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   42.935084][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   42.954422][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.975466][    T9] usb 2-1: config 0 descriptor??
[   43.045084][   T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   43.076117][   T31] usb 1-1: device descriptor read/8, error -71
[   43.185878][  T480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.196720][  T480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.206117][   T31] usb 1-1: device descriptor read/8, error -71
[   43.315218][   T31] usb usb1-port1: unable to enumerate USB device
[   43.399773][   T31] usb 4-1: USB disconnect, device number 5
[   43.426688][  T480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.445326][  T480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.464701][  T480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.479697][  T480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.497281][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[   43.506676][    T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   43.523587][    T9] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   43.768006][  T480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.786801][  T480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.804639][  T480] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   43.825127][   T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   43.914158][  T488] tipc: Started in network mode
[   43.924576][  T488] tipc: Node identity 6, cluster identity 4711
[   43.937380][  T488] tipc: Node number set to 6
[   43.965082][   T31] usb 4-1: device descriptor read/64, error -71
[   44.043973][  T494] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   44.104387][  T495] netlink: 16500 bytes leftover after parsing attributes in process `syz.0.56'.
[   44.215327][   T31] usb 4-1: device descriptor read/64, error -71
[   44.345111][  T336] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   44.465919][   T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   44.605120][   T31] usb 4-1: device descriptor read/64, error -71
[   44.865138][   T31] usb 4-1: device descriptor read/64, error -71
[   44.935108][   T62] usb 2-1: reset high-speed USB device number 6 using dummy_hcd
[   44.975223][   T31] usb usb4-port1: attempt power cycle
[   45.315146][   T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   45.336188][   T31] usb 4-1: device descriptor read/8, error -71
[   45.466219][   T31] usb 4-1: device descriptor read/8, error -71
[   45.498188][   T36] kauditd_printk_skb: 25 callbacks suppressed
[   45.498208][   T36] audit: type=1400 audit(1791735640.890:230): avc:  denied  { write } for  pid=498 comm="syz.1.57" name="ram0" dev="devtmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   45.621946][  T505] 9pnet: Could not find request transport: xen
[   45.629476][  T505] 9pnet: Could not find request transport: xen
[   45.715138][   T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   45.728775][  T514] mmap: syz.1.62 (514) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   45.747747][   T31] usb 4-1: device descriptor read/8, error -71
[   45.813255][   T36] audit: type=1400 audit(1791735641.200:231): avc:  denied  { write } for  pid=511 comm="syz.1.62" name="igmp" dev="proc" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   45.886085][   T31] usb 4-1: device descriptor read/8, error -71
[   45.916731][  T515] cgroup: fork rejected by pids controller in /syz1
[   46.005217][   T31] usb usb4-port1: unable to enumerate USB device
[   46.265565][    T9] usb 2-1: USB disconnect, device number 6
[   46.592155][   T36] audit: type=1400 audit(1791735641.980:232): avc:  denied  { connect } for  pid=553 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   46.625104][   T36] audit: type=1400 audit(1791735641.980:233): avc:  denied  { write } for  pid=553 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   46.841526][   T36] audit: type=1400 audit(1791735642.230:234): avc:  denied  { create } for  pid=564 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.863593][   T36] audit: type=1400 audit(1791735642.250:235): avc:  denied  { read write } for  pid=564 comm="syz.3.67" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   46.893331][   T36] audit: type=1400 audit(1791735642.250:236): avc:  denied  { open } for  pid=564 comm="syz.3.67" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   46.918334][   T36] audit: type=1400 audit(1791735642.250:237): avc:  denied  { ioctl } for  pid=564 comm="syz.3.67" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   47.068660][   T36] audit: type=1400 audit(1791735642.460:238): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   47.121796][   T36] audit: type=1400 audit(1791735642.510:239): avc:  denied  { create } for  pid=573 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   47.435110][  T336] usb 1-1: device descriptor read/64, error -71
[   47.435115][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   47.605141][    T9] usb 4-1: Using ep0 maxpacket: 8
[   47.612884][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[   47.622056][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.630593][    T9] usb 4-1: Product: syz
[   47.634795][    T9] usb 4-1: Manufacturer: syz
[   47.639466][    T9] usb 4-1: SerialNumber: syz
[   47.685138][   T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   47.705089][  T336] usb 1-1: Using ep0 maxpacket: 32
[   47.711495][  T336] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.722784][  T336] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.733084][  T336] usb 1-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   47.747076][  T336] usb 1-1: config 0 interface 0 has no altsetting 0
[   47.753737][  T336] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00
[   47.763351][  T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.772556][  T336] usb 1-1: config 0 descriptor??
[   47.836663][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   47.845339][   T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.855972][   T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   47.864998][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   47.866883][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[   47.890527][   T45] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   47.901640][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   47.905444][    T9] usb 4-1: USB disconnect, device number 10
[   47.921932][   T45] usb 2-1: Product: syz
[   47.927951][   T45] usb 2-1: Manufacturer: syz
[   47.937040][   T45] usb 2-1: Found UVC 1.00 device syz (8086:0ad2)
[   48.139230][  T584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.148839][  T584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.358534][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1).
[   48.375376][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1).
[   48.396264][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1).
[   48.405591][  T336] usbhid 1-1:0.0: can't add hid device: -71
[   48.411657][  T336] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   48.425623][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1).
[   48.446275][  T336] usb 1-1: USB disconnect, device number 8
[   48.453102][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1).
[   48.469628][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1).
[   48.495307][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1).
[   48.506142][   T45] usb 2-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1).
[   48.525177][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1).
[   48.534590][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1).
[   48.545089][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1).
[   48.563141][   T45] usb 2-1: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1).
[   48.573391][   T45] usb 2-1: No streaming interface found for terminal 2.
[   48.582805][   T45] usb 2-1: USB disconnect, device number 7
[   49.025343][  T600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   49.135118][   T62] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   49.279546][  T608] usb usb8: usbfs: process 608 (syz.0.82) did not claim interface 0 before use
[   49.305108][   T62] usb 2-1: Using ep0 maxpacket: 8
[   49.311458][   T62] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 250, changing to 11
[   49.324839][   T62] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   49.338179][   T62] usb 2-1: config 0 interface 0 has no altsetting 0
[   49.344984][   T62] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[   49.354422][   T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.366379][   T62] usb 2-1: config 0 descriptor??
[   49.586805][  T613] raw_sendmsg: syz.3.84 forgot to set AF_INET. Fix it!
[   49.594660][  T613] netlink: 'syz.3.84': attribute type 27 has an invalid length.
[   49.620257][  T613] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.627628][  T613] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.645157][  T550] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   49.786339][  T596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.804822][  T596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.816100][  T550] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[   49.835344][   T62] input: HID 0810:0001 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0810:0001.0004/input/input7
[   49.847571][  T550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.856561][  T550] usb 1-1: Product: syz
[   49.860870][  T550] usb 1-1: Manufacturer: syz
[   49.866440][  T550] usb 1-1: SerialNumber: syz
[   49.873387][   T62] pantherlord 0003:0810:0001.0004: input,hidraw0: USB HID v0.00 Joystick [HID 0810:0001] on usb-dummy_hcd.1-1/input0
[   49.906325][   T62] pantherlord 0003:0810:0001.0004: no output reports found
[   50.019136][   T62] usb 2-1: USB disconnect, device number 8
[   50.125094][  T336] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[   50.153554][  T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.163719][  T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.173224][  T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.182626][  T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.192197][  T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.201913][  T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.211608][  T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.221152][  T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.231082][  T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.240928][  T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.255590][  T550] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   50.263017][  T550] usb 1-1: found format II with max.bitrate = 44931, frame size=8
[   50.271102][  T550] usb 1-1: found format II with max.bitrate = 44931, frame size=8
[   50.280363][  T550] usb 1-1: 2:1: cannot set freq 4584960 to ep 0x82
[   50.296208][  T336] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   50.300643][  T550] usb 1-1: USB disconnect, device number 9
[   50.317476][  T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   50.329118][  T336] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   50.342659][  T336] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[   50.355941][  T632] udevd[632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   50.381111][  T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.390495][  T336] usb 4-1: config 0 descriptor??
[   50.395814][  T627] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   50.565591][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   50.565609][   T36] audit: type=1400 audit(1791735645.960:248): avc:  denied  { mount } for  pid=635 comm="syz.1.89" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   50.641346][   T36] audit: type=1400 audit(1791735645.990:249): avc:  denied  { append } for  pid=635 comm="syz.1.89" name="uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   50.695093][   T36] audit: type=1400 audit(1791735645.990:250): avc:  denied  { open } for  pid=635 comm="syz.1.89" path="/27/tracing/uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   50.745503][   T36] audit: type=1400 audit(1791735646.070:251): avc:  denied  { lock } for  pid=635 comm="syz.1.89" path="/27/tracing/uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   50.775108][   T13] bridge_slave_1: left allmulticast mode
[   50.781705][   T13] bridge_slave_1: left promiscuous mode
[   50.787683][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.795300][   T36] audit: type=1400 audit(1791735646.070:252): avc:  denied  { mounton } for  pid=639 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   50.817343][   T13] bridge_slave_0: left allmulticast mode
[   50.823246][   T13] bridge_slave_0: left promiscuous mode
[   50.829209][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.836939][  T627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'.
[   50.860809][  T336] uclogic 0003:28BD:0075.0005: interface is invalid, ignoring
[   50.934600][  T639] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.942733][  T639] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.950131][  T639] bridge_slave_0: entered allmulticast mode
[   50.957017][  T639] bridge_slave_0: entered promiscuous mode
[   50.973638][  T639] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.984146][  T639] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.991782][  T639] bridge_slave_1: entered allmulticast mode
[   51.000070][  T639] bridge_slave_1: entered promiscuous mode
[   51.007154][   T13] veth1_macvtap: left promiscuous mode
[   51.012887][   T13] veth0_vlan: left promiscuous mode
[   51.062676][   T36] audit: type=1400 audit(1791735646.450:253): avc:  denied  { append } for  pid=646 comm="syz.0.92" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   51.065433][   T62] usb 4-1: USB disconnect, device number 11
[   51.086651][  T647] SELinux:  Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped).
[   51.108267][   T36] audit: type=1400 audit(1791735646.500:254): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   51.141315][   T36] audit: type=1400 audit(1791735646.500:255): avc:  denied  { relabelto } for  pid=646 comm="syz.0.92" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crypt_device_t:s0"
[   51.141934][  T647] overlayfs: workdir and upperdir must be separate subtrees
[   51.169596][   T36] audit: type=1400 audit(1791735646.500:256): avc:  denied  { associate } for  pid=646 comm="syz.0.92" name="ashmem" dev="devtmpfs" ino=201 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crypt_device_t:s0"
[   51.205855][   T36] audit: type=1400 audit(1791735646.520:257): avc:  denied  { create } for  pid=649 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   51.232382][  T650] netlink: 'syz.1.93': attribute type 64 has an invalid length.
[   51.296482][  T639] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.303651][  T639] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.311007][  T639] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.318103][  T639] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.318131][  T670] overlayfs: failed to resolve 'upper': -2
[   51.353401][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.361468][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.377912][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.385142][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.395320][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.402443][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.501832][  T639] veth0_vlan: entered promiscuous mode
[   51.529949][  T639] veth1_macvtap: entered promiscuous mode
[   51.609183][  T696] syzkaller1: entered promiscuous mode
[   51.614814][  T696] syzkaller1: entered allmulticast mode
[   51.624545][  T696] FAULT_INJECTION: forcing a failure.
[   51.624545][  T696] name failslab, interval 1, probability 0, space 0, times 0
[   51.637851][  T696] CPU: 0 UID: 0 PID: 696 Comm: syz.4.95 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   51.637887][  T696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   51.637903][  T696] Call Trace:
[   51.637910][  T696]  <TASK>
[   51.637919][  T696]  __dump_stack+0x21/0x30
[   51.637961][  T696]  dump_stack_lvl+0x140/0x1c0
[   51.637997][  T696]  ? __cfi_dump_stack_lvl+0x10/0x10
[   51.638035][  T696]  dump_stack+0x19/0x20
[   51.638069][  T696]  should_fail_ex+0x3c2/0x510
[   51.638092][  T696]  should_failslab+0xac/0x100
[   51.638116][  T696]  kmem_cache_alloc_node_noprof+0x45/0x420
[   51.638152][  T696]  ? dup_task_struct+0xc1/0xd80
[   51.638185][  T696]  dup_task_struct+0xc1/0xd80
[   51.638218][  T696]  ? __kasan_check_write+0x18/0x20
[   51.638252][  T696]  ? _raw_spin_lock_irq+0x93/0x120
[   51.638300][  T696]  ? copy_process+0x3350/0x3350
[   51.638333][  T696]  ? __kasan_check_write+0x18/0x20
[   51.638366][  T696]  copy_process+0x57c/0x3350
[   51.638398][  T696]  ? __kasan_check_write+0x18/0x20
[   51.638433][  T696]  ? futex_wake+0x666/0x950
[   51.638464][  T696]  ? __cfi_copy_process+0x10/0x10
[   51.638496][  T696]  ? find_vma+0xd3/0x120
[   51.638531][  T696]  kernel_clone+0x233/0x810
[   51.638565][  T696]  ? __cfi___blk_flush_plug+0x10/0x10
[   51.638588][  T696]  ? __cfi_kernel_clone+0x10/0x10
[   51.638620][  T696]  ? do_futex+0x37d/0x510
[   51.638647][  T696]  __x64_sys_clone+0x1b7/0x230
[   51.638682][  T696]  ? __cfi___x64_sys_clone+0x10/0x10
[   51.638720][  T696]  ? __kasan_check_write+0x18/0x20
[   51.638752][  T696]  ? fpregs_restore_userregs+0x11c/0x260
[   51.638786][  T696]  ? switch_fpu_return+0x12/0x20
[   51.638818][  T696]  x64_sys_call+0x2b3c/0x2ee0
[   51.638842][  T696]  do_syscall_64+0x57/0xf0
[   51.638863][  T696]  ? clear_bhb_loop+0x50/0xa0
[   51.638892][  T696]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   51.638920][  T696] RIP: 0033:0x7fcc3279e1d9
[   51.638941][  T696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.638962][  T696] RSP: 002b:00007fcc33639fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   51.638989][  T696] RAX: ffffffffffffffda RBX: 00007fcc32a25fa0 RCX: 00007fcc3279e1d9
[   51.639007][  T696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   51.639023][  T696] RBP: 00007fcc32835888 R08: 0000000000000000 R09: 0000000000000000
[   51.639039][  T696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.639054][  T696] R13: 00007fcc32a26038 R14: 00007fcc32a25fa0 R15: 00007ffc6cdf7488
[   51.639075][  T696]  </TASK>
[   51.904731][  T708] FAULT_INJECTION: forcing a failure.
[   51.904731][  T708] name failslab, interval 1, probability 0, space 0, times 0
[   51.917598][  T708] CPU: 0 UID: 0 PID: 708 Comm: syz.3.96 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   51.917635][  T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   51.917651][  T708] Call Trace:
[   51.917658][  T708]  <TASK>
[   51.917667][  T708]  __dump_stack+0x21/0x30
[   51.917708][  T708]  dump_stack_lvl+0x140/0x1c0
[   51.917753][  T708]  ? __cfi_dump_stack_lvl+0x10/0x10
[   51.917791][  T708]  ? kasan_save_alloc_info+0x3a/0x50
[   51.917823][  T708]  ? __kasan_slab_alloc+0x73/0x90
[   51.917847][  T708]  dump_stack+0x19/0x20
[   51.917882][  T708]  should_fail_ex+0x3c2/0x510
[   51.917906][  T708]  should_failslab+0xac/0x100
[   51.917929][  T708]  __kmalloc_cache_noprof+0x41/0x470
[   51.917964][  T708]  ? alloc_pipe_info+0xfb/0x5f0
[   51.917997][  T708]  alloc_pipe_info+0xfb/0x5f0
[   51.918030][  T708]  create_pipe_files+0x8f/0x6c0
[   51.918064][  T708]  __do_pipe_flags+0x50/0x2f0
[   51.918097][  T708]  do_pipe2+0xab/0x190
[   51.918130][  T708]  ? xfd_validate_state+0x68/0x140
[   51.918166][  T708]  ? pipe_fcntl+0x520/0x520
[   51.918203][  T708]  __x64_sys_pipe2+0x5e/0x70
[   51.918235][  T708]  x64_sys_call+0x8be/0x2ee0
[   51.918268][  T708]  do_syscall_64+0x57/0xf0
[   51.918289][  T708]  ? clear_bhb_loop+0x50/0xa0
[   51.918319][  T708]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   51.918347][  T708] RIP: 0033:0x7fc7ce59e1d9
[   51.918368][  T708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.918388][  T708] RSP: 002b:00007fc7cf4dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[   51.918415][  T708] RAX: ffffffffffffffda RBX: 00007fc7ce826090 RCX: 00007fc7ce59e1d9
[   51.918434][  T708] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000
[   51.918449][  T708] RBP: 00007fc7ce635888 R08: 0000000000000000 R09: 0000000000000000
[   51.918465][  T708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.918480][  T708] R13: 00007fc7ce826128 R14: 00007fc7ce826090 R15: 00007ffe4fb4e3e8
[   51.918501][  T708]  </TASK>
[   52.225450][  T728] syz.3.98 uses obsolete (PF_INET,SOCK_PACKET)
[   52.234652][  T728] netlink: 9 bytes leftover after parsing attributes in process `syz.3.98'.
[   52.244371][  T728] z00ªX¹¦: renamed from gretap0
[   52.250680][  T728] z00ªX¹¦: entered allmulticast mode
[   52.264488][  T728] A link change request failed with some changes committed already. Interface z00ªX¹¦ may have been left with an inconsistent configuration, please check.
[   52.319881][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   52.326780][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   52.545327][  T550] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   52.706205][  T550] usb 4-1: config 1 has an invalid interface number: 7 but max is 2
[   52.714265][  T550] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   52.745131][  T550] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[   52.754336][  T550] usb 4-1: config 1 has no interface number 3
[   52.760644][  T550] usb 4-1: too many endpoints for config 1 interface 7 altsetting 1: 255, using maximum allowed: 30
[   52.771674][  T550] usb 4-1: config 1 interface 7 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   52.791594][  T550] usb 4-1: config 1 interface 7 has no altsetting 0
[   52.806173][  T550] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[   52.825089][  T550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.833163][  T550] usb 4-1: Product: syz
[   52.837586][  T550] usb 4-1: Manufacturer: syz
[   52.842231][  T550] usb 4-1: SerialNumber: syz
[   53.220769][  T550] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[   53.248520][  T550] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -71
[   53.263314][  T550] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[   53.287135][  T550] usb 4-1: USB disconnect, device number 12
[   53.318988][  T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   54.106282][  T819] FAULT_INJECTION: forcing a failure.
[   54.106282][  T819] name fail_futex, interval 1, probability 0, space 0, times 1
[   54.119258][  T819] CPU: 1 UID: 0 PID: 819 Comm: syz.3.110 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   54.119299][  T819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   54.119315][  T819] Call Trace:
[   54.119324][  T819]  <TASK>
[   54.119332][  T819]  __dump_stack+0x21/0x30
[   54.119377][  T819]  dump_stack_lvl+0x140/0x1c0
[   54.119415][  T819]  ? __cfi_dump_stack_lvl+0x10/0x10
[   54.119454][  T819]  dump_stack+0x19/0x20
[   54.119489][  T819]  should_fail_ex+0x3c2/0x510
[   54.119513][  T819]  should_fail+0xf/0x20
[   54.119534][  T819]  get_futex_key+0x178/0x940
[   54.119557][  T819]  ? __cfi___futex_wait+0x10/0x10
[   54.119587][  T819]  ? __cfi_get_futex_key+0x10/0x10
[   54.119621][  T819]  ? __cfi_futex_wake_mark+0x10/0x10
[   54.119652][  T819]  futex_wake+0x150/0x950
[   54.119682][  T819]  ? futex_wait+0x2b8/0x7c0
[   54.119711][  T819]  ? __cfi_futex_wake+0x10/0x10
[   54.119743][  T819]  ? vfs_write+0xbcf/0xfd0
[   54.119779][  T819]  do_futex+0x37d/0x510
[   54.119804][  T819]  ? __cfi_do_futex+0x10/0x10
[   54.119830][  T819]  __se_sys_futex+0x13c/0x320
[   54.119854][  T819]  ? fput+0x1a4/0x230
[   54.119879][  T819]  ? __x64_sys_futex+0x110/0x110
[   54.119907][  T819]  __x64_sys_futex+0xe9/0x110
[   54.119933][  T819]  x64_sys_call+0x227f/0x2ee0
[   54.119958][  T819]  do_syscall_64+0x57/0xf0
[   54.119980][  T819]  ? clear_bhb_loop+0x50/0xa0
[   54.120010][  T819]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   54.120038][  T819] RIP: 0033:0x7fc7ce59e1d9
[   54.120059][  T819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.120080][  T819] RSP: 002b:00007fc7cf4fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   54.120106][  T819] RAX: ffffffffffffffda RBX: 00007fc7ce825fa8 RCX: 00007fc7ce59e1d9
[   54.120124][  T819] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc7ce825fac
[   54.120141][  T819] RBP: 00007fc7ce825fa0 R08: 4000000000000000 R09: 0000000000000000
[   54.120158][  T819] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   54.120174][  T819] R13: 00007fc7ce826038 R14: 00007ffe4fb4e300 R15: 00007ffe4fb4e3e8
[   54.120196][  T819]  </TASK>
[   54.347942][  T819] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off.
[   54.375992][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   54.382241][  T744] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.465107][  T718] Bluetooth: hci0: Opcode 0x080f failed: -4
[   54.483644][  T729] Bluetooth: hci0: Opcode 0x080f failed: -4
[   55.295124][  T550] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   55.380313][  T848] FAULT_INJECTION: forcing a failure.
[   55.380313][  T848] name failslab, interval 1, probability 0, space 0, times 0
[   55.394143][  T840] FAULT_INJECTION: forcing a failure.
[   55.394143][  T840] name fail_futex, interval 1, probability 0, space 0, times 0
[   55.407277][  T848] CPU: 0 UID: 0 PID: 848 Comm: syz.3.117 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   55.407329][  T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   55.407346][  T848] Call Trace:
[   55.407354][  T848]  <TASK>
[   55.407363][  T848]  __dump_stack+0x21/0x30
[   55.407408][  T848]  dump_stack_lvl+0x140/0x1c0
[   55.407445][  T848]  ? __cfi_dump_stack_lvl+0x10/0x10
[   55.407483][  T848]  ? __cfi_do_futex+0x10/0x10
[   55.407507][  T848]  ? mutex_unlock+0x90/0x240
[   55.407536][  T848]  dump_stack+0x19/0x20
[   55.407572][  T848]  should_fail_ex+0x3c2/0x510
[   55.407594][  T848]  should_failslab+0xac/0x100
[   55.407618][  T848]  __kmalloc_cache_noprof+0x41/0x470
[   55.407653][  T848]  ? do_epoll_create+0x85/0x3f0
[   55.407681][  T848]  do_epoll_create+0x85/0x3f0
[   55.407708][  T848]  __x64_sys_epoll_create1+0x3b/0x50
[   55.407733][  T848]  x64_sys_call+0x1761/0x2ee0
[   55.407758][  T848]  do_syscall_64+0x57/0xf0
[   55.407779][  T848]  ? clear_bhb_loop+0x50/0xa0
[   55.407808][  T848]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   55.407837][  T848] RIP: 0033:0x7fc7ce59e1d9
[   55.407858][  T848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.407878][  T848] RSP: 002b:00007fc7cf4fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[   55.407905][  T848] RAX: ffffffffffffffda RBX: 00007fc7ce825fa0 RCX: 00007fc7ce59e1d9
[   55.407924][  T848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[   55.407940][  T848] RBP: 00007fc7ce635888 R08: 0000000000000000 R09: 0000000000000000
[   55.407956][  T848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.407971][  T848] R13: 00007fc7ce826038 R14: 00007fc7ce825fa0 R15: 00007ffe4fb4e3e8
[   55.407992][  T848]  </TASK>
[   55.408263][  T840] CPU: 0 UID: 0 PID: 840 Comm: syz.0.114 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   55.408295][  T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   55.408322][  T840] Call Trace:
[   55.408329][  T840]  <TASK>
[   55.408337][  T840]  __dump_stack+0x21/0x30
[   55.408374][  T840]  dump_stack_lvl+0x140/0x1c0
[   55.408407][  T840]  ? __cfi_dump_stack_lvl+0x10/0x10
[   55.408441][  T840]  ? unwind_get_return_address+0x51/0x90
[   55.408474][  T840]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   55.408510][  T840]  dump_stack+0x19/0x20
[   55.408543][  T840]  should_fail_ex+0x3c2/0x510
[   55.408566][  T840]  should_fail+0xf/0x20
[   55.408586][  T840]  get_futex_key+0x22c/0x940
[   55.408609][  T840]  ? __cfi_get_futex_key+0x10/0x10
[   55.408631][  T840]  ? kasan_save_track+0x4f/0x80
[   55.408666][  T840]  futex_wake+0x150/0x950
[   55.408693][  T840]  ? __cfi_futex_wake+0x10/0x10
[   55.408721][  T840]  ? perf_lock_task_context+0x398/0x450
[   55.408756][  T840]  ? __perf_event_period+0x490/0x490
[   55.408790][  T840]  ? mutex_unlock+0x90/0x240
[   55.408816][  T840]  do_futex+0x37d/0x510
[   55.408839][  T840]  ? __kasan_check_read+0x15/0x20
[   55.408870][  T840]  ? __cfi_do_futex+0x10/0x10
[   55.408894][  T840]  ? __kasan_check_write+0x18/0x20
[   55.408925][  T840]  mm_release+0x15f/0x300
[   55.408955][  T840]  ? exit_mm_release+0x50/0x50
[   55.408985][  T840]  ? futex_exit_release+0x11d/0x1f0
[   55.409009][  T840]  exit_mm_release+0x29/0x50
[   55.409038][  T840]  do_exit+0x832/0x2850
[   55.409070][  T840]  ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[   55.409096][  T840]  ? __cfi_do_exit+0x10/0x10
[   55.409127][  T840]  ? futex_wait+0x2b8/0x7c0
[   55.409155][  T840]  ? __cfi_futex_wait+0x10/0x10
[   55.409184][  T840]  ? _raw_spin_lock_irq+0x116/0x120
[   55.409219][  T840]  do_group_exit+0x21f/0x2f0
[   55.409251][  T840]  ? __kasan_check_write+0x18/0x20
[   55.409282][  T840]  ? recalc_sigpending+0x16c/0x1d0
[   55.409319][  T840]  get_signal+0x134c/0x1490
[   55.409357][  T840]  arch_do_signal_or_restart+0xbc/0x700
[   55.409381][  T840]  ? fdget_pos+0x299/0x310
[   55.409404][  T840]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   55.409433][  T840]  syscall_exit_to_user_mode+0x57/0xb0
[   55.409464][  T840]  do_syscall_64+0x63/0xf0
[   55.409485][  T840]  ? clear_bhb_loop+0x50/0xa0
[   55.409513][  T840]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   55.409540][  T840] RIP: 0033:0x7feb32d9e1d9
[   55.409559][  T840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.409580][  T840] RSP: 002b:00007feb33be20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   55.409605][  T840] RAX: fffffffffffffe00 RBX: 00007feb33026368 RCX: 00007feb32d9e1d9
[   55.409623][  T840] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feb33026368
[   55.409639][  T840] RBP: 00007feb33026360 R08: 0000000000000000 R09: 0000000000000000
[   55.409654][  T840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.409669][  T840] R13: 00007feb330263f8 R14: 00007fffed7a7ed0 R15: 00007fffed7a7fb8
[   55.409690][  T840]  </TASK>
[   55.925080][  T550] usb 2-1: Using ep0 maxpacket: 8
[   55.933854][  T550] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   55.942232][  T550] usb 2-1: config 179 has no interface number 0
[   55.948556][  T550] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   55.959835][  T550] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   55.971377][  T550] usb 2-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[   55.984715][  T550] usb 2-1: config 179 interface 65 has no altsetting 0
[   55.991910][  T550] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   56.001374][  T550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.095202][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   56.095221][   T36] audit: type=1400 audit(1791735651.490:267): avc:  denied  { cmd } for  pid=855 comm="iou-wrk-856" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[   56.213025][  T336] usb 2-1: USB disconnect, device number 9
[   56.251504][   T31] rust_binder: 852: undelivered TRANSACTION_ERROR: 29189
[   56.487205][  T867] netlink: 376 bytes leftover after parsing attributes in process `syz.3.122'.
[   56.516179][   T36] audit: type=1400 audit(1791735651.910:268): avc:  denied  { ioctl } for  pid=864 comm="syz.3.122" path="socket:[7468]" dev="sockfs" ino=7468 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   56.775283][   T36] audit: type=1400 audit(1791735652.170:269): avc:  denied  { setopt } for  pid=870 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   57.095737][   T36] audit: type=1400 audit(1791735652.490:270): avc:  denied  { setopt } for  pid=882 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   57.182232][  T888] tipc: Started in network mode
[   57.187255][    T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   57.201853][  T888] tipc: Node identity 2000004, cluster identity 4711
[   57.213803][  T888] tipc: Node number set to 33554436
[   57.264069][   T36] audit: type=1400 audit(1791735652.650:271): avc:  denied  { bind } for  pid=889 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   57.334895][   T36] audit: type=1400 audit(1791735652.720:272): avc:  denied  { name_bind } for  pid=895 comm="syz.3.132" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   57.405792][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[   57.414462][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.430336][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   57.448379][   T36] audit: type=1400 audit(1791735652.840:273): avc:  denied  { setopt } for  pid=897 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.469403][  T898] Invalid logical block size (67584)
[   57.475106][    T9] usb 2-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00
[   57.495100][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.515457][   T36] audit: type=1400 audit(1791735652.860:274): avc:  denied  { append } for  pid=897 comm="syz.3.133" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   57.555968][    T9] usb 2-1: Found UVC 1.00 device <unnamed> (0000:d970)
[   57.562922][    T9] usb 2-1: No valid video chain found.
[   57.678652][   T36] audit: type=1400 audit(1791735653.070:275): avc:  denied  { map } for  pid=903 comm="syz.3.135" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   57.725224][   T36] audit: type=1400 audit(1791735653.100:276): avc:  denied  { append } for  pid=903 comm="syz.3.135" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   57.771134][  T907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.780117][  T907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.894736][  T913] FAULT_INJECTION: forcing a failure.
[   57.894736][  T913] name failslab, interval 1, probability 0, space 0, times 0
[   57.925101][  T913] CPU: 0 UID: 0 PID: 913 Comm: syz.3.136 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   57.925141][  T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   57.925180][  T913] Call Trace:
[   57.925188][  T913]  <TASK>
[   57.925197][  T913]  __dump_stack+0x21/0x30
[   57.925239][  T913]  dump_stack_lvl+0x140/0x1c0
[   57.925275][  T913]  ? __cfi_dump_stack_lvl+0x10/0x10
[   57.925314][  T913]  dump_stack+0x19/0x20
[   57.925356][  T913]  should_fail_ex+0x3c2/0x510
[   57.925382][  T913]  should_failslab+0xac/0x100
[   57.925408][  T913]  kmem_cache_alloc_noprof+0x42/0x410
[   57.925443][  T913]  ? key_alloc+0x2ee/0x1060
[   57.925472][  T913]  ? key_user_lookup+0x263/0x4f0
[   57.925502][  T913]  key_alloc+0x2ee/0x1060
[   57.925533][  T913]  keyring_alloc+0x4b/0xc0
[   57.925565][  T913]  lookup_user_key+0x485/0x1230
[   57.925593][  T913]  ? __cfi_lookup_user_key+0x10/0x10
[   57.925620][  T913]  ? do_futex+0x37d/0x510
[   57.925646][  T913]  ? __cfi_lookup_user_key_possessed+0x10/0x10
[   57.925676][  T913]  ? strncpy_from_user+0x14f/0x280
[   57.925701][  T913]  __se_sys_add_key+0x317/0x4b0
[   57.925737][  T913]  ? __x64_sys_add_key+0xf0/0xf0
[   57.925774][  T913]  ? __kasan_check_write+0x18/0x20
[   57.925807][  T913]  ? fpregs_restore_userregs+0x11c/0x260
[   57.925841][  T913]  __x64_sys_add_key+0xc3/0xf0
[   57.925877][  T913]  x64_sys_call+0x195f/0x2ee0
[   57.925902][  T913]  do_syscall_64+0x57/0xf0
[   57.925924][  T913]  ? clear_bhb_loop+0x50/0xa0
[   57.925954][  T913]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.925983][  T913] RIP: 0033:0x7fc7ce59e1d9
[   57.926004][  T913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.926028][  T913] RSP: 002b:00007fc7cf4fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   57.926058][  T913] RAX: ffffffffffffffda RBX: 00007fc7ce825fa0 RCX: 00007fc7ce59e1d9
[   57.926083][  T913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001580
[   57.926104][  T913] RBP: 00007fc7ce635888 R08: ffffffffffffffff R09: 0000000000000000
[   57.926125][  T913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.926156][  T913] R13: 00007fc7ce826038 R14: 00007fc7ce825fa0 R15: 00007ffe4fb4e3e8
[   57.926182][  T913]  </TASK>
[   58.183345][  T336] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   58.210692][  T336] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   58.565258][   T62] usb 2-1: USB disconnect, device number 10
[   58.665083][  T336] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   58.784258][  T937] netlink: 'syz.1.143': attribute type 4 has an invalid length.
[   58.792109][  T937] netlink: 17 bytes leftover after parsing attributes in process `syz.1.143'.
[   58.825120][  T336] usb 4-1: Using ep0 maxpacket: 16
[   58.837511][  T336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   58.860302][  T336] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   58.875089][  T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.893295][  T336] usb 4-1: Product: syz
[   58.903392][  T336] usb 4-1: Manufacturer: syz
[   58.913487][  T336] usb 4-1: SerialNumber: syz
[   58.924385][  T336] usb 4-1: config 0 descriptor??
[   58.934847][  T336] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22
[   59.195135][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   59.365106][    T9] usb 2-1: Using ep0 maxpacket: 16
[   59.371473][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.381758][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.392474][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   59.401717][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.409894][    T9] usb 2-1: Product: syz
[   59.414290][    T9] usb 2-1: Manufacturer: syz
[   59.419022][    T9] usb 2-1: SerialNumber: syz
[   59.627973][    T9] usb 2-1: 0:2 : does not exist
[   59.637189][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   59.659124][    T9] usb 2-1: USB disconnect, device number 11
[   59.683397][  T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   60.243572][  T966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'.
[   61.432739][   T62] usb 4-1: USB disconnect, device number 13
[   67.560350][  T797] bridge_slave_1: left allmulticast mode
[   67.566056][  T797] bridge_slave_1: left promiscuous mode
[   67.571709][  T797] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.579401][  T797] bridge_slave_0: left allmulticast mode
[   67.585116][  T797] bridge_slave_0: left promiscuous mode
[   67.590810][  T797] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.687475][  T797] veth1_macvtap: left promiscuous mode
[   67.693022][  T797] veth0_vlan: left promiscuous mode
[   74.937803][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   74.937822][   T36] audit: type=1400 audit(1791735670.330:286): avc:  denied  { create } for  pid=969 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   74.978334][   T36] audit: type=1400 audit(1791735670.340:287): avc:  denied  { associate } for  pid=980 comm="syz.1.152" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   74.999294][   T36] audit: type=1400 audit(1791735670.350:288): avc:  denied  { mounton } for  pid=969 comm="syz.1.152" path="/proc/237/task" dev="proc" ino=7881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   75.032382][   T36] audit: type=1400 audit(1791735670.420:289): avc:  denied  { read } for  pid=974 comm="syz.3.154" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   75.056740][  T977] FAULT_INJECTION: forcing a failure.
[   75.056740][  T977] name failslab, interval 1, probability 0, space 0, times 0
[   75.078082][  T977] CPU: 1 UID: 0 PID: 977 Comm: syz.3.154 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   75.078116][  T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   75.078132][  T977] Call Trace:
[   75.078139][  T977]  <TASK>
[   75.078153][  T977]  __dump_stack+0x21/0x30
[   75.078192][  T977]  dump_stack_lvl+0x140/0x1c0
[   75.078225][  T977]  ? __cfi_dump_stack_lvl+0x10/0x10
[   75.078260][  T977]  dump_stack+0x19/0x20
[   75.078292][  T977]  should_fail_ex+0x3c2/0x510
[   75.078313][  T977]  should_failslab+0xac/0x100
[   75.078336][  T977]  __kmalloc_cache_noprof+0x41/0x470
[   75.078367][  T977]  ? has_cap_mac_admin+0xd0/0xd0
[   75.078397][  T977]  ? loop_add+0x11c/0xbc0
[   75.078425][  T977]  loop_add+0x11c/0xbc0
[   75.078449][  T977]  ? __cfi_futex_wait+0x10/0x10
[   75.078478][  T977]  ? loop_control_ioctl+0x590/0x590
[   75.078518][  T977]  ? __cfi_do_futex+0x10/0x10
[   75.078543][  T977]  ? __cfi_loop_control_ioctl+0x10/0x10
[   75.078569][  T977]  loop_control_ioctl+0x124/0x590
[   75.078595][  T977]  ? __cfi_loop_control_ioctl+0x10/0x10
[   75.078622][  T977]  ? bpf_lsm_file_ioctl+0xd/0x20
[   75.078645][  T977]  ? security_file_ioctl+0x3e/0x110
[   75.078675][  T977]  ? __cfi_loop_control_ioctl+0x10/0x10
[   75.078700][  T977]  __se_sys_ioctl+0x123/0x1b0
[   75.078722][  T977]  __x64_sys_ioctl+0x7f/0xa0
[   75.078743][  T977]  x64_sys_call+0x1878/0x2ee0
[   75.078766][  T977]  do_syscall_64+0x57/0xf0
[   75.078787][  T977]  ? clear_bhb_loop+0x50/0xa0
[   75.078813][  T977]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   75.078840][  T977] RIP: 0033:0x7fc7ce59e1d9
[   75.078858][  T977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.078878][  T977] RSP: 002b:00007fc7cf4dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   75.078902][  T977] RAX: ffffffffffffffda RBX: 00007fc7ce826090 RCX: 00007fc7ce59e1d9
[   75.078920][  T977] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000053
[   75.078935][  T977] RBP: 00007fc7ce635888 R08: 0000000000000000 R09: 0000000000000000
[   75.078950][  T977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.078964][  T977] R13: 00007fc7ce826128 R14: 00007fc7ce826090 R15: 00007ffe4fb4e3e8
[   75.078984][  T977]  </TASK>
[   75.079028][   T36] audit: type=1400 audit(1791735670.460:290): avc:  denied  { open } for  pid=974 comm="syz.3.154" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   75.330199][   T36] audit: type=1400 audit(1791735670.460:291): avc:  denied  { ioctl } for  pid=974 comm="syz.3.154" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   75.358529][  T985] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.359862][   T36] audit: type=1400 audit(1791735670.760:292): avc:  denied  { watch watch_reads } for  pid=990 comm="syz.0.156" path="/50" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   75.367331][  T985] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.388282][   T31] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[   75.403297][  T985] bridge_slave_0: entered allmulticast mode
[   75.410239][  T985] bridge_slave_0: entered promiscuous mode
[   75.416903][  T985] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.424066][  T985] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.431252][  T985] bridge_slave_1: entered allmulticast mode
[   75.437588][  T985] bridge_slave_1: entered promiscuous mode
[   75.443769][  T992] netlink: 140 bytes leftover after parsing attributes in process `syz.0.156'.
[   75.453610][   T36] audit: type=1400 audit(1791735670.850:293): avc:  denied  { create } for  pid=990 comm="syz.0.156" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   75.487079][   T36] audit: type=1400 audit(1791735670.870:294): avc:  denied  { unlink } for  pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   75.533760][  T985] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.540865][  T985] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.548208][  T985] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.555285][  T985] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.576522][   T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   75.584638][   T31] usb 2-1: config 0 has no interface number 0
[   75.592361][   T31] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   75.603754][   T31] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.613947][   T31] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   75.627187][   T31] usb 2-1: config 0 interface 1 has no altsetting 0
[   75.635162][   T31] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   75.645733][   T31] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[   75.654031][   T31] usb 2-1: Manufacturer: syz
[   75.660758][   T31] usb 2-1: config 0 descriptor??
[   75.673604][  T985] veth0_vlan: entered promiscuous mode
[   75.687872][  T985] veth1_macvtap: entered promiscuous mode
[   75.747171][  T797] bridge_slave_1: left allmulticast mode
[   75.753034][  T797] bridge_slave_1: left promiscuous mode
[   75.759280][  T797] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.767524][  T797] bridge_slave_0: left allmulticast mode
[   75.774969][  T797] bridge_slave_0: left promiscuous mode
[   75.781205][  T797] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.908346][  T797] veth1_macvtap: left promiscuous mode
[   75.914103][  T797] veth0_vlan: left promiscuous mode
[   76.125126][  T550] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   76.271055][   T31] uclogic 0003:145F:0212.0007: pen parameters not found
[   76.275301][  T550] usb 4-1: Using ep0 maxpacket: 16
[   76.278482][   T31] uclogic 0003:145F:0212.0007: interface is invalid, ignoring
[   76.296139][  T550] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.315070][  T550] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.325455][  T550] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.351915][  T550] usb 4-1: config 0 interface 0 has no altsetting 0
[   76.359162][  T550] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00
[   76.368573][  T550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.379744][  T550] usb 4-1: config 0 descriptor??
[   76.389640][   T36] audit: type=1400 audit(1791735671.780:295): avc:  denied  { ioctl } for  pid=1011 comm="syz.0.160" path="socket:[9062]" dev="sockfs" ino=9062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   76.414886][ T1012] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1012 comm=syz.0.160
[   76.429169][ T1012] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1012 comm=syz.0.160
[   76.474056][  T976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'.
[   76.483861][   T31] usb 2-1: USB disconnect, device number 12
[   76.586387][ T1003] syzkaller1: entered promiscuous mode
[   76.591937][ T1003] syzkaller1: entered allmulticast mode
[   76.787342][  T550] usbhid 4-1:0.0: can't add hid device: -71
[   76.795887][  T550] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   76.804676][  T550] usb 4-1: USB disconnect, device number 14
[   76.876095][ T1017] FAULT_INJECTION: forcing a failure.
[   76.876095][ T1017] name failslab, interval 1, probability 0, space 0, times 0
[   76.888880][ T1017] CPU: 1 UID: 0 PID: 1017 Comm: syz.0.161 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   76.888919][ T1017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   76.888935][ T1017] Call Trace:
[   76.888943][ T1017]  <TASK>
[   76.888952][ T1017]  __dump_stack+0x21/0x30
[   76.888994][ T1017]  dump_stack_lvl+0x140/0x1c0
[   76.889031][ T1017]  ? __cfi_dump_stack_lvl+0x10/0x10
[   76.889070][ T1017]  dump_stack+0x19/0x20
[   76.889105][ T1017]  should_fail_ex+0x3c2/0x510
[   76.889128][ T1017]  should_failslab+0xac/0x100
[   76.889152][ T1017]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   76.889187][ T1017]  ? _raw_spin_lock_irqsave+0xc1/0x160
[   76.889226][ T1017]  ? __d_alloc+0x42/0x8c0
[   76.889256][ T1017]  ? security_inode_alloc+0x51/0x230
[   76.889282][ T1017]  __d_alloc+0x42/0x8c0
[   76.889313][ T1017]  d_alloc_parallel+0xe4/0x1370
[   76.889345][ T1017]  ? __wake_up+0x169/0x190
[   76.889378][ T1017]  ? _raw_spin_unlock+0x45/0x60
[   76.889422][ T1017]  ? __d_add+0x636/0xac0
[   76.889457][ T1017]  ? avc_has_perm_noaudit+0x26b/0x360
[   76.889481][ T1017]  ? __cfi_d_alloc_parallel+0x10/0x10
[   76.889517][ T1017]  ? __kasan_check_write+0x18/0x20
[   76.889548][ T1017]  ? rwsem_read_trylock+0x275/0x5a0
[   76.889578][ T1017]  __lookup_slow+0x150/0x420
[   76.889602][ T1017]  ? lookup_one_len+0x300/0x300
[   76.889625][ T1017]  ? down_read+0x7f/0xe0
[   76.889654][ T1017]  ? __cfi_down_read+0x10/0x10
[   76.889682][ T1017]  ? __cfi_proc_pid_permission+0x10/0x10
[   76.889707][ T1017]  lookup_slow+0x57/0x80
[   76.889730][ T1017]  link_path_walk+0x991/0xeb0
[   76.889767][ T1017]  path_lookupat+0x8d/0x440
[   76.889790][ T1017]  filename_lookup+0x22d/0x5a0
[   76.889814][ T1017]  ? __cfi_filename_lookup+0x10/0x10
[   76.889836][ T1017]  ? check_stack_object+0x81/0x150
[   76.889868][ T1017]  ? strncpy_from_user+0x14f/0x280
[   76.889888][ T1017]  ? __kasan_check_write+0x18/0x20
[   76.889917][ T1017]  ? getname_flags+0x203/0x6b0
[   76.889950][ T1017]  user_path_at+0x42/0x60
[   76.889971][ T1017]  user_statfs+0xa3/0x190
[   76.890003][ T1017]  ? __cfi_user_statfs+0x10/0x10
[   76.890036][ T1017]  ? do_futex+0x37d/0x510
[   76.890060][ T1017]  __x64_sys_statfs+0x121/0x270
[   76.890094][ T1017]  ? __cfi___x64_sys_statfs+0x10/0x10
[   76.890129][ T1017]  ? __se_sys_futex+0x13c/0x320
[   76.890153][ T1017]  ? fput+0x1a4/0x230
[   76.890180][ T1017]  ? fpregs_restore_userregs+0x11c/0x260
[   76.890215][ T1017]  ? switch_fpu_return+0x12/0x20
[   76.890247][ T1017]  x64_sys_call+0x2aa0/0x2ee0
[   76.890273][ T1017]  do_syscall_64+0x57/0xf0
[   76.890295][ T1017]  ? clear_bhb_loop+0x50/0xa0
[   76.890324][ T1017]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   76.890353][ T1017] RIP: 0033:0x7feb32d9e1d9
[   76.890373][ T1017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.890405][ T1017] RSP: 002b:00007feb33c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
[   76.890433][ T1017] RAX: ffffffffffffffda RBX: 00007feb33025fa0 RCX: 00007feb32d9e1d9
[   76.890452][ T1017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002440
[   76.890469][ T1017] RBP: 00007feb32e35888 R08: 0000000000000000 R09: 0000000000000000
[   76.890485][ T1017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.890501][ T1017] R13: 00007feb33026038 R14: 00007feb33025fa0 R15: 00007fffed7a7fb8
[   76.890523][ T1017]  </TASK>
[   77.851226][ T1046] can: request_module (can-proto-0) failed.
[   78.045164][   T62] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[   78.185119][  T550] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[   78.195843][   T62] usb 2-1: not running at top speed; connect to a high speed hub
[   78.204374][   T62] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.214547][   T62] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   78.223495][   T62] usb 2-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00
[   78.232619][   T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.243878][   T62] usb 2-1: Found UVC 1.00 device <unnamed> (0000:d970)
[   78.250881][   T62] usb 2-1: No valid video chain found.
[   78.336470][  T550] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   78.344711][  T550] usb 1-1: config 0 has no interface number 0
[   78.350954][  T550] usb 1-1: config 0 interface 41 has no altsetting 0
[   78.359187][  T550] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   78.368327][  T550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.376362][  T550] usb 1-1: Product: syz
[   78.380525][  T550] usb 1-1: Manufacturer: syz
[   78.385200][  T550] usb 1-1: SerialNumber: syz
[   78.390470][  T550] usb 1-1: config 0 descriptor??
[   78.442394][   T62] usb 2-1: USB disconnect, device number 13
[   79.685115][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   79.836227][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   79.847933][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   79.858964][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   79.868773][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   79.881722][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   79.890816][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.899768][    T9] usb 4-1: config 0 descriptor??
[   80.308290][    T9] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max
[   80.318548][    T9] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[   80.327967][    T9] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   80.341878][ T1066] udevd[1066]: open /dev/null failed: Not a directory
[   80.430541][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   80.430560][   T36] audit: type=1400 audit(1791735675.820:307): avc:  granted  { setsecparam } for  pid=1068 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   80.461013][ T1072] audit: audit_backlog=65 > audit_backlog_limit=64
[   80.467761][ T1072] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   80.475751][   T36] audit: type=1400 audit(1791735675.850:308): avc:  granted  { setsecparam } for  pid=1068 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   80.495204][ T1072] audit: backlog limit exceeded
[   80.509102][   T36] audit: type=1400 audit(1791735675.850:309): avc:  granted  { setsecparam } for  pid=1068 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   80.540356][   T36] audit: type=1400 audit(1791735675.850:310): avc:  granted  { setsecparam } for  pid=1068 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   80.559828][   T36] audit: type=1400 audit(1791735675.850:311): avc:  granted  { setsecparam } for  pid=1068 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   80.585946][ T1062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.600104][ T1062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.611397][   T36] audit: type=1400 audit(1791735675.850:312): avc:  granted  { setsecparam } for  pid=1068 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   80.630992][   T36] audit: type=1400 audit(1791735675.850:313): avc:  granted  { setsecparam } for  pid=1068 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   80.861641][  T550] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[   80.881247][  T550] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[   80.892563][  T550] usb 1-1: USB disconnect, device number 10
[   82.395637][  T550] usb 4-1: USB disconnect, device number 15
[   82.974380][ T1088] fuse: Invalid rootmode
[   82.985673][ T1088] netlink: 'syz.1.179': attribute type 4 has an invalid length.
[   82.993469][ T1088] netlink: 17 bytes leftover after parsing attributes in process `syz.1.179'.
[   83.035321][ T1093] netlink: 200 bytes leftover after parsing attributes in process `syz.1.182'.
[   83.110781][ T1101] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   83.119974][ T1100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   83.205118][  T336] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[   83.295087][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   83.366290][  T336] usb 1-1: config 127 has an invalid descriptor of length 202, skipping remainder of the config
[   83.376947][  T336] usb 1-1: config 127 has 0 interfaces, different from the descriptor's value: 1
[   83.388118][  T336] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[   83.397536][  T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.405832][  T336] usb 1-1: Product: syz
[   83.410217][  T336] usb 1-1: Manufacturer: syz
[   83.415713][  T336] usb 1-1: SerialNumber: syz
[   83.455084][    T9] usb 2-1: Using ep0 maxpacket: 8
[   83.461694][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.472627][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.483974][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[   83.493637][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.502242][    T9] usb 2-1: Product: syz
[   83.506800][    T9] usb 2-1: Manufacturer: syz
[   83.511535][    T9] usb 2-1: SerialNumber: syz
[   83.722702][ T1093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.732844][ T1093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.749505][    T9] usb 2-1: unit 6 not found!
[   83.759722][    T9] usb 2-1: USB disconnect, device number 14
[   83.775494][  T982] udevd[982]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   84.322499][ T1118] FAULT_INJECTION: forcing a failure.
[   84.322499][ T1118] name failslab, interval 1, probability 0, space 0, times 0
[   84.348275][ T1118] CPU: 1 UID: 0 PID: 1118 Comm: syz.1.189 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   84.348316][ T1118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   84.348333][ T1118] Call Trace:
[   84.348342][ T1118]  <TASK>
[   84.348351][ T1118]  __dump_stack+0x21/0x30
[   84.348393][ T1118]  dump_stack_lvl+0x140/0x1c0
[   84.348429][ T1118]  ? __cfi_dump_stack_lvl+0x10/0x10
[   84.348466][ T1118]  ? avc_has_perm+0x155/0x240
[   84.348489][ T1118]  dump_stack+0x19/0x20
[   84.348523][ T1118]  should_fail_ex+0x3c2/0x510
[   84.348546][ T1118]  should_failslab+0xac/0x100
[   84.348569][ T1118]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   84.348603][ T1118]  ? selinux_socket_create+0x188/0x290
[   84.348629][ T1118]  ? sock_alloc_inode+0x48/0x150
[   84.348665][ T1118]  sock_alloc_inode+0x48/0x150
[   84.348700][ T1118]  ? __cfi_sock_alloc_inode+0x10/0x10
[   84.348735][ T1118]  alloc_inode+0x7d/0x270
[   84.348758][ T1118]  ? bpf_lsm_socket_create+0xd/0x20
[   84.348793][ T1118]  new_inode_pseudo+0x19/0x40
[   84.348817][ T1118]  __sock_create+0x130/0x810
[   84.348841][ T1118]  __sys_socketpair+0x221/0x5c0
[   84.348865][ T1118]  __x64_sys_socketpair+0x9f/0xc0
[   84.348889][ T1118]  x64_sys_call+0x2081/0x2ee0
[   84.348913][ T1118]  do_syscall_64+0x57/0xf0
[   84.348934][ T1118]  ? clear_bhb_loop+0x50/0xa0
[   84.348962][ T1118]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   84.349004][ T1118] RIP: 0033:0x7feeea19e1d9
[   84.349024][ T1118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.349045][ T1118] RSP: 002b:00007feeeb0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[   84.349071][ T1118] RAX: ffffffffffffffda RBX: 00007feeea425fa0 RCX: 00007feeea19e1d9
[   84.349089][ T1118] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001
[   84.349103][ T1118] RBP: 00007feeea235888 R08: 0000000000000000 R09: 0000000000000000
[   84.349127][ T1118] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   84.349144][ T1118] R13: 00007feeea426038 R14: 00007feeea425fa0 R15: 00007ffd3daa9e38
[   84.349165][ T1118]  </TASK>
[   84.349176][ T1118] socket: no more sockets
[   84.385971][ T1121] process 'syz.1.189' launched './file0' with NULL argv: empty string added
[   84.755133][  T336] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[   84.906286][  T336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.917876][  T336] usb 4-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40
[   84.927017][  T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.935101][  T336] usb 4-1: Product: syz
[   84.939289][  T336] usb 4-1: Manufacturer: syz
[   84.943925][  T336] usb 4-1: SerialNumber: syz
[   85.256185][  T336] usb 4-1: USB disconnect, device number 16
[   85.830938][   T36] kauditd_printk_skb: 12606 callbacks suppressed
[   85.830959][   T36] audit: type=1400 audit(1791735681.220:12920): avc:  denied  { listen } for  pid=1125 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   85.915710][ T1128] FAULT_INJECTION: forcing a failure.
[   85.915710][ T1128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.929401][ T1128] CPU: 1 UID: 0 PID: 1128 Comm: syz.3.192 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4
[   85.929439][ T1128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   85.929457][ T1128] Call Trace:
[   85.929465][ T1128]  <TASK>
[   85.929475][ T1128]  __dump_stack+0x21/0x30
[   85.929517][ T1128]  dump_stack_lvl+0x140/0x1c0
[   85.929554][ T1128]  ? __cfi_dump_stack_lvl+0x10/0x10
[   85.929593][ T1128]  ? hrtimer_reprogram+0x336/0x3d0
[   85.929620][ T1128]  ? fpu__alloc_mathframe+0xb7/0x150
[   85.929655][ T1128]  dump_stack+0x19/0x20
[   85.929690][ T1128]  should_fail_ex+0x3c2/0x510
[   85.929714][ T1128]  should_fail+0xf/0x20
[   85.929743][ T1128]  should_fail_usercopy+0x1e/0x30
[   85.929768][ T1128]  _copy_from_user+0x20/0xa0
[   85.929796][ T1128]  restore_altstack+0xaf/0x500
[   85.929823][ T1128]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   85.929860][ T1128]  ? __kasan_check_write+0x18/0x20
[   85.929893][ T1128]  ? __cfi_restore_altstack+0x10/0x10
[   85.929919][ T1128]  ? __set_current_blocked+0x281/0x2d0
[   85.929957][ T1128]  __ia32_sys_rt_sigreturn+0x1cf/0x830
[   85.929983][ T1128]  ? _raw_spin_unlock_irq+0x45/0x70
[   85.930019][ T1128]  ? __cfi___x64_sys_rt_sigreturn+0x10/0x10
[   85.930045][ T1128]  ? signal_setup_done+0x201/0x2e0
[   85.930079][ T1128]  ? arch_do_signal_or_restart+0x40a/0x700
[   85.930105][ T1128]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   85.930133][ T1128]  ? __kasan_check_read+0x15/0x20
[   85.930166][ T1128]  x64_sys_call+0x2c14/0x2ee0
[   85.930189][ T1128]  do_syscall_64+0x57/0xf0
[   85.930210][ T1128]  ? clear_bhb_loop+0x50/0xa0
[   85.930239][ T1128]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   85.930267][ T1128] RIP: 0033:0x7fc7ce53f559
[   85.930287][ T1128] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25
[   85.930313][ T1128] RSP: 002b:00007fc7cf4fca80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[   85.930340][ T1128] RAX: ffffffffffffffda RBX: 00007fc7ce825fa0 RCX: 00007fc7ce53f559
[   85.930358][ T1128] RDX: 00007fc7cf4fca80 RSI: 00007fc7cf4fcbb0 RDI: 0000000000000021
[   85.930375][ T1128] RBP: 00007fc7ce635888 R08: 0000000000000000 R09: 0000000000000000
[   85.930391][ T1128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   85.930407][ T1128] R13: 00007fc7ce826038 R14: 00007fc7ce825fa0 R15: 00007ffe4fb4e3e8
[   85.930429][ T1128]  </TASK>
[   86.201960][    T9] usb 1-1: USB disconnect, device number 11
[   86.214736][   T36] audit: type=1400 audit(1791735681.590:12921): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   86.295187][  T336] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   86.446467][  T336] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.457449][  T336] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.468932][  T336] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   86.478265][  T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.486333][  T336] usb 2-1: Product: syz
[   86.490622][  T336] usb 2-1: Manufacturer: syz
[   86.495365][  T336] usb 2-1: SerialNumber: syz
[   86.502887][  T336] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   86.508956][  T336] cdc_wdm 2-1:1.0: Unknown control protocol
[   86.704077][ T1129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.713543][ T1129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.722836][ T1129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.731483][ T1129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.875101][  T336] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   88.026376][  T336] usb 4-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[   88.035576][  T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.046397][  T336] usb-storage 4-1:1.0: USB Mass Storage device detected
[   88.447388][  T336] scsi host1: usb-storage 4-1:1.0
[   88.649058][  T336] usb 4-1: USB disconnect, device number 17
[   88.833376][    T9] usb 2-1: USB disconnect, device number 15
[   89.143099][   T36] audit: type=1400 audit(1791735684.530:12922): avc:  denied  { mounton } for  pid=1154 comm="syz.1.201" path="/60/mnt" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   89.145245][ T1157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1157 comm=syz.1.201
[   89.195775][   T36] audit: type=1400 audit(1791735684.590:12923): avc:  denied  { bind } for  pid=1154 comm="syz.1.201" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.217381][   T36] audit: type=1400 audit(1791735684.590:12924): avc:  denied  { node_bind } for  pid=1154 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   89.305343][ T1161] bridge0: port 3(erspan0) entered blocking state
[   89.313386][ T1161] bridge0: port 3(erspan0) entered disabled state
[   89.319995][ T1161] erspan0: entered allmulticast mode
[   89.325884][ T1161] erspan0: entered promiscuous mode
[   89.331320][ T1161] bridge0: port 3(erspan0) entered blocking state
[   89.337835][ T1161] bridge0: port 3(erspan0) entered forwarding state
[   89.345557][ T1161] erspan0: left allmulticast mode
[   89.350652][ T1161] erspan0: left promiscuous mode
[   89.355971][ T1161] bridge0: port 3(erspan0) entered disabled state
[   89.395127][  T336] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   89.555154][  T336] usb 1-1: Using ep0 maxpacket: 8
[   89.561382][  T336] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.572465][  T336] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   89.585306][  T336] usb 1-1: config 0 interface 0 has no altsetting 0
[   89.591934][  T336] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[   89.601120][  T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.610107][  T336] usb 1-1: config 0 descriptor??
[   89.617690][  T336] usbhid 1-1:0.0: Interface 0 is not authorized for usage
[   90.962238][ T1174] overlayfs: missing 'lowerdir'
[   90.969350][ T1178] overlayfs: missing 'lowerdir'
[   91.044090][   T36] audit: type=1400 audit(1791735686.430:12925): avc:  denied  { read append } for  pid=1186 comm="syz.3.209" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   91.070904][   T36] audit: type=1400 audit(1791735686.430:12926): avc:  denied  { open } for  pid=1186 comm="syz.3.209" path="/71/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   91.265128][  T336] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   91.415363][  T336] usb 2-1: Using ep0 maxpacket: 16
[   91.421721][  T336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.431896][  T336] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   91.440916][  T336] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   91.450048][  T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.458938][  T336] usb 2-1: config 0 descriptor??
[   91.666313][    T9] usb 2-1: USB disconnect, device number 16
[   92.145346][    T9] usb 1-1: USB disconnect, device number 12
[   92.769501][ T1193] fuse: Unknown parameter 'íçܺ<¸¥ùçrootmo�?y:Â×æÅ0000004000100Sâ:„ét‚Q¹'�[¤M(&0×Ä£z1h°PL»¸ïS…yœ"æ~È>õ¡êyÐU²vE/žl‚¨«Ç-š˜»ü<öø/qÜi®ÈâsÎF¨ƒí>¶˜Q8€fy¡ëJT&ä@dô+¬Ú£‘6dNí⼌ƒÔ¡UOâèh˜R9ä³¢r­¶J00000000000000000000'
[   92.806146][ T1193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'.
[   92.972630][ T1212] netlink: 'syz.1.218': attribute type 28 has an invalid length.
[   93.035113][  T550] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   93.206268][  T550] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   93.215501][  T550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.224446][  T550] usb 1-1: config 0 descriptor??
[   93.230672][  T550] MOSCHIP usb-ethernet driver 1-1:0.0: Interface 0 is not authorized for usage
[   94.885977][   T36] audit: type=1400 audit(1791735690.280:12927): avc:  denied  { ioctl } for  pid=1219 comm="syz.1.220" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   96.568117][  T337] usb 1-1: USB disconnect, device number 13
[   97.065148][  T337] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   97.225121][  T337] usb 2-1: Using ep0 maxpacket: 16
[   97.231486][  T337] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.242923][  T337] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.254571][  T337] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.269941][  T337] usb 2-1: config 0 interface 0 has no altsetting 0
[   97.276842][  T337] usb 2-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00
[   97.286184][  T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.295634][  T337] usb 2-1: config 0 descriptor??
[   97.704886][  T337] hid (null): bogus close delimiter
[   97.714614][  T337] wacom 0003:056A:5200.0009: ignoring exceeding usage max
[   97.724231][  T337] wacom 0003:056A:5200.0009: unknown main item tag 0x0
[   97.731404][  T337] wacom 0003:056A:5200.0009: unknown main item tag 0x0
[   97.738580][  T337] wacom 0003:056A:5200.0009: unknown main item tag 0x0
[   97.745801][  T337] wacom 0003:056A:5200.0009: unknown main item tag 0x1
[   97.752912][  T337] wacom 0003:056A:5200.0009: bogus close delimiter
[   97.759815][  T337] wacom 0003:056A:5200.0009: item 0 0 2 10 parsing failed
[   97.769425][  T337] wacom 0003:056A:5200.0009: parse failed
[   97.775751][  T337] wacom 0003:056A:5200.0009: probe with driver wacom failed with error -22
[   98.092447][  T550] usb 2-1: USB disconnect, device number 17
[   99.174236][ T1261] netlink: 'syz.0.228': attribute type 28 has an invalid length.
[  101.231742][   T36] audit: type=1400 audit(1791735696.620:12928): avc:  denied  { ioctl } for  pid=1273 comm="syz.1.231" path="socket:[11376]" dev="sockfs" ino=11376 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  101.307578][ T1279] cgroup: Need name or subsystem set
SYZFAIL: mount(dev) failed
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=5 req=153 state=3 status=67 (errno 9: Bad file descriptor)
[  101.474617][   T36] audit: type=1400 audit(1791735696.860:12929): avc:  denied  { write } for  pid=286 comm="syz-executor" path="pipe:[2673]" dev="pipefs" ino=2673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  101.719522][  T766] bridge_slave_1: left allmulticast mode
[  101.725271][  T766] bridge_slave_1: left promiscuous mode
[  101.730977][  T766] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.738788][  T766] bridge_slave_0: left allmulticast mode
[  101.744480][  T766] bridge_slave_0: left promiscuous mode
[  101.750372][  T766] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.758212][  T766] bridge_slave_1: left allmulticast mode
[  101.763864][  T766] bridge_slave_1: left promiscuous mode
[  101.769906][  T766] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.779206][  T766] bridge_slave_0: left allmulticast mode
[  101.784914][  T766] bridge_slave_0: left promiscuous mode
[  101.790902][  T766] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.937694][  T766] tipc: Left network mode
[  101.943926][  T766] veth1_macvtap: left promiscuous mode
[  101.949533][  T766] veth0_vlan: left promiscuous mode
[  101.955207][  T766] veth1_macvtap: left promiscuous mode
[  101.960733][  T766] veth0_vlan: left promiscuous mode
[  102.286577][  T766] bridge_slave_1: left allmulticast mode
[  102.292446][  T766] bridge_slave_1: left promiscuous mode
[  102.298149][  T766] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.305752][  T766] bridge_slave_0: left allmulticast mode
[  102.311423][  T766] bridge_slave_0: left promiscuous mode
[  102.317308][  T766] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.406372][  T766] tipc: Left network mode