last executing test programs: 7m5.202801556s ago: executing program 32 (id=278): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x1, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x1) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mbind(&(0x7f00005b1000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f00008bb000/0xd000)=nil, 0xd000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0xfffffffffffffeda, 0x11, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)=@ll={0x11, 0xd, r4, 0x1, 0x8, 0x6, @broadcast}, 0x80, 0x0}}], 0x1, 0x4004800) 7m2.374178408s ago: executing program 33 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x80) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m43.985294524s ago: executing program 34 (id=340): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) (fail_nth: 2) 6m32.383395495s ago: executing program 35 (id=650): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800006c0000000010000000100000000400000002000000000000910000000000000000000061"], 0x0, 0x2c, 0x0, 0x7, 0x0, 0x0, @void, @value}, 0x20) 6m27.583371733s ago: executing program 7 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="18fff000560067ee29bd7000fcdbdf2507"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 6m27.503789214s ago: executing program 7 (id=713): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010003", 0x7) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 6m27.443496796s ago: executing program 7 (id=714): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x54}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x40030000000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0}}], 0x1, 0x240080e4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m27.253815029s ago: executing program 7 (id=716): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x3, 0x12) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="687567653d6164766973652c006cf96202855ccdb1ee0b076bd182dce60ac012f36c97ca73f262a541ba8da2937180d104fc0fdc41ae7c8aa7ba70697fb35a9abc76a8d7c40255393ea3a7eb9d9ca10a68fa80f48559ecd23a4da1f7aefc2a1485809ba150c2019f652844148b522e3801768c38301b3736ee8ceedae4a61bf1b58001760a7281c6f346cc7d0570e2ecdd436a766956d70457bd59faa2d8dd93df"]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) 6m27.193825473s ago: executing program 7 (id=717): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0xfd7f) 6m25.17349294s ago: executing program 7 (id=745): pipe2(0x0, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b"], 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280080002"], 0x44}, 0x1, 0x2}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') pread64(r4, &(0x7f0000002040)=""/67, 0x43, 0x7ffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r6, &(0x7f0000000100)=[@generic={0x2}, @v={0x93, 0x0, 0x0, 0x0, @generic}], 0x9) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) 6m25.162998926s ago: executing program 36 (id=745): pipe2(0x0, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b"], 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280080002"], 0x44}, 0x1, 0x2}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') pread64(r4, &(0x7f0000002040)=""/67, 0x43, 0x7ffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r6, &(0x7f0000000100)=[@generic={0x2}, @v={0x93, 0x0, 0x0, 0x0, @generic}], 0x9) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) 4m37.72667272s ago: executing program 5 (id=2632): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f40fe72d66b9800000c00f326635000800000f303629615ff20f01d8660f3acff8000f01c30f20e06635000001000f22e0baf80c66b846079b8d66efbafc0ced66b8a16888040f23c00f21f86635010009000f23f8", 0x55}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async, rerun: 32) r2 = fcntl$dupfd(r1, 0x0, r1) (rerun: 32) ioctl$UFFDIO_CONTINUE(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) (async) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x502, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m36.699286309s ago: executing program 5 (id=2650): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000778600000000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100f0ffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500766574683000000000000000000000000c002b8008000100", @ANYRES32=r2], 0x40}}, 0x0) 4m36.611316693s ago: executing program 5 (id=2652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40804}, 0x1004) 4m36.611014247s ago: executing program 5 (id=2654): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9a00, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x6, 0x6, 0x7fffffff, 0x0, [{0x99, 0x9, 0xb, '\x00', 0xb8}, {0x13, 0x7, 0x9, '\x00', 0x8}, {0x81, 0x3, 0x0, '\x00', 0x1}, {0xfa, 0x9, 0x40, '\x00', 0x7f}, {0x86, 0x7f, 0x2, '\x00', 0x34}, {0x9, 0x0, 0xc7, '\x00', 0x2}, {0x1, 0x2, 0x8, '\x00', 0xff}, {0xff, 0x8, 0x12, '\x00', 0x3}, {0x2, 0xff, 0x6, '\x00', 0x9}, {0x6, 0x48, 0xc5, '\x00', 0x3}, {0x2, 0xee, 0x2, '\x00', 0xe9}, {0x9c, 0x5, 0x3, '\x00', 0xa}, {0x2, 0x1, 0x4}, {0xf4, 0x7, 0x6, '\x00', 0xf5}, {0x3, 0x2, 0x59, '\x00', 0x3}, {0x0, 0x9, 0x0, '\x00', 0x2}, {0xfd, 0x7, 0x0, '\x00', 0xff}, {0x6, 0xf, 0xe, '\x00', 0x95}, {0x80, 0x5, 0x5}, {0x2, 0xb, 0x7c, '\x00', 0x5}, {0x9, 0x3, 0x6, '\x00', 0x3}, {0x7, 0xb4, 0x9, '\x00', 0xd}, {0x0, 0x8, 0x4, '\x00', 0x3}, {0x8, 0x2, 0x81, '\x00', 0x8}]}}) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0x300}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="3fbc12b4f963387ea6db712c13dd61d73ac1c749f013f06b1a87bdcd7285c650cd6f7098de79204bb44b86094bac043b2329b53aa500523b1b3bd4afd511e4ee64a565", 0x43}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) (async) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0x300}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="3fbc12b4f963387ea6db712c13dd61d73ac1c749f013f06b1a87bdcd7285c650cd6f7098de79204bb44b86094bac043b2329b53aa500523b1b3bd4afd511e4ee64a565", 0x43}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) 4m36.402557545s ago: executing program 5 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f0000000480)={&(0x7f0000000740)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffea3, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000200000000020000000000000502000000020000000000000e03"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r1 = socket$kcm(0x2, 0x1, 0x84) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x1100, 0x7) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)='T', 0x1}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m36.052066022s ago: executing program 5 (id=2664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000500160089000000c38df6bdbf2df1ae5e5f30d028792853578bf211da2b129682ed7b3033cefb058531a0c297191cca2848caaf8f87cafd"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c050000", @ANYRES16, @ANYBLOB="0500000000000000000001000000b00408805000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050005000000200004000a004e"], 0x51c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x200440c0, 0x1}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/64, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000340), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f0000000600)='\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050300000000000000000700040008000300", @ANYRES32=r10], 0x1c}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newchain={0x6c, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x8, 0xfff1}, {0x1, 0x5}, {0x9, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x48, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x7, 0x10}}, @TCA_RATE={0x6, 0x5, {0x81}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_CHAIN={0x8, 0xb, 0xde}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd2d506830dc3190e}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x54, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {}, @device_b}, @vht_group_id={0x15, 0x1, {0x0, "5584d2f515d56c029a92908b231c387c"}}}}]}, 0x54}}, 0x0) io_setup(0x6, &(0x7f0000000280)) 4m36.025195863s ago: executing program 37 (id=2664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000500160089000000c38df6bdbf2df1ae5e5f30d028792853578bf211da2b129682ed7b3033cefb058531a0c297191cca2848caaf8f87cafd"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c050000", @ANYRES16, @ANYBLOB="0500000000000000000001000000b00408805000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050005000000200004000a004e"], 0x51c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x200440c0, 0x1}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/64, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000340), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f0000000600)='\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050300000000000000000700040008000300", @ANYRES32=r10], 0x1c}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newchain={0x6c, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x8, 0xfff1}, {0x1, 0x5}, {0x9, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x48, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x7, 0x10}}, @TCA_RATE={0x6, 0x5, {0x81}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_CHAIN={0x8, 0xb, 0xde}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd2d506830dc3190e}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x54, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {}, @device_b}, @vht_group_id={0x15, 0x1, {0x0, "5584d2f515d56c029a92908b231c387c"}}}}]}, 0x54}}, 0x0) io_setup(0x6, &(0x7f0000000280)) 3m0.021663368s ago: executing program 8 (id=5495): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) mincore(&(0x7f000056a000/0x4000)=nil, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x1070bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x0, 0x10201}}, 0x20}, 0x1, 0x6000}, 0x0) 2m59.909880132s ago: executing program 8 (id=5496): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) fanotify_mark(r2, 0x105, 0x4800003a, r1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x60) 2m59.909609068s ago: executing program 8 (id=5497): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b031407e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (async) syz_emit_ethernet(0x66, &(0x7f00000013c0)=ANY=[@ANYBLOB="162c8ca53e96e731a5dc97d7ad0eb67ca7ebd376a78db4855cbcc3620d0147bc198fdf7ac4e062131fd1708e06ffe181351716f0374228af6ccfc51a81a3fe882ca18e5d4c15f1866a575460d34a67eec8dd66b2fe0df513d01a99d3f24cb9cd74413fa40e685ee15bc9d46df85e341cbf05c64ca5560a39b9bdc861a956a7e3d9ee74f736fdef06de"], 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x68) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f00000011c0)={0x6, {0x3ff, 0xd4dc, 0x25, 0x3}}) (async) statfs(&(0x7f0000001200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000001280)=""/54) renameat2(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x2) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r6, &(0x7f0000000100)={0x8, {"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", 0x1000}}, 0x1006) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYRESOCT=0x0]) (async) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000001140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0xfea0) (async) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001300)=[@text32={0x20, &(0x7f00000012c0)="2c0066baa100ec64660ffaebc4c15554530066baf80cb82a2c9c8eef66bafc0c66ed0f07c4e3d15dfc1566b8af000f00d00f013c610f23f4", 0x38}], 0x1, 0x1, &(0x7f0000001340)=[@cr0={0x0, 0x10004}], 0x1) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 2m59.841829585s ago: executing program 8 (id=5498): keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'caif0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x94, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x120f0}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xca, 0xffffff00}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xc}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x94}, 0x1, 0xba01}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_getnetconf={0x24, 0x52, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x101}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x2}]}, 0x24}}, 0x20448c0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f0000000280)={[{@none}]}) r10 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x5, 0xbe, 0x7bcd, "42e68f43b8d0"}}) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00611400000000fdffffff0a00b600", @ANYBLOB="3145679c47"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m59.751436818s ago: executing program 8 (id=5499): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000778600000000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100000000000000000f00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500766574683000000000000000000000000c002b8008000100", @ANYRES32=r2], 0x40}}, 0x0) 2m59.541657344s ago: executing program 8 (id=5500): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0xc010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0x10000, [], 0xd, "6342944fca41b7"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd, "6342944fca41b7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000001c0)={{r3, 0x2, 0x5, 0xfff, 0xf, 0xfffffffffffffffd, 0x100, 0x2, 0x2, 0x4, 0xffffffff, 0x7, 0x2, 0x3eb, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}], 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x90) 2m59.53090273s ago: executing program 38 (id=5500): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0xc010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0x10000, [], 0xd, "6342944fca41b7"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd, "6342944fca41b7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000001c0)={{r3, 0x2, 0x5, 0xfff, 0xf, 0xfffffffffffffffd, 0x100, 0x2, 0x2, 0x4, 0xffffffff, 0x7, 0x2, 0x3eb, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}], 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x90) 2m41.47943877s ago: executing program 1 (id=5769): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x7}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x80) ppoll(&(0x7f0000000180)=[{r2, 0x20}, {r3, 0x410}], 0x2, &(0x7f00000001c0), &(0x7f0000000200)={[0x6]}, 0x8) keyctl$clear(0x11, 0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x8010, r2, 0xafe81000) 2m41.408129311s ago: executing program 1 (id=5771): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6609ffffe90000006111a400000000409500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) getpgrp(0xffffffffffffffff) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 2m41.341255344s ago: executing program 1 (id=5774): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1, 0x0, 0x900}, 0x0) 2m41.340892948s ago: executing program 1 (id=5776): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4800}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8008550e, &(0x7f0000000140)={0x1, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r8, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/100, 0x0, 0x64, 0x0, 0x9, 0x0, @void, @value}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000300)={0x3, 'dvmrp0\x00', {0x3}, 0x8}) write$tun(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000040)="69753d86f83f6daa64c5588ce8", 0xd, r0) 2m41.29023608s ago: executing program 1 (id=5778): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m41.108949483s ago: executing program 1 (id=5783): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6609ffffe90000006111a400000000409500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) getpgrp(0xffffffffffffffff) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 2m41.105115962s ago: executing program 39 (id=5783): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6609ffffe90000006111a400000000409500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) getpgrp(0xffffffffffffffff) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 2m21.470991919s ago: executing program 0 (id=6142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "e22c445a5e53f1f7a7f26c7919876dac9bbd8a13fbabc959100cd3bf788f8ee6c5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4881}, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x378, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x74bf}, @device_b, @broadcast, @from_mac=@device_b, {0x5, 0x5}}, @delba={0x3, 0x2, {{0x0, 0x1, 0xa}, 0x11, {0xbd, 0x6, @broadcast}}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x2fe, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac=@broadcast, {0x2, 0x2}, "", @value={0xe, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0xb1, "147cb060496f2d6cbde0c5e16ad93f0c7a996fc7d24f62aef572756e8f260b3da2c897d328877ae40e790b6470d70e122af5b985929a22591105bec39ddf3f88f5d1b9701d95be8dd9dfa625c5487b4c9614088ca536eb24d02283c56a5a5ce1dec26baf788e68997f8218684fa0636aa685f6e15e5cc19cec55dc17cd405499eca8e9a1f8f402fabdb131dd3f3346cbd0a9702eddfe00ff58915c316b1df63f3c748f2ebcd6039f67736062ebfc5de34e"}, {@device_b, @broadcast, 0xdb, "826402e96b760fe46b1291a630dba23e1a06da834a090012a6d00bbedbb3225686448165b4a299a5edfa9cd4d833f2729b301c965c28cdb4b0de178f3d4f6fb2192c6025079665959b8a18e704f51e75dc440d6dbb32ba87491ee49b7a707f74463a2f42fe3378718e2104336e0b3c8c727d9ecaebbcffd4850c6d586e17e1358f2d085fcf47e01828534752f634487238856c8e1594dae86219921281d46941ad4cb042b1914908fdce8315f42c09cf3debf48178c0fbd894e23a6a4865c4b0204b01b187f67f5f76ad2b8efac6fe42f3e74b79a2b2580eecc532"}, {@device_b, @device_a, 0x2e, "9c27686e597475ab73055036e80e6fbf61065e230c3c2ca797d90593eb539b313cb661b3807d9661d89370a7d417"}, {@device_b, @broadcast, 0x4f, "2070c1828e5f4cd3ab6c8389ba6273c6ed2f528a4522d39c02fe915869064897171e5b98dfc20c9cd209501cf6849dff5f724796b6991a2350f10374a8e363d48db807959807343318d12f88aeb81b"}, {@device_a, @device_a, 0x88, "cd6066d57071340f6eeb0f37216ca15602d415d47db672f0c682fe9239ba40de6780fbbfd1ef5e73303967a249bc863ef736cf74844540c5a2b77c73d28126b90ef6349977954273ca4497ad6a2d75241b6b89157767f2ddc67c6b7e335d69ef07e6061537abd13d71ed3f942fc50d15f7ce8d72a0a2e4148d61209c05ed093c40919896e296ec41"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x5}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x378}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x38}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x40000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x208, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x3b}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x100}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x58}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9b}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6a}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7f}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x23}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xf}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_SETUP={0x144, 0x70, [@NL80211_MESH_SETUP_IE={0xba, 0x3, "abc105725e9cd3e49b3470a837c80bb8da6bb0c4b2217f9e0276ab3d7e032e7eb26277618c9b9c8018e528a25ddcb0a5ea9b3d02e2034a228748c52824cd8c8ac5857b27fab93cd0d9736c282e4c11954bc16a476b69e30541f06066506715125258325d368f1fe7e90116f3e348014ed4955392866182519e107aaae3fd638ff59e4e1651dd7dc5d55320a27af187407833913f184a63912942a56ce0092752dfc55e416201088797553449d0800c27fbd947a395ce"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x74, 0x3, "fe545b41d94f24916b08ca32437a919958e9ad0b2efcba3eaf33de27aa6ff8b4fc6e45b3b09e968bdb904df6494033c39f3eb338b0f1810fade51ce98dd3bac686dfba0c6e9aad5a2acfdbf751ecbf124cde109a544510562f335ec2f3d540c2d3c9f0327ed59d4693f7b9c688ccd5c3"}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040041) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x674}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x891) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000c00) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000d00), 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000d40)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xf8, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x286}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa0}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x177}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f40), 0x402001, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000000f80)) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xb}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48805}, 0x80) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000001200)=@gcm_256={{0xd36fb1ec62f2da35}, "dda105962747bcae", "e8727b98a262c274650c66be816b7d6db496d1ca75f00fed7b525c700856a5ba", "f7aa9bb1", "0a25288132953529"}, 0x38) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x38, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x2}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20048044) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000010) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) bind$tipc(r10, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4800) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m21.378756857s ago: executing program 0 (id=6143): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac00ff00", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x4) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000001240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001200), 0x113}}, 0x20) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x7f, 0x8}}) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09110000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000002"], 0x64}}, 0x0) (async) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2200020}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x84, r8, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x14a00}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf0000000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xab73}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40844}, 0x4000000) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@getqdisc={0x2c, 0x26, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff1, 0xc}, {0xb, 0x8}}, [{0x4}, {0x4}]}, 0xfd78}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r12, &(0x7f0000002140)=""/17, 0x11, 0x0) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r11) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01050000000000000000210000000c00018008000100", @ANYRES32=r1, @ANYBLOB], 0x20}}, 0x0) 2m21.377185382s ago: executing program 0 (id=6144): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x0, 0x0, 0xa, 0x1ff, 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) (async) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) close(r5) (async) r6 = dup(r4) setsockopt$inet_opts(r6, 0x0, 0x22, &(0x7f0000000040)="fd", 0x1) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000240)={0x2, r3, 0x0, 0x7fffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2b, 'net'}, {0x2b, 'pids'}, {0x2b, 'perf_event'}, {0x2d, 'cpu'}, {0x2d, 'cpuset'}, {0x2d, 'net'}]}, 0x3a) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="345ce823", @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf251c00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001080)={0x1450, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x554, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}]}, {0x45c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x5, 0x16, 0x48, 0x60, 0x24, 0x18, 0x48, 0xd1278ec59987b8af, 0x48, 0x6, 0x9, 0xb, 0x9, 0x4, 0x48, 0x12, 0x4, 0x48, 0x6, 0x2, 0xe9d885d6f017e54a, 0x12, 0x30, 0xc, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x48, 0xc42c5fa29992df72, 0x1, 0x1, 0x36, 0x6, 0x9, 0x12, 0x4, 0x36, 0x48, 0x12, 0x0, 0x16, 0x48, 0x48, 0x36, 0x2, 0x1, 0x3]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x5}, {0x5, 0x4}, {0x6, 0x9}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0xa}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0xa}, {0x5}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x6}, {0x6, 0x6}, {0x6}, {0x6, 0x2}, {0x1, 0x8}, {0x6, 0x8}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x7, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x5}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x5}, {0x7, 0x3}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x3}, {0x4, 0xa}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x2, 0x1, 0x0, 0x36, 0x36, 0x60, 0xc, 0x16, 0x9, 0x1, 0x4, 0x36, 0x24, 0x1b, 0x6c, 0x5, 0x9, 0x60, 0x36, 0x12, 0x1, 0x0, 0xb, 0x2, 0x9, 0x5, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x4, 0x9, 0x3, 0xffff, 0xfffd, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x48, 0x6, 0x2, 0x0, 0x80, 0x3ff, 0xff]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x5, 0x12, 0x36, 0x9, 0x1, 0x30, 0x30, 0x0, 0x1, 0x16, 0x24, 0x48, 0x36, 0xb, 0x9, 0x9, 0x4, 0x18, 0x44, 0x16, 0x30, 0xc, 0x9, 0x6, 0x4, 0x2, 0x6, 0x1e, 0x3, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0xb, 0x80, 0x4, 0x3, 0x401, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc017, 0xa5f6, 0xff, 0x3, 0xffff, 0x7, 0x8, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xa63c, 0x0, 0x500, 0x7ff, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x800, 0xf5, 0x2, 0x0, 0x6, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x3}, {0x5, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x1}, {0x7, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x5, 0x8}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x6}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x8}, {0x1}, {0x6, 0x8}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x0, 0x6c, 0x18, 0x12, 0x6, 0x0, 0x2, 0x12, 0x36, 0x4e, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x26c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x372c, 0xff81, 0x3, 0x6, 0x5038, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb, 0x2, 0x3, 0x6, 0x8, 0x0, 0x3b3]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x7}, {0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x5, 0x2000, 0x6, 0xfc, 0xc, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0xc, 0x3, 0x4, 0x64, 0xb, 0x30, 0x30, 0x18, 0x4, 0x30, 0x2, 0xb, 0x48]}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x5, 0x4}, {0x2, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x5}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0x6}, {0x3}, {0x2, 0x9}, {0x3}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x2, 0x3}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x3, 0x5}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x2, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x1, 0x9, 0x9, 0x60, 0x48, 0x18, 0x3, 0x5f7a9c4a27307186, 0x9, 0x36, 0x1, 0x3, 0x2b, 0x5, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x5, 0x6, 0x10, 0x48, 0x4, 0x16, 0x24, 0x1, 0x6, 0x18, 0x6c, 0x1, 0x60, 0x30, 0x48, 0x60, 0x3, 0x2, 0x6, 0x3, 0x1, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff7, 0x3ff, 0x2, 0x0, 0x4, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6e3, 0x4, 0x5, 0xcba1, 0x70, 0x2, 0x400, 0x10]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x4}, {}, {0x5, 0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x6}, {0x4, 0xa}, {0x7, 0x4}, {0x2}, {0x0, 0x8}, {}, {0x3, 0x4}, {0x3, 0x4}, {0x6, 0x1}, {0x3, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x6, 0x6, 0xf, 0xb, 0x36, 0x9, 0x36, 0x6c, 0x48, 0x1, 0x0, 0x5, 0xb, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1e85, 0x6, 0x5, 0xa56f, 0x6, 0x1ff, 0xd81, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ce9, 0x4, 0x8, 0x67, 0x2d4, 0x7000, 0x6, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x4}, {0x1, 0x7}, {0x7, 0xa}, {}, {0x0, 0x9}, {0x2}, {0x7, 0x2}, {}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x3, 0x2}, {0x2, 0x7}, {0x3, 0x5}, {0x5}, {0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x1}, {0x6, 0x6}, {0x4}, {0x4, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x6}, {0x4, 0xa}, {0x6, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x8}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x6, 0x11}, {0x7, 0x5}, {0x2, 0xa}, {0x2}, {0x3, 0x2}, {0x6, 0x2}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x7, 0xa}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x9}, {0x3, 0x1}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x9, 0x12, 0x24, 0x5, 0x1b, 0x60, 0x32, 0x3, 0x980bbedf80571181, 0x18, 0x3, 0x9, 0x1b, 0x36, 0x6c]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x16, 0x30, 0x5, 0x1, 0x2, 0x18, 0x5, 0x36, 0x1, 0xb]}]}]}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x17}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x6, 0xc]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x6}, {0x5, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0xa}, {}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x0, 0x6, 0x5, 0x5, 0x8000, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x3, 0x6, 0x3, 0x0, 0x3, 0x4, 0xff7d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc68, 0xfff8, 0x8, 0x10, 0xed, 0x5, 0xfff, 0x32]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xe, 0x7, 0x1000, 0x7fc, 0x7, 0x101, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe0}]}]}, @NL80211_ATTR_TID_CONFIG={0x160, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xf, 0x200, 0x0, 0x2, 0x8, 0x8000, 0x5]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0xa}, {0x7}, {0x6, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x6}, {}, {0x5, 0x9}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x3}, {0x6, 0x6}, {0x6, 0x9}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0x1}, {0x3, 0x7}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8001, 0x200, 0x7, 0x1, 0x7fff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x0, 0xf616, 0x6, 0x6, 0x42, 0x2]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x6, 0x1, 0x7, 0xa, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}]}]}, @NL80211_ATTR_TID_CONFIG={0x58c, 0x11d, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xb2e4, 0x4, 0x400, 0xfff, 0x1, 0x800, 0x6]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x6}, {0x4}, {0x5, 0x8}, {0x7, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x5, 0x6}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x7}, {0x3, 0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x6}, {0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x1, 0x2}, {0x1, 0x7}, {}, {0x5, 0x7}, {0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x3}, {0x4, 0x8}, {0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x5, 0x9, 0x4a, 0x5, 0xa9, 0xfffd]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x9}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x6, 0x4}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x2}, {0x7, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x2, 0x2}, {0x7, 0x8}, {0x5, 0x1}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x6}, {0x3}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x8}, {0x2, 0x8}, {0x2, 0xa}, {0x2, 0x4}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x3, 0x2}, {0x3}, {0x5}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1, 0xee7f, 0x6, 0xc36, 0xd4a0, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x6, 0x9, 0x26, 0x3, 0x1b, 0x48, 0x18, 0x60, 0x2, 0x1b, 0x6, 0x1b, 0x1, 0x3, 0x3, 0x1]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x2}, {0x2, 0x4}, {0x7, 0x2}, {0x7, 0x2}, {0x6}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0x2}, {}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x7}, {0x6}, {}, {0x6, 0x2}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x6}, {0x1, 0x3}, {0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x4}, {0x4, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x4, 0xa}, {}, {0x1, 0x9}, {}, {0x2, 0x6}, {0x6}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1d, 0x6c, 0x1, 0x9, 0x4, 0x48, 0xc, 0x48, 0x2, 0xc, 0x6c, 0x16, 0x36, 0x3, 0x1, 0x68, 0x48, 0x30, 0x6, 0x12, 0xb, 0x2, 0x18]}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x380, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x8000, 0x2, 0xb7c, 0x3, 0xffff, 0xfffc, 0x9]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x1, 0x6, 0x18, 0x18, 0x6c, 0xb, 0x5, 0x36, 0x3, 0x5, 0x17, 0x18, 0x12, 0x6c, 0x24, 0x30, 0x6c, 0x1, 0xc, 0x48, 0x24, 0x30, 0x4, 0x24, 0x48, 0x48, 0x4, 0x48, 0x4d]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x12, 0x12, 0x24, 0x30, 0x12, 0x3d, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x1, 0xff, 0x8, 0x101, 0x4, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0xa}, {0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0x6}, {0x5, 0x8}, {0x3, 0x8}, {0x3, 0x6}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x6, 0x8}, {0x4, 0xa}, {0x4}, {0x1, 0x3}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x5}]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x1, 0x6c, 0x16, 0x6c, 0x0, 0x1b, 0x1, 0x1b, 0x1b, 0x9, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x7, 0x5}, {0x3, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x6, 0xa}, {0x2, 0x5}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x2, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x7, 0x9}, {0x6, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x5}, {}, {0x3, 0x6}, {0x4, 0x6}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6a5, 0x3, 0x7fff, 0x8, 0x400, 0x3, 0xfff7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x2, 0x6c, 0xb, 0x12, 0x2, 0x16, 0x6, 0x9, 0x48, 0x30, 0x26, 0x4, 0x18, 0x30, 0x5, 0x1b, 0xc, 0x1, 0x1f, 0x60, 0x1b, 0x48]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x7}, {0x3, 0x1}, {0x7, 0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x5, 0x2}, {0x1}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x18}, {0x3, 0x9}, {0x6, 0x7}, {}, {0x5, 0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x5, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x8741, 0x7f, 0x3, 0x9, 0x8001, 0x0, 0x4]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x4}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x4}, {0x5, 0x9}, {0x1, 0x7}, {0x1, 0x2}, {0x6, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x7, 0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x9}, {0x7, 0x3}, {0x4, 0x3}, {}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x2, 0x9}, {0x5, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x0, 0x1}, {}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0xa}, {0x7, 0x6}, {0x3, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x3}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x4, 0x8, 0x1, 0xf22a, 0x6, 0x4, 0x8]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x5}, {0x6, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x4}, {0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x5}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {}, {0x6, 0x1}, {0x6, 0x7}, {0x5, 0xa}, {0x6, 0x3}, {0x6, 0x4}, {0x6, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x7}, {0x5, 0x7}, {0x7, 0x5}, {0x3, 0x9}, {0x1, 0x3}, {}, {0x6, 0x2}, {0x1, 0x9}, {0x5, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x9}, {0x7, 0x4}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x7, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x7, 0xa}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x7}, {0x5, 0x4}, {}, {0x3, 0x9}, {0x4, 0x3}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x3}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0xc, 0x27, 0x4, 0x36, 0x16, 0x1, 0x3, 0xc, 0x30, 0x9, 0x3, 0x62, 0x6c, 0x12, 0x1a, 0x6c]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x2}, {0x4, 0x5}, {0x1, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0x5}, {0x4, 0x4}, {0x2, 0x1}, {0x6, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4}, {0x3, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x5, 0x6, 0x9, 0x5a, 0x3, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xa55, 0x8000, 0x1, 0xd, 0xe, 0x1000, 0xcc2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x2}, {0x3, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0xd}, {0x7, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x0, 0x6c, 0x2, 0x6, 0x4, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x16, 0x24, 0x0, 0xc, 0xb, 0x6c, 0x4, 0x36, 0x12, 0x2, 0x2, 0x1, 0x6, 0x9, 0x6, 0xe169fab30a55497, 0x12, 0x1b, 0x16, 0x36, 0x12, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xa8, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2d0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x80, 0x80, 0xff, 0x4, 0x4, 0x3022]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0xc, 0x1, 0xc]}]}, @NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x7, 0x3}, {0x0, 0x7}, {0x0, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x4}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x3, 0xa}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0x3}, {0x7, 0x9}, {0x5, 0xa}, {0x5, 0x6}, {0x4, 0x8}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x5, 0x3}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x6}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0xfff4, 0x3, 0x1, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x2}, {0x5, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x6}, {0x0, 0x1}, {0x2}, {0x4, 0x6}, {0x5, 0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x5}, {0x5, 0xa}, {0x4}, {0x3, 0x8}, {0x2, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x4}, {0x6}, {}, {0x2, 0x6}, {}, {0x2, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x6}, {0x2, 0xa}, {0x5, 0x1}, {0x4, 0x9}, {}, {}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x7}, {0x7, 0xa}, {0x0, 0x6}, {0x2, 0x6}, {0x5, 0x8}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x36, 0x30, 0x2, 0x24, 0x6, 0x18, 0x9, 0x60, 0x9, 0x16, 0x4, 0xb, 0x16, 0x6, 0xc, 0x12, 0x60, 0x6c, 0x36, 0x0, 0xb]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x9}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0xb}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x2, 0x2}, {0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x4}, {0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x7}, {0x5}, {0x1, 0x9}, {0x2}, {0x7, 0x2}, {0x0, 0x5}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x3, 0x1}, {0x7, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x9}, {0x5}, {0x1, 0x3}, {0x6, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7f, 0x8, 0x1, 0x7, 0x8, 0x7, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffa, 0x8, 0x6, 0xd03, 0x10, 0xa, 0x8]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x1ff, 0x40, 0x1, 0x5, 0xfffd, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb1a, 0x3, 0x4, 0xff, 0x2, 0x0, 0xff01, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f1a, 0x3ff, 0x5, 0x0, 0x1, 0x3, 0x3, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x6, 0x3, 0x48, 0x5, 0x24, 0xc, 0x60, 0x48, 0xc, 0x48, 0x18, 0x36, 0x30, 0xb, 0x12, 0x24, 0x3, 0x3, 0xc, 0x48, 0x6, 0x3, 0x1, 0x6, 0x18, 0xc, 0x60, 0x18, 0x16, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x7ff, 0x800, 0x200, 0xc, 0xb, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x6, 0x60, 0xf, 0x36, 0x21, 0x6c, 0x5, 0x1, 0x30, 0x60, 0x1e, 0xb, 0x3, 0x12, 0x36, 0x3, 0x1b, 0xc, 0x3, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xd3b, 0x2, 0x8, 0x7, 0x1, 0x7, 0xa31]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x81, 0x2, 0xfffd, 0x3, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x45}]}]}, @NL80211_ATTR_TID_CONFIG={0x3a0, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0x89a0, 0x4, 0x3, 0x100, 0xfe8, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x1, 0x5, 0x7, 0xd6, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0xc9, 0x7, 0x3, 0xfff2, 0xfff8, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x8}, {0x4, 0x4}, {0x4, 0x9}, {0x5, 0x6}, {0x3, 0x4}, {0x6, 0x1}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x5}, {0x6, 0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x8}, {}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x5}, {0x6}, {0x7, 0x6}, {0x1, 0x5}, {0x7, 0x4}, {0x2}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x8}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x6c, 0x60, 0x6, 0xc, 0x24, 0x1, 0x9, 0x24]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0xc, 0x9, 0x9, 0xb, 0xc, 0x60, 0x6, 0x48, 0x48, 0x18, 0x12, 0xc, 0x36, 0x6, 0x6c, 0x36, 0x9, 0x2, 0xc, 0x5, 0x6c, 0x60, 0x5, 0x36, 0x5b, 0x6c, 0x3, 0x24, 0x1b, 0x6, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x97bb01176768312b}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff0, 0xe, 0x101, 0x280, 0xc1c, 0x3, 0x8, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x4, 0x9, 0xd, 0x7fff, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x3}, {0x6, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x4, 0xa}, {}, {0x7, 0xa}, {0x2, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x2}, {0x6, 0x9}, {0x5, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x5, 0x7}, {0x3, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0xa}, {}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x5}, {0x1, 0x4}, {0x1}, {0x7, 0x3}, {}, {0x0, 0x8}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x84c, 0x5, 0x327, 0xffff, 0x3, 0x8, 0xf, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x0, 0x48, 0x2, 0x18, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xe88505ab4787c672, 0xc, 0x12, 0x60, 0x60, 0x6c, 0x9, 0x51, 0x48, 0x1, 0x16, 0x12, 0x60, 0xb, 0x60, 0x9, 0x0, 0x1, 0x9, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x57e, 0x5, 0x6, 0x1, 0x2, 0x40, 0xa, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0xb, 0x6, 0x6, 0x3, 0x60, 0x6, 0x9, 0x4, 0x2, 0x4, 0x1b, 0x4, 0x30, 0x60, 0x36, 0x4, 0x36, 0x6, 0xc, 0x3, 0x34, 0x4, 0x15]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0x9}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0x7}, {0x4}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x6}, {0x4, 0x7}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x3, 0x2}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x4}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x2, 0x6}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x3}, {0x5, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0xa}, {0x5, 0x8}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 2m21.070871051s ago: executing program 0 (id=6149): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000380)="66b91a0100000f320f24b800008ec036660fef90860066b9aa0900000f32660ff2cd0fac500077f2deefb8ca088ec8b803008ee0", 0x34}], 0xaaaadbc, 0x8, 0x0, 0xfffffffffffffc5f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffd6e) readv(r5, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m20.160996844s ago: executing program 0 (id=6162): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 2m19.861218479s ago: executing program 0 (id=6166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e000100000000000000000002000000", @ANYRES32=r0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r8, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x440, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0x28, 0x5, 0xa0, 0xe, {0x4e20, 0x4e24, [0x3, 0x9, 0x9, 0x7c], [0xce3, 0x1, 0x4, 0x1bddc0ff], r9, [0xa9, 0x28]}, 0x0, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "d3d28634fd11d245ba6788e869692367a3c790c981bb19ece0a2b6ee68a4e991bf1b9fe9abd03ac49fa098c2ab39c64bfdf0b6d6613d369ed4715416d2e8e3c07ce69d7f7efa1d20b93111a93ae4c2475748af54f748710c8a2840464fe6c407737bc01ea2bed9aa4a555d6275e03be2b99426039444538d69fdff6f46076fb3bb70e1bb7b33656b6f930a70b875153fab0d7a7f852462e05abb3ee29d9528031058eb376d6b531e4f3c577a5a0aa8cf13a495d2262008bb92679e18dde1f63db5bb197ba6"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "bc68cdb4f56610f3019c431d3e181694c621916508a650ae1e881aa90a6fbf5767cb2edc9615a257e72752c63873ee0be9962da583bfb766957ea83500d194"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "0c71dab4d6140b5cecc624b9c1cc48dacbddb5420dc1c30ac0e0fbd88762b7dc03a4fe185faf8ff68c7ac65fed6b0c49ab60e4af9cc49aefa9b5497f73de3e4a9cbd4226ca12d9ee982bdc18ab1b36d9a548f5f428edec9bb874e180bfd243cde31a683cb1ef0e72b3e28cfe18c44f42e4"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "adc5ab3ee1871fc4125073b2e06c156c0cdd7695c789e3974b933b7f8893b9276aef75c7a20660b4ee60684b6b7bc9b0fd5591bf0342440a752fe6ed7668326377dbbb565ccfe18c0fb43a32b8a13a8df79f1c87daa12d258e128143d50ab577d9163e15ab63d3ec9a9c9431a491bc47e3ed9fb6f238dd57aff7b62404fe95acef635585c61db745cfc71e2b696ad212e4444d836bc36a39"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "523d9ff664dbdc04579e5771b089e7377da3656f6152f74170bdc7b89f3bc0f3b79ed4175d582ea2803a1cedb09e3fcc3e06ee430ccdfca4a3a3111d23f140379c57945620134581cf83daa1351277af41dacc3d6e634a24a96303e88303130cecb3ad124ca53838de0f4c339a6dd77c087b6d"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "e041f8eef231db8936253eef20cfab4b2bef94439077d104c5b1922fbb1789ca6827692186ee2a5574fb53b3f334e37d27c40956ea82bbbcbfcd75db2b9d633f94477f96f5aeeb06a6fc8ba98c3f50b76cd09b8d00c9fa6d95d1955420b3408cd6fdf387cc9f10e4db97"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "ad6b538d894a2507503f56026d63a714f5fa8ae099d2332a6a1a428309eb38775fa075e39bab41909156b58a2bfc6d696044a71fce1102e1881324c6c81d251d07d36a0f876212b9f011c32346ee5c4703f9d453461ce7023fd7820d0d04970414b083f8d8c85443f9445a7adad511caaa4eb756781f38734c9aac3946eaacdc8567a7e79b62c29ce33f28d9ac92a34427baad184a0a9b17f82422689835ef07b57dfe3b14bc43b478ce511b07cbebe225d0388937b864bd9f7e2674af7aeacc984b42d15d38dd39c727dde0b10bf932c00b5b7f95bc5e546a8578b3bcb2bc2851"}]}, 0x440}, 0x1, 0x0, 0x0, 0x40010}, 0x8001) pread64(r5, &(0x7f0000000fc0)=""/177, 0xb1, 0xe0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000080)) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, r4, 0xe1d, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) mkdir(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x181) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000), 0x4) 2m19.854685618s ago: executing program 40 (id=6166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e000100000000000000000002000000", @ANYRES32=r0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r8, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x440, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0x28, 0x5, 0xa0, 0xe, {0x4e20, 0x4e24, [0x3, 0x9, 0x9, 0x7c], [0xce3, 0x1, 0x4, 0x1bddc0ff], r9, [0xa9, 0x28]}, 0x0, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "d3d28634fd11d245ba6788e869692367a3c790c981bb19ece0a2b6ee68a4e991bf1b9fe9abd03ac49fa098c2ab39c64bfdf0b6d6613d369ed4715416d2e8e3c07ce69d7f7efa1d20b93111a93ae4c2475748af54f748710c8a2840464fe6c407737bc01ea2bed9aa4a555d6275e03be2b99426039444538d69fdff6f46076fb3bb70e1bb7b33656b6f930a70b875153fab0d7a7f852462e05abb3ee29d9528031058eb376d6b531e4f3c577a5a0aa8cf13a495d2262008bb92679e18dde1f63db5bb197ba6"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "bc68cdb4f56610f3019c431d3e181694c621916508a650ae1e881aa90a6fbf5767cb2edc9615a257e72752c63873ee0be9962da583bfb766957ea83500d194"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "0c71dab4d6140b5cecc624b9c1cc48dacbddb5420dc1c30ac0e0fbd88762b7dc03a4fe185faf8ff68c7ac65fed6b0c49ab60e4af9cc49aefa9b5497f73de3e4a9cbd4226ca12d9ee982bdc18ab1b36d9a548f5f428edec9bb874e180bfd243cde31a683cb1ef0e72b3e28cfe18c44f42e4"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "adc5ab3ee1871fc4125073b2e06c156c0cdd7695c789e3974b933b7f8893b9276aef75c7a20660b4ee60684b6b7bc9b0fd5591bf0342440a752fe6ed7668326377dbbb565ccfe18c0fb43a32b8a13a8df79f1c87daa12d258e128143d50ab577d9163e15ab63d3ec9a9c9431a491bc47e3ed9fb6f238dd57aff7b62404fe95acef635585c61db745cfc71e2b696ad212e4444d836bc36a39"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "523d9ff664dbdc04579e5771b089e7377da3656f6152f74170bdc7b89f3bc0f3b79ed4175d582ea2803a1cedb09e3fcc3e06ee430ccdfca4a3a3111d23f140379c57945620134581cf83daa1351277af41dacc3d6e634a24a96303e88303130cecb3ad124ca53838de0f4c339a6dd77c087b6d"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "e041f8eef231db8936253eef20cfab4b2bef94439077d104c5b1922fbb1789ca6827692186ee2a5574fb53b3f334e37d27c40956ea82bbbcbfcd75db2b9d633f94477f96f5aeeb06a6fc8ba98c3f50b76cd09b8d00c9fa6d95d1955420b3408cd6fdf387cc9f10e4db97"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "ad6b538d894a2507503f56026d63a714f5fa8ae099d2332a6a1a428309eb38775fa075e39bab41909156b58a2bfc6d696044a71fce1102e1881324c6c81d251d07d36a0f876212b9f011c32346ee5c4703f9d453461ce7023fd7820d0d04970414b083f8d8c85443f9445a7adad511caaa4eb756781f38734c9aac3946eaacdc8567a7e79b62c29ce33f28d9ac92a34427baad184a0a9b17f82422689835ef07b57dfe3b14bc43b478ce511b07cbebe225d0388937b864bd9f7e2674af7aeacc984b42d15d38dd39c727dde0b10bf932c00b5b7f95bc5e546a8578b3bcb2bc2851"}]}, 0x440}, 0x1, 0x0, 0x0, 0x40010}, 0x8001) pread64(r5, &(0x7f0000000fc0)=""/177, 0xb1, 0xe0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000080)) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, r4, 0xe1d, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) mkdir(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x181) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000), 0x4) 2m2.672307528s ago: executing program 3 (id=6315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000400000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000f60003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700500007442cbb642a39a6a8560bdc3f85c5a6073026d03e7544b998fbaa78ad39feb6576a02176e09f0bb6196d4a3573df76df94771d06619be28305346a0b8f8f202c3afa28d73a5adbc882338ec7ab88ba9c5c5b055749515bf3b3ef66485400c7705eac2b62f164e9056a5514083841b94a8785c0c7e4201f3ec117cac4dae80d29a7a0053344b8ba0d2969bc02230cfd122fbfb7532fc45df768aef314ad779c48f56d2e79c4ca6ceb899daf62167b000004010500ac141420000000000000000000000000000004d43c0000000b000000ff0100000000000000000000000000010735000000040200ff0000000900000006000000ac1e0101000000000000000000000000000004d4330000000a000000fc0200000000000000000000000000010635000003010000030000000100000040000000e0000001000000000000000000000000000004d32b000000020000000a010100000000000000000000000000000000000200a400050000001100000053a4000064010101000000000000000000000000000004d66c0000000a000000640101010000000000000000deffffff043500000402a4009f0a0000f8ffffffc5710000080016000700000008001e00f6ffffff0c00080008"], 0x428}}, 0x0) 2m2.501503566s ago: executing program 3 (id=6316): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800) 2m2.311153627s ago: executing program 3 (id=6318): r0 = syz_io_uring_setup(0x11e, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x89, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0xc, 0x39, 0x0, 0x0}) 2m2.251490806s ago: executing program 3 (id=6319): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x22, 0x2, 0x24) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0xa8000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x6) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000000)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.168558609s ago: executing program 3 (id=6320): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000410007010000000000000000017c0000080002"], 0x1c}, 0x1, 0xf000}, 0x0) 2m0.391809013s ago: executing program 3 (id=6325): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003b000701000000000000000004"], 0x34}, 0x1, 0x0, 0x7a00}, 0x0) 2m0.37675254s ago: executing program 41 (id=6325): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003b000701000000000000000004"], 0x34}, 0x1, 0x0, 0x7a00}, 0x0) 2.129138491s ago: executing program 6 (id=7830): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', './file0', [{}, {0x20, '/dev/hpet\x00'}, {0x20, 'blkio.bfq.io_serviced\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/hpet\x00'}, {0x20, 'blkio.bfq.io_serviced\x00'}, {0x20, '\x00'}, {0x20, '-'}]}, 0x5e) r1 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000b40)={0x5, 0x0, 0x1, 0x0}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x40010, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0xa, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000180)={0x9, [0x101, 0xc4, 0x1, 0x3, 0xfff8, 0x800, 0x55, 0x0, 0x30]}, &(0x7f00000001c0)=0x16) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d1c, &(0x7f0000000100)=0x12) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x98403, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r8, 0x800c5011, &(0x7f0000000080)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r9 = socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@can_newroute={0x1c, 0x18, 0x401, 0xffffffff, 0x25dfdbfe, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0xf0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000002a00)="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", 0x5f9}]}, 0x20000021) 1.939415599s ago: executing program 9 (id=7833): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x8]}, 0x8) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28040004}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000580)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f7f}, @broadcast, @device_a, @from_mac=@broadcast, {0x6, 0x5}}, 0xffff, 0x1, 0x19, @val={0x10, 0x1, 0xca}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x4c}}, 0x0) 1.79389625s ago: executing program 9 (id=7834): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="e5", 0x1}, {&(0x7f0000000380)="f56e083b2ed241eb727c6ef5298126c2", 0x10}], 0x2, 0x0, 0x0, 0x40884}}], 0x1, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010b92000000000000000800000018000480"], 0x2c}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180200009b83289f77b0009e8a7d92fe4de496e0014c7805cc1555768eb9bd4a97a8371b65752e02e2adfccb3156e7e5b03a199776100fbcdcce9bfbee3c7fe966fb8261eee2da99d16c77f33c095f68bca203a6dc8199d2d12c295a3d524fc8453564eb4c1a59e7106a4c80b1e7871d45629c9d9654683798b3b446f0a2a5d5b17e10ef028fa722cfe39b36906c4db488b78c2dfb9d0059943f6163355c89395bf870c1b86b4c18e6a8928db2cc225436dada500ebfb6417b2e48484a67b75bf03185dd721f45b71fd006795176ecec14368b95909b368a73334157994bac8060c0", @ANYRES16=r3, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x894}, 0x8000) 1.598270067s ago: executing program 9 (id=7835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0xa888) 1.488606085s ago: executing program 9 (id=7836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000380)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0xe2, 0x0, &(0x7f0000000040)="a4", 0x0, 0x0, 0x73}, 0x48) 1.380026395s ago: executing program 9 (id=7837): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="34655980be953ea0c2faad470b23e9334bfd815e758b79aaf0467d37be2c59cf926f7137f7215713e87f1cb112eb0d5b2b78be1b3ac07d37872e6ef248f166b1e50396ab5208b0e934606f3ebdee40a89de87fa3a561ff07000000000000e898322cdd638c98ab6772"], 0x8) 1.244896187s ago: executing program 6 (id=7839): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000778600000000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100000000000000000000600000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500766574683000000000000000000000000c002b8008000100", @ANYRES32=r2], 0x40}}, 0x0) 1.14890833s ago: executing program 9 (id=7840): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, ':\x00@/\xe0'}, {}], 0xa, "ea91cc82b3048c7df9589ba55ee4b1fe95d421b7abd8b868f89e66167b427dbe1e1a3c1e7d9f3acb1faaae13810810de951f007e41056ed8653e03c0a5d78ade1da39bd3ca4981cdb281bd28b8674de3b34cfd4385a704e03ee8adac6d5b143ca38bb5b214485fd276bd5b2e8accf8422aa32701710ad2a3768bdccbfa855dad36357259760e5102329fa0fa5bbd1d621390c5f965e94b41921b485a0246ae342913b13750bb96ff4bbe39f96c7d82e5a63dc238c62e5636d4ab6072d5401535d7cd977b3026944f0de5bd55e8384e61273fbb0bba0b02f2cdd1722c05046bad96599f73"}, 0xf6) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="22822c330c6dee5b301cc995359764f832227f58adf3b3bef43705d1aa2f02832225067b8b89048f6b13879a883f7e3dbb4629a3b18465ea5cc8da42368d0d33230ab59157d932a67a3531d66edb4ffbd21bd00ddca6c0bccd5eddfc13463f05a9dfcc6e7b847cf3bed3a4295f4be094b1d20c86bd08f4a5cebe9969369b0e8190d30b44a638e3dba2c4a9f848a4789b03600467d76e809cc369cfd14a8a770a5b49c9c1d4b913", 0xa7}, {&(0x7f0000000200)="ad6610c4a2f272a3c704be65d5818ccc84a77a7c673c4e70d4e79f311dec68b759d87cf910d5f695abd0661bd9f19dc8575ff66c5e12cafe4e7307ccbad0073d7d3a607a83978047f2fa3d3626b4f9fb4f19b4ca0558485bd5c31982fd63b0b84bbd9d46258220b916ae6807ae5fcbca2782d840b1558fec23c152d9d9ade966f59eb10a1f7174ab1ecd368945c95dd78d341ce520ebbf1f501710b8fff6eab7249134a58837d8e7ad0c4dd409fbeb4c184443b3817c36d2836d80783b", 0xbd}, {&(0x7f00000002c0)="3ec033baa1d3e9937099f12f890970b82b40cfbd30929347a72d3e69e0ad0dc65cff80b1de8b40afee486324d81ea6c26f570ccaac887a988005e61874ef7429a7d391ef6201e978ec64959f029524a0", 0x50}], 0x3, 0x4, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002400), 0x10000, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000002440)=0x973, 0x6, 0x4) write$nbd(r4, &(0x7f0000002480)={0x67446698, 0x1, 0x2, 0x0, 0x3, "f64cb2f499436dd29ceadad8f19448bb2aa9ff6122e98b985679f08bbb62ae63a97e8eaeff4dabb9051bb9793c2f3a18b5e14edca7acb39fb62a316133372f182721e9f0353dc4f8f00ffb22f5bef41cf753b4804efbebd8bdea59b2a3543d76e808928d8de50196f640452295cb5353d798dd335bc57ea44aa65caca6d5414d5225bb19d1f40be1b5e768e91192c168c9ca9eb66f5edcc2e2acaecc3ceadb98fb33eace626a684f8437a2c27c8e1d4168d7bd5980a3c9691d8810415373e91564e59ebfa2fb4d0589c30879e0d5c9ca80a0eee1d7aeaa44c198951dc924ab3e7a339114dbf35f2461590db91856a54bbcd5f27dc7dfba3e13985cf4"}, 0x10c) mkdir(&(0x7f00000025c0)='./file0\x00', 0x4) write$FUSE_BMAP(r4, &(0x7f0000002600)={0x18, 0x0, r2, {0x1}}, 0x18) r5 = dup(r1) pipe2(&(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) r8 = syz_open_procfs(r3, &(0x7f0000002680)='net/softnet_stat\x00') r9 = open$dir(&(0x7f00000026c0)='./file0\x00', 0x400000, 0x40) mknodat$loop(r9, &(0x7f0000002700)='./file0\x00', 0x6000, 0x1) read$msr(r7, &(0x7f0000002740)=""/159, 0x9f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000002800)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) sendmsg$key(r10, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002840)={0x2, 0x0, 0xc, 0x7, 0x13, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bb5, 0x10000, {0x6, 0x3c, 0x29, 0x73, 0x0, 0x7, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x6, 0x8, 0x110, 0x0, "2a5ee70e804ef999a73f620326418897666865182b578c7c8acb30719b1a5ba2b814"}, @sadb_address={0x3, 0x6, 0x6c, 0x20, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010102}}]}, 0x98}}, 0x0) ioctl$BLKGETSIZE(r10, 0x1260, &(0x7f0000002980)) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000029c0)={0x10002, 0x6, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002a00)={r4, 0x0, 0x25, 0x10, @void}, 0x10) open_by_handle_at(r11, &(0x7f0000002a40)=@ceph_nfs_confh={0x10, 0x2, {0x6, 0x7}}, 0x8200) r12 = syz_usb_connect$cdc_ncm(0x2, 0x19e, &(0x7f0000002a80)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18c, 0x2, 0x1, 0x7, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "5d9d0d391463"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x71, 0x3c}, {0x6, 0x24, 0x1a, 0xa, 0x2e}, [@dmm={0x7, 0x24, 0x14, 0xaad, 0x70c}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0xb9, 0x24, 0x13, 0x8, "333fe5820295dca8f5868bd273f40cb514412c168de8d487c6ab4f8ffffcbef3244d7689bea366456be9a43a4a867f78073b2af963543a2cadaee48669133666efb48cf4d2db8d7233e0273ce22a2212dc038309d67428aadefc59e9bf9d053f97c8a3e79d1bc1498d5a29541ea81748d6d5202e1bb69df5891d4d91ee0cee60cbd7ea85f14a853eb772ccce0387a0070ef47767faff08bba8307e5d7b27d98e6ce3be238b480a8631883f3e05d066ba6e2337d2b0"}, @mdlm_detail={0x5f, 0x24, 0x13, 0x2, "02713efb06f76aa98ffe0f95d692102e86049be09271cffcc4f77851a3c2d666a2ea748b6154ef25e3c468da28aec1c9f5b6fe2e31e338eab6ca88b41941c646a58ea9ab13fa225b69af7b53ddeeadf8534bc952bfbc704e320778"}, @dmm={0x7, 0x24, 0x14, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x10, 0x7, 0x42}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0xf8, 0x1c}}}}}}}]}}, &(0x7f0000002f40)={0xa, &(0x7f0000002c40)={0xa, 0x6, 0x300, 0x2, 0xff, 0x0, 0x40, 0x8}, 0x24, &(0x7f0000002c80)={0x5, 0xf, 0x24, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x43, 0x4, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x9, 0x2b, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x5, 0xfff8}]}, 0x4, [{0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000002d00)=@string={0x4, 0x3, "2502"}}, {0xc9, &(0x7f0000002d40)=@string={0xc9, 0x3, "e736a5791f6702f01292b90cf692b94da182d92293a0daa2b3bd140eab70947c22345467ea0f62a8b641e156c43f0db78e113de0d7f088507e55cde77165936c917b738f55bbec33a4f635936e1082c8b77dce6f50ccb9f568947cc08a4e80516f8b1f5cd1929cc4ef9bcca8b70895828f457bfda9db1a6b375177abcb93d39cd1e3e0247ee43982d1792684c2182ded535a4961a956d417cc254c928ec3557becf9c3fc6557097b3fbb6ff838e1bae49d61c09c80d96d357f38268eae1e11c865f43d76a4a33d"}}, {0xf0, &(0x7f0000002e40)=@string={0xf0, 0x3, "03c91468c353bdfe35db959a2be942a585bd85a460af19dfa8ae7d30facfc32e51185a22844e9e9882bb4f4b7f827ac46fc3f57c73637957fd649bd963732439b04b69fb66252775ab49852171144a646aebf722ce8ef2c8262505ded6a8aa27be9ea97f2a52b54483eeefab423a2811dd1bbcb75f5a51e8a383c26413b1d344f3cb35ce6e943f3c3d840bb91b65882f1f4a389936e2f8431414de75650963b7d72939c9d32e5e3817b01d5cee84ab0b1bdabf8058d2b888634cb9f073d56f938ae8cfe86940b05296bdf78c6201c78b633a92b00fd3052becbd855eed78860346018bdc990a5b98b79df607bec5"}}]}) syz_usb_disconnect(r12) recvmsg$can_j1939(r4, &(0x7f0000005180)={&(0x7f0000002fc0)=@can, 0x80, &(0x7f0000004140)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/118, 0x76}, {&(0x7f00000040c0)=""/2, 0x2}, {&(0x7f0000004100)=""/10, 0xa}], 0x4, &(0x7f0000004180)=""/4096, 0x1000}, 0x10041) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000051c0), 0x800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r13, 0xc0145401, &(0x7f0000005200)={0x2, 0x0, 0x3, 0x1, 0x3ff}) sendmmsg(r5, &(0x7f0000005540)=[{{&(0x7f0000005240)=@l2tp={0x2, 0x0, @local, 0x3}, 0x80, &(0x7f00000052c0), 0x0, &(0x7f0000005300)=[{0xb0, 0x0, 0x6, "afecfe9ee6efb359dc8eaaed7a52cb29d6d5a46900d2b5a43ab85ba487fcccad1e9526b103863ab9bb1bd7b5ee8129221e716248beb5ec0883c6232713c5122f6502cf5be8760f690f996053d4096ec9a35704ef7c3c79e5b440a752aa2b3159375bfa74bd5b688ca2747bb8767bc682f5478e9581dc4c242ab86a4939bbf65a928d95a47a4778b90926c06a1d4306e30e48e779ad1f1588fbaff548f485f8"}, {0xa0, 0x110, 0x7ff, "2c6502f1bbcaaa0af20305b1b2613ecf5754b6481be4ed586354afb4bdc9a574294b4a4a3ac2c962d9e876c40d0591259937a720dcd3de9ca13745b64c0f70368898ca82868e040dd2be223906fbf042d6274ecc7aae5a9155c6efd4ef8c53a44313de0029641fb0f31b5a532cb1d9f345c7ddc6f06287210d6467f7dd1ae502e1c6f810171288801d"}, {0xe8, 0x10f, 0x3, "49dc100cc7e908a24d06b413d356003a40431e8c1247d06051b31c22b8e8bb410e96223abdead0b922f1c5b20cc590ba8957a5330df33d61d0b7885a2edc842939cc71c85f550aaa5c416887a5273fa265ae675424d21a31426c727a5a901876779830b7621760c5da916cedd45787c04593ab4627280dd7a407880e8a527b78bf11ac95ce9c100c4b19dbc65f137b2df980d21d4dc83cddd458a84cf9dde1e756a9a4e61d8d914f84684c28c077b10ccd31c9e8205517212ce40121ae2e499a02bdb2989677c07b70fc3b7cdf87c4c19a31f4"}], 0x238}}], 0x1, 0x48004) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000005580)={'TPROXY\x00'}, &(0x7f00000055c0)=0x1e) 1.146601762s ago: executing program 6 (id=7842): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x31e, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9a4}}, @generic={0xf3, 0x1, 0x8, 0x8, 0x10001}, @call={0x85, 0x0, 0x0, 0x94}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe}, @jmp={0x5, 0x0, 0x4, 0x8, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x7f, &(0x7f00000002c0)=""/127, 0x41000, 0x2, '\x00', r2, @fallback=0x20, r1, 0x8, &(0x7f0000000380)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x10, 0x9, 0x5}, 0x10, 0x0, r1, 0x1, 0x0, &(0x7f0000000400)=[{0x3, 0x2, 0xf, 0x4}], 0x10, 0x9, @void, @value}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000540)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', r2, r1, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x16, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x0, 0x3, 0x4, 0x4, 0x50, 0xffffffffffffffff}, @alu={0x3, 0x0, 0x6, 0x4, 0x3, 0x4, 0x1}, @jmp={0x5, 0x0, 0x2, 0xb, 0x9, 0xfffffffffffffff4}, @alu={0x7, 0x1, 0xc, 0x8, 0x5, 0x20}, @generic={0x81, 0x0, 0x4, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcec}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000640)='GPL\x00', 0x500, 0x65, &(0x7f0000000680)=""/101, 0x40f00, 0x3a, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xa, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r1, r1, r1, r1, r1, r1, r3], 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000900), 0x80681, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r5, {0xf}}, './file0/../file0\x00'}) mkdir(&(0x7f0000000980)='./file0/../file0\x00', 0x20) r7 = syz_open_dev$vbi(&(0x7f00000009c0), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000a00)={0x3, 0x1af5, @name="aadb7b9cc18f57179056c0f42e7dd67e61681742374eccaaca27059ae03ead03"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000a80)={0x1d, r8}, 0x10) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000bc0)=@multiplanar_mmap={0x1000, 0x0, 0x4, 0x104, 0x4, {r10, r11/1000+60000}, {0x3, 0x1, 0xf, 0x6, 0xed, 0x2, "4c5a3dd8"}, 0x4, 0x1, {&(0x7f0000000b40)=[{0x292, 0x5, {0x2948}, 0x80000001}, {0x1, 0xa, {0xea7b}, 0xfffffff8}]}, 0x9, 0x0, r6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d80)={r6, &(0x7f0000000c40)="ec028c33bf64ef3869a31244499429f66e7334b6a328c4b0f838e1564912f03de655a5db1f2bc78cbcc71baa3fbb7268d3fafcb7d9f31b36e0a08f2d85eeac62eac803b14ee7b64c274c7a77fdd6f5fafdb60cf75a30f6e454829f83bf652aa422a995f61cea873b89ba912fe38f6b7eeb2f76b10e54ca4edd94da2d577e22c3d9deac51234ed54d7d5f0aa23e2345870f0d6bab0eca9681f116e4a3e83393a14a03f49043319ef368f74a6bd46ef64d112b84fc80e03b0539a60744f0960ec6190008ed13fea38993f558f8d483c1263f2714", &(0x7f0000000d40)=@udp6=r6}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@o_path={&(0x7f0000000dc0)='./file0/../file0\x00', 0x0, 0x4000, r7}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) recvmmsg(r1, &(0x7f0000004100)=[{{&(0x7f0000000e80)=@nfc, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/108, 0x6c}, {&(0x7f0000000f80)=""/189, 0xbd}, {&(0x7f0000001040)=""/213, 0xd5}], 0x3}, 0x1}, {{&(0x7f0000001180)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001200)=""/214, 0xd6}, {&(0x7f0000001300)=""/11, 0xb}], 0x2, &(0x7f0000001380)=""/227, 0xe3}, 0x8001}, {{&(0x7f0000001480)=@nfc_llcp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/124, 0x7c}, {&(0x7f0000001580)=""/227, 0xe3}, {&(0x7f0000001680)=""/115, 0x73}, {&(0x7f0000001700)=""/233, 0xe9}, {&(0x7f0000001800)=""/252, 0xfc}, {&(0x7f0000001900)=""/176, 0xb0}, {&(0x7f00000019c0)=""/166, 0xa6}], 0x7, &(0x7f0000001b00)=""/240, 0xf0}, 0x92}, {{&(0x7f0000001c00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c80)=""/5, 0x5}, {&(0x7f0000001cc0)=""/58, 0x3a}, {&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/231, 0xe7}, {&(0x7f0000001ec0)=""/41, 0x29}, {&(0x7f0000001f00)=""/170, 0xaa}], 0x6}, 0x1}, {{&(0x7f0000002040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/211, 0xd3}, {&(0x7f00000021c0)=""/16, 0x10}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/64, 0x40}, {&(0x7f0000003240)=""/187, 0xbb}, {&(0x7f0000003300)=""/105, 0x69}], 0x6, &(0x7f0000003400)=""/221, 0xdd}, 0x5}, {{&(0x7f0000003500)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003580)=""/56, 0x38}, {&(0x7f00000035c0)=""/85, 0x55}, {&(0x7f0000003640)=""/252, 0xfc}, {&(0x7f0000003740)=""/18, 0x12}, {&(0x7f0000003780)=""/234, 0xea}, {&(0x7f0000003880)=""/61, 0x3d}], 0x6}, 0xc76}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/215, 0xd7}], 0x1, &(0x7f0000003a80)=""/190, 0xbe}, 0x2}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/174, 0xae}, {&(0x7f0000003c00)=""/61, 0x3d}], 0x2, &(0x7f0000003c80)=""/115, 0x73}, 0xfffffffc}, {{&(0x7f0000003d00)=@can, 0x80, &(0x7f0000004000)=[{&(0x7f0000003d80)=""/50, 0x32}, {&(0x7f0000003dc0)=""/56, 0x38}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/132, 0x84}, {&(0x7f0000003f00)=""/227, 0xe3}], 0x5, &(0x7f0000004080)=""/105, 0x69}, 0x2}], 0x9, 0x20, &(0x7f0000004340)={0x0, 0x989680}) r12 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004380)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r12, 0x6612) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bebdef3a7f25b0bf4a3c84ef19"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0c3}, 0x40000c0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000044c0)=""/7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004580)={r6, 0x58, &(0x7f0000004500)}, 0x10) 1.04948832s ago: executing program 6 (id=7844): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x2) 908.31622ms ago: executing program 6 (id=7845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000380)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0xe2, 0x0, &(0x7f0000000040)="a4", 0x0, 0x0, 0x84}, 0x48) 905.951851ms ago: executing program 2 (id=7846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) fchmod(0xffffffffffffffff, 0x184) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) 828.769922ms ago: executing program 6 (id=7847): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 828.436997ms ago: executing program 2 (id=7848): r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @loopback, 0xcf}, 0x1c) (async, rerun: 64) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (rerun: 64) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x13) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000002240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x1) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004900010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020004000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, &(0x7f0000000100)=r6, 0x120) creat(&(0x7f0000000140)='./file0\x00', 0x8) (async) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x7}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000000)="89", 0x1}], 0x1}, 0x0) (async) r11 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendto$packet(r11, &(0x7f0000001300)="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", 0x147, 0xc044, &(0x7f00000001c0)={0x11, 0xf7, r12, 0x1, 0x0, 0x6, @local}, 0x14) 827.978875ms ago: executing program 4 (id=7849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) (async) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) ioctl$sock_netdev_private(r3, 0x89f4, &(0x7f0000000000)) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup(r7) (async) r8 = dup(r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58f04"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001"], 0x5c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000008047c0000ec0000000c00018006000600800a0000100002800c00150007"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 689.873148ms ago: executing program 2 (id=7850): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000778600000000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100000000000000000058650000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500766574683000000000000000000000000c002b8008000100", @ANYRES32=r2], 0x40}}, 0x0) 607.163666ms ago: executing program 2 (id=7851): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000514080026bd7000fbbddf250e00000000000000080044cf440d000300"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x40000) 529.007884ms ago: executing program 2 (id=7852): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1ff, 0x8, 0x7, 0x3001, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x3, 0x61348, r5, 0x100, '\x00', r6, r4, 0x0, 0x5, 0x4, 0x5, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) 439.526286ms ago: executing program 4 (id=7853): r0 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) (async, rerun: 32) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) (rerun: 32) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x107002, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000eb00000076070000ad4a8f1e51048554c94e00"]) ioctl$NBD_DISCONNECT(r4, 0xab08) ioctl$NBD_CLEAR_SOCK(r1, 0x125f) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) bind$bt_hci(r10, 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="18b90000", @ANYRES16=r12, @ANYBLOB="010000000000000000000100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) r14 = dup(r8) connect$802154_dgram(r8, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r14, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) sendmsg$inet(r15, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES64=r12, @ANYRESDEC=0x0, @ANYRESHEX=r4, @ANYRESOCT=r7, @ANYBLOB="680c5a1d5536d694c9f9108918b378a6bde8ebcf6738c1b851349b3d86afe96360f2fea7fe9510064d7ce4a000f6718d58e8fcdbfae312a6bc6b158860d96541841d70ceff1b7642f966915ca234247e8424cc7145c75df6ac885b1126166cb263b5294f108b3e428f0f32c4a470f94651052efdda8a17d8a80f8c8a485c20ce749fa8a160448c3a421f32820df280e6502b2b1f12cbbbaa56617fc83ebfa8ed6d4759283a5783210e5b2269bdbe15b2e0c1627735b1e28807bce4bd0eb35e88180f1d5aeefaa3d53ff21f7679231823f0b6e05afb7354ab8514a848dec1a6c50ffbb10a45adf63b188781fec4"], 0x18}, 0x4000) 369.368071ms ago: executing program 2 (id=7854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="f780c800040066b80500000066b9b7928f350f01d9baf80c66b8fc6b468b66efbafc0c66ed660f38829b000066b9800000c00f326635008000000f309a43500e002e0fc77b00b875008ec89b3ef26d"}], 0xaaaaaaaaaaaab09, 0x41, 0x0, 0x0) io_uring_setup(0x4166, &(0x7f00000002c0)={0x0, 0x4, 0x1, 0x3, 0x4000000}) r3 = userfaultfd(0x80001) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r8, 0xab0a, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x206c0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) userfaultfd(0x80001) 278.848327ms ago: executing program 4 (id=7855): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffffee400010000008003950323030302e7530ca30e4baf5bffb3dd68a103161e811a9f819cf39b59532c2ab89d932b2bc6777654b151425e9009449692e4704b797c6d5f057b077e6700b9060688cd38105661333a941559abf6416a5fc16a13fd3aa211f243fd922282871dad9ec8f093caeceeb1a49a4e226f2247816edde702a3db20e22ef030bc68804c0e60cca64949e5221b8"], 0x15) acct(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x1000, 0x0, 0x1000}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) r2 = dup(r1) write$FUSE_INIT(r2, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) socket$unix(0x1, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x106, 0x0, 0x0, 0x0) 169.519484ms ago: executing program 4 (id=7856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0xf0ff) 79.417089ms ago: executing program 4 (id=7857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fchmod(0xffffffffffffffff, 0x184) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) 0s ago: executing program 4 (id=7858): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x180) unshare(0x22020400) unshare(0x2c060000) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x180) (async) unshare(0x22020400) (async) unshare(0x2c060000) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) (async) kernel console output (not intermixed with test programs): lock 1, async page read [ 430.756549][T25353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 430.759466][T25353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.762194][T25353] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 430.764825][T25353] Buffer I/O error on dev nbd2, logical block 1, async page read [ 430.768256][T25353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 430.770527][T25353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.772700][T25353] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 430.775140][T25353] Buffer I/O error on dev nbd2, logical block 1, async page read [ 430.777590][T25353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 430.780031][T25353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.782241][T25353] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 430.784570][T25353] Buffer I/O error on dev nbd2, logical block 1, async page read [ 430.787509][T25353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 430.789719][T25353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.792947][T25353] Buffer I/O error on dev nbd2, logical block 1, async page read [ 430.795126][T25523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 430.795392][T25353] ldm_validate_partition_table(): Disk read failed. [ 430.801144][T25523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 430.804009][T25353] Dev nbd2: unable to read RDB block 0 [ 430.804277][T25523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 430.806837][T25353] nbd2: unable to read partition table [ 430.809647][T25523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 430.811777][T25353] nbd2: partition table beyond EOD, [ 430.814734][T25523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 430.815092][T25353] truncated [ 430.818298][T25523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 430.822744][T25523] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 430.823311][T25353] ldm_validate_partition_table(): Disk read failed. [ 430.828518][T25353] Dev nbd2: unable to read RDB block 0 [ 430.830855][T25353] nbd2: unable to read partition table [ 430.833101][T25353] nbd2: partition table beyond EOD, truncated [ 431.442623][ T39] audit: type=1400 audit(431.338:66879): avc: denied { shutdown } for pid=25540 comm="syz.2.7008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 431.689852][ T39] audit: type=1400 audit(431.588:66880): avc: denied { audit_write } for pid=25565 comm="syz.9.7016" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 431.708490][ T39] audit: type=1400 audit(431.608:66881): avc: denied { ioctl } for pid=25562 comm="syz.4.7015" path="socket:[122451]" dev="sockfs" ino=122451 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 431.742392][T25569] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 431.744207][T25569] binder: 25568:25569 ioctl 4018620d 20000100 returned -1 [ 431.748578][T25569] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 431.750404][T25569] binder: 25568:25569 ioctl 4018620d 20000040 returned -1 [ 432.210138][ T39] audit: type=1400 audit(432.108:66882): avc: denied { getopt } for pid=25587 comm="syz.2.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 432.215615][ T39] audit: type=1400 audit(432.108:66883): avc: denied { write } for pid=25587 comm="syz.2.7025" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 432.238885][T25592] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7026'. [ 432.241920][T25592] netlink: 'syz.9.7026': attribute type 18 has an invalid length. [ 432.244742][T25592] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7026'. [ 432.344020][T25607] RDS: rds_bind could not find a transport for ::ffff:4.0.0.0, load rds_tcp or rds_rdma? [ 432.488654][ T39] audit: type=1400 audit(432.388:66884): avc: denied { ioctl } for pid=25623 comm="syz.2.7038" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 432.555081][T25629] binder_alloc: 25628: binder_install_single_page failed to insert page at offset 0 with -14 [ 432.603643][T25633] netlink: 'syz.6.7042': attribute type 2 has an invalid length. [ 432.607056][T25633] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 432.629997][T25637] 9pnet_virtio: no channels available for device [ 432.904018][T25668] FAULT_INJECTION: forcing a failure. [ 432.904018][T25668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.910525][T25668] CPU: 1 UID: 0 PID: 25668 Comm: syz.6.7054 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 432.913550][T25668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 432.916569][T25668] Call Trace: [ 432.917742][T25668] [ 432.918565][T25668] dump_stack_lvl+0x16c/0x1f0 [ 432.919860][T25668] should_fail_ex+0x497/0x5b0 [ 432.921178][T25668] _copy_from_user+0x2e/0xd0 [ 432.922454][T25668] copy_msghdr_from_user+0x99/0x160 [ 432.923971][T25668] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 432.925657][T25668] ___sys_sendmsg+0xff/0x1e0 [ 432.926894][T25668] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.928460][T25668] ? __pfx_lock_release+0x10/0x10 [ 432.929864][T25668] ? trace_lock_acquire+0x14a/0x1d0 [ 432.931303][T25668] ? __fget_files+0x206/0x3a0 [ 432.932585][T25668] __sys_sendmsg+0x16e/0x220 [ 432.933891][T25668] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.935321][T25668] do_syscall_64+0xcd/0x250 [ 432.936560][T25668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.938453][T25668] RIP: 0033:0x7efd4157e759 [ 432.939820][T25668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.945079][T25668] RSP: 002b:00007efd4244c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.947783][T25668] RAX: ffffffffffffffda RBX: 00007efd41735f80 RCX: 00007efd4157e759 [ 432.950334][T25668] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 432.952491][T25668] RBP: 00007efd4244c090 R08: 0000000000000000 R09: 0000000000000000 [ 432.954863][T25668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.957182][T25668] R13: 0000000000000000 R14: 00007efd41735f80 R15: 00007ffe3b7d8478 [ 432.959265][T25668] [ 432.960102][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.047172][T25683] FAULT_INJECTION: forcing a failure. [ 433.047172][T25683] name failslab, interval 1, probability 0, space 0, times 0 [ 433.051123][T25683] CPU: 1 UID: 0 PID: 25683 Comm: syz.2.7059 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 433.054644][T25683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 433.058179][T25683] Call Trace: [ 433.059127][T25683] [ 433.059943][T25683] dump_stack_lvl+0x16c/0x1f0 [ 433.061257][T25683] should_fail_ex+0x497/0x5b0 [ 433.062509][T25683] ? fs_reclaim_acquire+0xae/0x150 [ 433.063863][T25683] should_failslab+0xc2/0x120 [ 433.065264][T25683] __kmalloc_node_noprof+0xd1/0x430 [ 433.066672][T25683] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 433.068145][T25683] __kvmalloc_node_noprof+0xad/0x1a0 [ 433.069561][T25683] seq_read_iter+0x82a/0x12b0 [ 433.070817][T25683] ? avc_policy_seqno+0x9/0x20 [ 433.072033][T25683] kernfs_fop_read_iter+0x414/0x580 [ 433.073416][T25683] ? rw_verify_area+0xd0/0x700 [ 433.074614][T25683] vfs_read+0x87f/0xbe0 [ 433.075667][T25683] ? __pfx_vfs_read+0x10/0x10 [ 433.076836][T25683] ? lock_acquire+0x2f/0xb0 [ 433.078053][T25683] ? __fget_files+0x40/0x3a0 [ 433.079290][T25683] __x64_sys_pread64+0x1f6/0x250 [ 433.080717][T25683] ? __pfx___x64_sys_pread64+0x10/0x10 [ 433.082276][T25683] do_syscall_64+0xcd/0x250 [ 433.083548][T25683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.085277][T25683] RIP: 0033:0x7f152277e759 [ 433.086576][T25683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.092251][T25683] RSP: 002b:00007f152360a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 433.094474][T25683] RAX: ffffffffffffffda RBX: 00007f1522935f80 RCX: 00007f152277e759 [ 433.096466][T25683] RDX: 0000000000000054 RSI: 0000000020000180 RDI: 0000000000000003 [ 433.098646][T25683] RBP: 00007f152360a090 R08: 0000000000000000 R09: 0000000000000000 [ 433.100787][T25683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.102964][T25683] R13: 0000000000000000 R14: 00007f1522935f80 R15: 00007fff40f12278 [ 433.105293][T25683] [ 433.106228][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.374662][T25723] __nla_validate_parse: 3 callbacks suppressed [ 433.374674][T25723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7072'. [ 433.450906][ T39] audit: type=1400 audit(433.348:66885): avc: denied { mount } for pid=25733 comm="syz.6.7076" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 433.456507][ T39] audit: type=1400 audit(433.348:66886): avc: denied { read } for pid=25733 comm="syz.6.7076" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 433.464491][ T39] audit: type=1400 audit(433.348:66887): avc: denied { open } for pid=25733 comm="syz.6.7076" path="/194/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 433.470586][ T39] audit: type=1400 audit(433.368:66888): avc: denied { unmount } for pid=23631 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 433.656048][ T8624] usb 14-1: new high-speed USB device number 30 using dummy_hcd [ 433.831011][ T8624] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 433.833931][ T8624] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.837557][ T8624] usb 14-1: Product: syz [ 433.839164][ T8624] usb 14-1: Manufacturer: syz [ 433.840816][ T8624] usb 14-1: SerialNumber: syz [ 433.843969][ T8624] usb 14-1: config 0 descriptor?? [ 434.047678][ T7849] usb 14-1: USB disconnect, device number 30 [ 434.360156][T25795] overlayfs: failed to resolve './file0': -2 [ 434.534566][ T39] audit: type=1400 audit(434.428:66889): avc: denied { connect } for pid=25801 comm="syz.4.7097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.607707][ T6048] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 434.648795][T25815] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 434.657350][T25815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7101'. [ 434.757227][ T6048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.757251][ T6048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.757264][ T6048] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.757284][ T6048] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.757297][ T6048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.764169][ T6048] usb 7-1: config 0 descriptor?? [ 434.906582][ T39] audit: type=1400 audit(434.808:66890): avc: denied { setcheckreqprot } for pid=25826 comm="syz.6.7106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 435.095365][T25838] FAULT_INJECTION: forcing a failure. [ 435.095365][T25838] name failslab, interval 1, probability 0, space 0, times 0 [ 435.098966][T25838] CPU: 2 UID: 0 PID: 25838 Comm: syz.4.7110 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 435.102518][T25838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 435.106183][T25838] Call Trace: [ 435.107327][T25838] [ 435.108329][T25838] dump_stack_lvl+0x16c/0x1f0 [ 435.109991][T25838] should_fail_ex+0x497/0x5b0 [ 435.111621][T25838] should_failslab+0xc2/0x120 [ 435.113261][T25838] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 435.115080][T25838] ? skb_clone+0x190/0x3f0 [ 435.116613][T25838] skb_clone+0x190/0x3f0 [ 435.118087][T25838] netlink_deliver_tap+0xab3/0xd90 [ 435.119806][T25838] netlink_unicast+0x5e1/0x7f0 [ 435.121468][T25838] ? __pfx_netlink_unicast+0x10/0x10 [ 435.123280][T25838] netlink_sendmsg+0x8b8/0xd70 [ 435.124925][T25838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.126928][T25838] ____sys_sendmsg+0xaaf/0xc90 [ 435.128547][T25838] ? copy_msghdr_from_user+0x10b/0x160 [ 435.130029][T25838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.131448][T25838] ___sys_sendmsg+0x135/0x1e0 [ 435.132705][T25838] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.134487][T25838] ? __pfx_lock_release+0x10/0x10 [ 435.136205][T25838] ? trace_lock_acquire+0x14a/0x1d0 [ 435.138144][T25838] ? __fget_files+0x206/0x3a0 [ 435.139782][T25838] __sys_sendmsg+0x16e/0x220 [ 435.141385][T25838] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.143171][T25838] do_syscall_64+0xcd/0x250 [ 435.144740][T25838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.146908][T25838] RIP: 0033:0x7feb0757e759 [ 435.148551][T25838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.155714][T25838] RSP: 002b:00007feb082df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.158526][T25838] RAX: ffffffffffffffda RBX: 00007feb07735f80 RCX: 00007feb0757e759 [ 435.161379][T25838] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 435.164191][T25838] RBP: 00007feb082df090 R08: 0000000000000000 R09: 0000000000000000 [ 435.166901][T25838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.169584][T25838] R13: 0000000000000000 R14: 00007feb07735f80 R15: 00007fffbce58ad8 [ 435.172270][T25838] [ 435.177556][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.181469][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.183450][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.185530][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.188023][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.190008][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.191964][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.194473][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.197682][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.199742][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.201681][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.203610][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.205702][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.208492][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.214551][ T6048] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 435.217261][ T6048] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 435.221064][ T6048] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 435.429321][T25793] usb 7-1: language id specifier not provided by device, defaulting to English [ 435.749730][T25852] netlink: 'syz.9.7114': attribute type 10 has an invalid length. [ 435.753459][T25852] bond0: (slave bond_slave_0): Releasing backup interface [ 435.778884][T25852] bond3: entered promiscuous mode [ 435.780249][T25852] bond3: entered allmulticast mode [ 435.781855][T25852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.951426][T25852] bond3 (unregistering): Released all slaves [ 436.024893][T25858] program syz.6.7116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.102749][T25862] netlink: 344 bytes leftover after parsing attributes in process `syz.4.7118'. [ 436.384241][ T39] audit: type=1400 audit(436.278:66891): avc: denied { ioctl } for pid=25880 comm="syz.4.7127" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 436.446311][ T1322] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 436.550608][T25891] netlink: 344 bytes leftover after parsing attributes in process `syz.2.7130'. [ 436.600421][ T1322] usb 11-1: no configurations [ 436.602104][ T1322] usb 11-1: can't read configurations, error -22 [ 436.649511][ T39] audit: type=1326 audit(436.548:66892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25894 comm="syz.2.7133" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f152277e759 code=0x0 [ 436.726043][ T1322] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 436.876711][ T1322] usb 11-1: no configurations [ 436.878450][ T1322] usb 11-1: can't read configurations, error -22 [ 436.880850][ T1322] usb usb11-port1: attempt power cycle [ 437.187178][ T6925] usb 7-1: USB disconnect, device number 46 [ 437.216044][ T1322] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 437.249074][ T1322] usb 11-1: no configurations [ 437.250413][ T1322] usb 11-1: can't read configurations, error -22 [ 437.386189][ T1322] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 437.407533][ T1322] usb 11-1: no configurations [ 437.409189][ T1322] usb 11-1: can't read configurations, error -22 [ 437.411513][ T1322] usb usb11-port1: unable to enumerate USB device [ 437.459074][ T39] audit: type=1400 audit(437.358:66893): avc: denied { getopt } for pid=25919 comm="syz.2.7143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 437.465580][T25922] netlink: 344 bytes leftover after parsing attributes in process `syz.9.7142'. [ 437.525355][ T39] audit: type=1400 audit(437.418:66894): avc: denied { map } for pid=25930 comm="syz.9.7145" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 437.635268][T25944] Invalid source name [ 437.637327][T25944] UBIFS error (pid: 25944): cannot open "/dev/loop2", error -22 [ 437.921316][T25988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7163'. [ 437.966325][ T1322] usb 14-1: new full-speed USB device number 31 using dummy_hcd [ 438.106049][ T1322] usb 14-1: device descriptor read/64, error -71 [ 438.118493][T25993] nbd2: detected capacity change from 0 to 131072 [ 438.124197][T25772] block nbd2: Send control failed (result -89) [ 438.128257][T25772] block nbd2: Request send failed, requeueing [ 438.134900][T23859] block nbd2: Receive control failed (result -32) [ 438.143054][ T36] block nbd2: Dead connection, failed to find a fallback [ 438.144995][ T36] block nbd2: shutting down sockets [ 438.146853][ T36] blk_print_req_error: 43 callbacks suppressed [ 438.146863][ T36] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.151108][ T36] buffer_io_error: 40 callbacks suppressed [ 438.151116][ T36] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.160945][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.166399][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.168635][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.171213][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.174306][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.177001][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.179577][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.183414][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.186566][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.189041][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.191415][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.194029][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.196596][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.199409][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.201841][T25772] ldm_validate_partition_table(): Disk read failed. [ 438.203835][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.206628][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.209155][T25772] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.211671][T25772] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.213995][T25772] Dev nbd2: unable to read RDB block 0 [ 438.215814][T25772] nbd2: unable to read partition table [ 438.225379][T25993] ldm_validate_partition_table(): Disk read failed. [ 438.231912][T25993] Dev nbd2: unable to read RDB block 0 [ 438.238389][T25993] nbd2: unable to read partition table [ 438.241254][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 438.242323][T25772] ldm_validate_partition_table(): Disk read failed. [ 438.244148][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65535, location=65535 [ 438.246430][T25772] Dev nbd2: unable to read RDB block 0 [ 438.248427][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65279, location=65279 [ 438.250473][T25772] nbd2: unable to read partition table [ 438.253532][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65534, location=65534 [ 438.256473][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65278, location=65278 [ 438.259437][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65533, location=65533 [ 438.262648][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65277, location=65277 [ 438.265563][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65385, location=65385 [ 438.271656][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65129, location=65129 [ 438.274610][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65383, location=65383 [ 438.277889][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=65127, location=65127 [ 438.281092][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 438.286540][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 438.289582][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32767, location=32767 [ 438.294092][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32511, location=32511 [ 438.296985][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32766, location=32766 [ 438.299924][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32510, location=32510 [ 438.302788][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32765, location=32765 [ 438.305479][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32509, location=32509 [ 438.308417][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32617, location=32617 [ 438.311638][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32361, location=32361 [ 438.314580][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32615, location=32615 [ 438.323535][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32359, location=32359 [ 438.326514][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 438.331682][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 438.334394][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16383, location=16383 [ 438.337460][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16127, location=16127 [ 438.340422][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16382, location=16382 [ 438.342898][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16126, location=16126 [ 438.345523][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16381, location=16381 [ 438.348419][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16125, location=16125 [ 438.351587][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16233, location=16233 [ 438.354197][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=15977, location=15977 [ 438.357051][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16231, location=16231 [ 438.360023][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=15975, location=15975 [ 438.362881][T25993] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 438.365413][T25993] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 438.366239][ T1322] usb 14-1: new full-speed USB device number 32 using dummy_hcd [ 438.468993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 438.496094][ T1322] usb 14-1: device descriptor read/64, error -71 [ 438.609312][ T1322] usb usb14-port1: attempt power cycle [ 438.946265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 438.948903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 438.956212][ T1322] usb 14-1: new full-speed USB device number 33 using dummy_hcd [ 438.976514][ T1322] usb 14-1: device descriptor read/8, error -71 [ 439.028197][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 439.028207][ T39] audit: type=1400 audit(439.925:66899): avc: denied { ioctl } for pid=26015 comm="syz.2.7175" path="socket:[125327]" dev="sockfs" ino=125327 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 439.171594][ T39] audit: type=1400 audit(440.065:66900): avc: denied { write } for pid=26028 comm="syz.2.7180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 439.216673][ T1322] usb 14-1: new full-speed USB device number 34 using dummy_hcd [ 439.246442][ T1322] usb 14-1: device descriptor read/8, error -71 [ 439.317725][T26039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7184'. [ 439.367884][ T1322] usb usb14-port1: unable to enumerate USB device [ 439.403065][T26045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7186'. [ 439.405450][T26045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7186'. [ 439.543744][T26060] FAULT_INJECTION: forcing a failure. [ 439.543744][T26060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.550248][T26060] CPU: 2 UID: 0 PID: 26060 Comm: syz.2.7190 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 439.553879][T26060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.557704][T26060] Call Trace: [ 439.558884][T26060] [ 439.559934][T26060] dump_stack_lvl+0x16c/0x1f0 [ 439.561681][T26060] should_fail_ex+0x497/0x5b0 [ 439.563366][T26060] _copy_to_user+0x32/0xd0 [ 439.565013][T26060] x25_getsockopt+0x1be/0x240 [ 439.566740][T26060] ? __pfx_x25_getsockopt+0x10/0x10 [ 439.568633][T26060] ? __might_fault+0xe3/0x190 [ 439.570452][T26060] ? __pfx_x25_getsockopt+0x10/0x10 [ 439.572384][T26060] do_sock_getsockopt+0x3fe/0x800 [ 439.574360][T26060] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 439.576480][T26060] ? lock_acquire+0x2f/0xb0 [ 439.578548][T26060] ? __fget_files+0x40/0x3a0 [ 439.580336][T26060] ? __fget_files+0x206/0x3a0 [ 439.581987][T26060] __sys_getsockopt+0x12f/0x260 [ 439.583627][T26060] __x64_sys_getsockopt+0xbd/0x160 [ 439.585497][T26060] ? do_syscall_64+0x91/0x250 [ 439.587267][T26060] ? lockdep_hardirqs_on+0x7c/0x110 [ 439.589287][T26060] do_syscall_64+0xcd/0x250 [ 439.590982][T26060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.593160][T26060] RIP: 0033:0x7f152277e759 [ 439.594991][T26060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.602425][T26060] RSP: 002b:00007f152360a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 439.605382][T26060] RAX: ffffffffffffffda RBX: 00007f1522935f80 RCX: 00007f152277e759 [ 439.608274][T26060] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000004 [ 439.611135][T26060] RBP: 00007f152360a090 R08: 0000000020001580 R09: 0000000000000000 [ 439.614083][T26060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.617228][T26060] R13: 0000000000000000 R14: 00007f1522935f80 R15: 00007fff40f12278 [ 439.620366][T26060] [ 439.680730][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.743053][ T39] audit: type=1326 audit(440.635:66901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.2.7191" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f152277e759 code=0x0 [ 439.959817][T26081] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.966881][T26081] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.969050][T26081] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.971398][T26081] bridge0: entered allmulticast mode [ 441.146346][ T1322] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 441.296404][ T1322] usb 7-1: Using ep0 maxpacket: 8 [ 441.300008][ T1322] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 441.303400][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 441.308385][ T1322] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.311885][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.315234][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.321277][ T1322] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 441.323255][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 441.326454][ T1322] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.329675][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.333167][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.339263][ T1322] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 441.341915][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 441.345586][ T1322] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.349527][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.354956][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.362575][ T1322] usb 7-1: string descriptor 0 read error: -22 [ 441.364601][ T1322] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 441.368204][ T1322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.381479][ T1322] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 441.658421][ T7849] usb 7-1: USB disconnect, device number 47 [ 441.679449][T26189] binder: BINDER_SET_CONTEXT_MGR already set [ 441.681541][T26189] binder: 26188:26189 ioctl 4018620d 20000040 returned -16 [ 441.714676][T26195] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7235'. [ 441.721045][T26196] tipc: Started in network mode [ 441.722870][T26196] tipc: Node identity 7f000001, cluster identity 4711 [ 441.727054][T26196] tipc: Enabled bearer , priority 10 [ 441.737664][T26196] overlayfs: missing 'lowerdir' [ 441.812515][T26203] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.817667][T26203] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.820098][T26203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.870492][T26207] input: syz1 as /devices/virtual/input/input23 [ 441.889080][T26207] binder: BINDER_SET_CONTEXT_MGR already set [ 441.891095][T26207] binder: 26206:26207 ioctl 4018620d 20000040 returned -16 [ 441.961019][T26211] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 442.033089][T26215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7244'. [ 442.047401][T26215] mkiss: ax0: crc mode is auto. [ 442.286189][ T1322] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 442.437764][ T1322] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.441533][ T1322] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.444870][ T1322] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.449318][ T1322] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.451919][ T1322] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.455110][ T1322] usb 11-1: config 0 descriptor?? [ 442.623382][T26223] tls_set_device_offload_rx: netdev not found [ 442.783084][T26230] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7250'. [ 442.845995][ T6048] tipc: Node number set to 2130706433 [ 442.868859][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.870852][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.873236][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.875226][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.878022][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.880102][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.882087][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.884130][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.886820][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.889510][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.891632][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.893583][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.895618][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.897757][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.900588][ T1322] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.902760][ T1322] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 442.906478][ T1322] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 443.095967][ T8624] usb 14-1: new high-speed USB device number 35 using dummy_hcd [ 443.255982][ T8624] usb 14-1: Using ep0 maxpacket: 8 [ 443.260422][ T8624] usb 14-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 443.262952][ T8624] usb 14-1: config 246 descriptor has 1 excess byte, ignoring [ 443.264933][ T8624] usb 14-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 443.267503][ T8624] usb 14-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 443.270753][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 443.273802][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 443.276662][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 443.280911][ T8624] usb 14-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 443.283351][ T8624] usb 14-1: config 246 descriptor has 1 excess byte, ignoring [ 443.285817][ T8624] usb 14-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 443.288454][ T8624] usb 14-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 443.291716][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 443.294753][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 443.297998][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 443.302172][ T8624] usb 14-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 443.304755][ T8624] usb 14-1: config 246 descriptor has 1 excess byte, ignoring [ 443.306912][ T8624] usb 14-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 443.309461][ T8624] usb 14-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 443.312690][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 443.315814][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 443.319607][ T8624] usb 14-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 443.325448][ T8624] usb 14-1: string descriptor 0 read error: -22 [ 443.327832][ T8624] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 443.330434][ T8624] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.335796][ T8624] adutux 14-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 443.375736][ T39] audit: type=1400 audit(444.265:66902): avc: denied { watch watch_reads } for pid=26234 comm="syz.4.7252" path="/232/file0" dev="ramfs" ino=125684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 443.409798][T26238] overlayfs: missing 'lowerdir' [ 443.506442][T26249] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 443.508222][T26249] binder: 26248:26249 ioctl 4018620d 20000100 returned -1 [ 443.513211][T26249] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 443.517881][T26249] overlayfs: missing 'lowerdir' [ 443.522580][T26249] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 443.524884][T26249] binder: 26248:26249 ioctl 4018620d 200001c0 returned -1 [ 443.581853][T26250] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7257'. [ 444.139557][ T5985] usb 14-1: USB disconnect, device number 35 [ 444.382568][T26260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26260 comm=syz.4.7261 [ 444.631693][T26270] tmpfs: Bad value for 'mpol' [ 444.665590][T26272] netlink: 344 bytes leftover after parsing attributes in process `syz.9.7266'. [ 444.715471][T26284] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7271'. [ 444.871173][ T7849] usb 11-1: USB disconnect, device number 13 [ 445.366380][ T6048] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 445.426533][T26304] netlink: 344 bytes leftover after parsing attributes in process `syz.4.7277'. [ 445.474018][T26309] CUSE: info not properly terminated [ 445.517200][ T6048] usb 11-1: no configurations [ 445.518811][ T6048] usb 11-1: can't read configurations, error -22 [ 445.646046][ T6048] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 445.709651][T26320] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 445.771198][ T39] audit: type=1400 audit(446.665:66903): avc: denied { write } for pid=26319 comm="syz.2.7284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 445.796503][ T6048] usb 11-1: no configurations [ 445.797814][ T6048] usb 11-1: can't read configurations, error -22 [ 445.799694][ T6048] usb usb11-port1: attempt power cycle [ 445.804926][ T39] audit: type=1400 audit(446.695:66904): avc: denied { bind } for pid=26322 comm="syz.2.7285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 445.840731][ T39] audit: type=1400 audit(446.735:66905): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 445.859812][T26328] netlink: 344 bytes leftover after parsing attributes in process `syz.2.7287'. [ 445.930033][T26332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.939705][T26332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.136064][ T6048] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 446.157586][ T6048] usb 11-1: no configurations [ 446.158893][ T6048] usb 11-1: can't read configurations, error -22 [ 446.286092][ T6048] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 446.306926][ T6048] usb 11-1: no configurations [ 446.308587][ T6048] usb 11-1: can't read configurations, error -22 [ 446.311055][ T6048] usb usb11-port1: unable to enumerate USB device [ 446.346443][ T39] audit: type=1400 audit(447.245:66906): avc: denied { ioctl } for pid=26335 comm="syz.9.7290" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 446.581814][ T39] audit: type=1400 audit(447.475:66907): avc: denied { ioctl } for pid=26338 comm="syz.9.7291" path="socket:[125876]" dev="sockfs" ino=125876 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 446.587230][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7291'. [ 446.590549][T26339] netlink: 'syz.9.7291': attribute type 2 has an invalid length. [ 446.654929][T26349] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7296'. [ 446.667512][T26351] netlink: 344 bytes leftover after parsing attributes in process `syz.2.7297'. [ 446.714630][T26356] devtmpfs: Cannot enable quota on remount [ 446.755738][T26361] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7300'. [ 446.758444][T26361] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 446.783918][ T39] audit: type=1400 audit(447.675:66908): avc: granted { setsecparam } for pid=26364 comm="syz.9.7302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 446.789589][T26367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7303'. [ 446.792608][T26367] netlink: 'syz.2.7303': attribute type 11 has an invalid length. [ 446.903637][T26377] FAULT_INJECTION: forcing a failure. [ 446.903637][T26377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.907178][T26377] CPU: 2 UID: 0 PID: 26377 Comm: syz.2.7307 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 446.910774][T26377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.913590][T26377] Call Trace: [ 446.914484][T26377] [ 446.915235][T26377] dump_stack_lvl+0x16c/0x1f0 [ 446.916418][T26377] should_fail_ex+0x497/0x5b0 [ 446.917770][T26377] _copy_from_iter+0x2a1/0x1560 [ 446.919030][T26377] ? __pfx__copy_from_iter+0x10/0x10 [ 446.920421][T26377] ? __virt_addr_valid+0x1a4/0x590 [ 446.921791][T26377] ? __virt_addr_valid+0x5e/0x590 [ 446.923126][T26377] ? __phys_addr_symbol+0x30/0x80 [ 446.924427][T26377] ? __check_object_size+0x488/0x710 [ 446.925826][T26377] hci_sock_sendmsg+0x46d/0x25e0 [ 446.927322][T26377] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 446.928899][T26377] sock_write_iter+0x4fe/0x5b0 [ 446.930269][T26377] ? __pfx_sock_write_iter+0x10/0x10 [ 446.931680][T26377] ? bpf_lsm_file_permission+0x9/0x10 [ 446.933059][T26377] ? security_file_permission+0x71/0x210 [ 446.934488][T26377] vfs_write+0x5ae/0x1150 [ 446.935652][T26377] ? __pfx_sock_write_iter+0x10/0x10 [ 446.937058][T26377] ? trace_lock_acquire+0x14a/0x1d0 [ 446.938395][T26377] ? __pfx_vfs_write+0x10/0x10 [ 446.939629][T26377] ? __fget_files+0x40/0x3a0 [ 446.940829][T26377] ksys_write+0x207/0x250 [ 446.941982][T26377] ? __pfx_ksys_write+0x10/0x10 [ 446.943234][T26377] do_syscall_64+0xcd/0x250 [ 446.944436][T26377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.946018][T26377] RIP: 0033:0x7f152277e759 [ 446.947193][T26377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.952204][T26377] RSP: 002b:00007f152360a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.954372][T26377] RAX: ffffffffffffffda RBX: 00007f1522935f80 RCX: 00007f152277e759 [ 446.956453][T26377] RDX: 0000000000000007 RSI: 0000000020000040 RDI: 0000000000000004 [ 446.958535][T26377] RBP: 00007f152360a090 R08: 0000000000000000 R09: 0000000000000000 [ 446.960542][T26377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.963057][T26377] R13: 0000000000000000 R14: 00007f1522935f80 R15: 00007fff40f12278 [ 446.965221][T26377] [ 446.979438][T26381] overlayfs: invalid origin (0000) [ 447.082577][T26394] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 447.162602][ T39] audit: type=1400 audit(448.055:66909): avc: denied { getopt } for pid=26404 comm="syz.9.7321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.162665][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7321'. [ 447.167573][ T39] audit: type=1400 audit(448.055:66910): avc: denied { read write } for pid=23179 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.176443][ T39] audit: type=1400 audit(448.055:66911): avc: denied { open } for pid=23179 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.176462][ T39] audit: type=1400 audit(448.055:66912): avc: denied { ioctl } for pid=23179 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.205315][T26419] netlink: 'syz.9.7325': attribute type 21 has an invalid length. [ 448.222610][T26419] fuse: Bad value for 'fd' [ 448.327664][T26429] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 449.229482][T26467] netlink: 'syz.9.7340': attribute type 1 has an invalid length. [ 449.238181][T26467] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.252452][T26467] bond3: (slave gretap2): making interface the new active one [ 449.255326][T26467] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 449.285290][T26470] Process accounting resumed [ 449.721355][T23859] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 449.725849][T23859] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 449.826173][ T5985] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 449.986324][ T5985] usb 9-1: Using ep0 maxpacket: 8 [ 449.993655][ T5985] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 449.995659][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 449.998745][ T5985] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.001794][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 450.004621][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 450.013279][ T5985] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 450.015252][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 450.018997][ T5985] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.022251][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 450.025099][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 450.031818][ T5985] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 450.034315][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 450.037195][ T5985] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.040172][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 450.043155][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 450.061712][ T5985] usb 9-1: string descriptor 0 read error: -22 [ 450.063430][ T5985] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 450.066318][ T1322] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 450.069231][ T5985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.126787][ T5985] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 450.196430][ T1322] usb 14-1: device descriptor read/64, error -71 [ 450.333917][ T35] usb 9-1: USB disconnect, device number 20 [ 450.456113][ T1322] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 450.462383][T26514] Process accounting resumed [ 450.555785][T26516] __nla_validate_parse: 2 callbacks suppressed [ 450.555795][T26516] netlink: 344 bytes leftover after parsing attributes in process `syz.6.7357'. [ 450.586031][ T1322] usb 14-1: device descriptor read/64, error -71 [ 450.707230][ T1322] usb usb14-port1: attempt power cycle [ 450.786928][ T39] kauditd_printk_skb: 414 callbacks suppressed [ 450.786939][ T39] audit: type=1400 audit(451.685:67327): avc: denied { read write } for pid=26521 comm="syz.6.7360" name="swradio3" dev="devtmpfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.800202][ T39] audit: type=1400 audit(451.685:67328): avc: denied { ioctl } for pid=26492 comm="syz.9.7350" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.809544][ T39] audit: type=1400 audit(451.685:67329): avc: denied { read write open } for pid=26521 comm="syz.6.7360" path="/dev/swradio3" dev="devtmpfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.818943][ T39] audit: type=1400 audit(451.685:67330): avc: denied { ioctl } for pid=26492 comm="syz.9.7350" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.825621][ T39] audit: type=1400 audit(451.685:67331): avc: denied { ioctl } for pid=26521 comm="syz.6.7360" path="/dev/swradio3" dev="devtmpfs" ino=1018 ioctlcmd=0x5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.834311][ T39] audit: type=1400 audit(451.685:67332): avc: denied { mounton } for pid=26521 comm="syz.6.7360" path="/proc/608/task" dev="proc" ino=127896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 450.841788][ T39] audit: type=1400 audit(451.685:67333): avc: denied { mount } for pid=26521 comm="syz.6.7360" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 450.997438][ T39] audit: type=1400 audit(451.895:67334): avc: denied { ioctl } for pid=26492 comm="syz.9.7350" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.069344][ T1322] usb 14-1: new high-speed USB device number 38 using dummy_hcd [ 451.074527][ T39] audit: type=1400 audit(451.965:67335): avc: denied { read write } for pid=23179 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.080968][ T39] audit: type=1400 audit(451.965:67336): avc: denied { read write open } for pid=23179 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.089697][ T1322] usb 14-1: device descriptor read/8, error -71 [ 451.285036][T26533] Process accounting resumed [ 451.354046][ T1322] usb 14-1: new high-speed USB device number 39 using dummy_hcd [ 451.357419][T26535] binfmt_misc: register: failed to install interpreter file ./file0 [ 451.378863][ T1322] usb 14-1: device descriptor read/8, error -71 [ 451.421632][T26537] netlink: 'syz.4.7366': attribute type 3 has an invalid length. [ 451.423759][T26537] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.7366'. [ 451.476143][T26537] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 451.480535][T26537] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 451.487212][ T1322] usb usb14-port1: unable to enumerate USB device [ 451.595138][T26546] netlink: 'syz.6.7369': attribute type 27 has an invalid length. [ 451.635190][T26549] overlay: Bad value for 'uuid' [ 451.685704][T26555] netlink: 344 bytes leftover after parsing attributes in process `syz.4.7373'. [ 451.820865][T26561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7376'. [ 451.825291][T26561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=26561 comm=syz.2.7376 [ 451.834666][T26561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26561 comm=syz.2.7376 [ 451.848181][T26563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7377'. [ 451.916020][ T35] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 452.091998][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.094857][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.099181][ T35] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 452.113081][ T35] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.115539][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.123236][ T35] usb 11-1: config 0 descriptor?? [ 452.186262][ T1322] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 452.316931][T26577] netlink: 344 bytes leftover after parsing attributes in process `syz.2.7383'. [ 452.361885][ T1322] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 452.370665][ T1322] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.374019][ T1322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 452.377398][ T1322] usb 9-1: SerialNumber: syz [ 452.557925][ T35] usbhid 11-1:0.0: can't add hid device: -71 [ 452.559991][ T35] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 452.571105][ T35] usb 11-1: USB disconnect, device number 18 [ 452.735020][T26588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7387'. [ 452.739593][T26588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=26588 comm=syz.2.7387 [ 453.021032][ T1322] cdc_ether 9-1:1.0 eth10: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 453.146094][ T8624] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 453.276113][ T8624] usb 7-1: device descriptor read/64, error -71 [ 453.428135][ T1322] usb 9-1: USB disconnect, device number 21 [ 453.431267][ T1322] cdc_ether 9-1:1.0 eth10: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 453.526063][ T8624] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 453.666066][ T8624] usb 7-1: device descriptor read/64, error -71 [ 453.776743][ T8624] usb usb7-port1: attempt power cycle [ 454.066963][T26620] program syz.9.7400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.116397][ T8624] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 454.148520][ T8624] usb 7-1: device descriptor read/8, error -71 [ 454.396116][ T8624] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 454.417721][ T8624] usb 7-1: device descriptor read/8, error -71 [ 454.526907][ T8624] usb usb7-port1: unable to enumerate USB device [ 454.681021][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7415'. [ 454.758249][T26655] overlayfs: conflicting options: userxattr,redirect_dir=on [ 455.798920][ T39] kauditd_printk_skb: 684 callbacks suppressed [ 455.798937][ T39] audit: type=1400 audit(456.695:68021): avc: denied { read } for pid=26691 comm="syz.6.7431" dev="nsfs" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 455.813017][ T39] audit: type=1400 audit(456.695:68022): avc: denied { read open } for pid=26691 comm="syz.6.7431" path="net:[4026533092]" dev="nsfs" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 455.820591][ T39] audit: type=1400 audit(456.695:68023): avc: denied { create } for pid=26691 comm="syz.6.7431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 455.828028][ T39] audit: type=1400 audit(456.705:68024): avc: denied { read } for pid=26691 comm="syz.6.7431" dev="nsfs" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 455.834425][ T39] audit: type=1400 audit(456.705:68025): avc: denied { read open } for pid=26691 comm="syz.6.7431" path="net:[4026533092]" dev="nsfs" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 455.841701][ T39] audit: type=1400 audit(456.705:68026): avc: denied { create } for pid=26691 comm="syz.6.7431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 455.850454][ T39] audit: type=1400 audit(456.705:68027): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 455.856520][ T39] audit: type=1400 audit(456.705:68028): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.863558][ T39] audit: type=1400 audit(456.705:68029): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 455.871480][ T39] audit: type=1400 audit(456.705:68030): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 455.971422][T26700] netlink: 191416 bytes leftover after parsing attributes in process `syz.6.7432'. [ 456.411358][T26706] syz.9.7434 (26706) used greatest stack depth: 20640 bytes left [ 456.752770][T26740] Process accounting resumed [ 456.855977][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7451'. [ 456.960181][T26752] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.7452'. [ 456.963037][T26752] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 457.142495][T26741] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7446'. [ 457.392873][T26770] Process accounting resumed [ 457.584523][T26777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7461'. [ 457.593584][T26777] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7461'. [ 458.102315][T26794] loop7: detected capacity change from 0 to 16384 [ 458.175740][T26794] blk_print_req_error: 130 callbacks suppressed [ 458.175760][T26794] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 458.181960][T26794] buffer_io_error: 90 callbacks suppressed [ 458.181975][T26794] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 458.211488][T26801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7469'. [ 458.329480][T26806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7469'. [ 458.331863][T26806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7469'. [ 458.509307][T26811] FAULT_INJECTION: forcing a failure. [ 458.509307][T26811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.514219][T26811] CPU: 0 UID: 0 PID: 26811 Comm: syz.6.7472 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 458.517895][T26811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.521969][T26811] Call Trace: [ 458.523334][T26811] [ 458.524588][T26811] dump_stack_lvl+0x16c/0x1f0 [ 458.526300][T26811] should_fail_ex+0x497/0x5b0 [ 458.527823][T26811] _copy_from_user+0x2e/0xd0 [ 458.529357][T26811] memdup_user+0x71/0xd0 [ 458.530486][T26811] nvram_misc_write+0x92/0xf0 [ 458.531715][T26811] ? __pfx_nvram_misc_write+0x10/0x10 [ 458.533115][T26811] vfs_write+0x24c/0x1150 [ 458.534259][T26811] ? __fget_files+0x1fc/0x3a0 [ 458.535545][T26811] ? __pfx_lock_release+0x10/0x10 [ 458.536884][T26811] ? trace_lock_acquire+0x14a/0x1d0 [ 458.538556][T26811] ? __pfx_vfs_write+0x10/0x10 [ 458.540019][T26811] ? lock_acquire+0x2f/0xb0 [ 458.541361][T26811] ? __fget_files+0x40/0x3a0 [ 458.542708][T26811] ? __fget_files+0x206/0x3a0 [ 458.544025][T26811] ksys_write+0x12b/0x250 [ 458.545274][T26811] ? __pfx_ksys_write+0x10/0x10 [ 458.546782][T26811] do_syscall_64+0xcd/0x250 [ 458.548051][T26811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.549713][T26811] RIP: 0033:0x7efd4157e759 [ 458.551183][T26811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.558460][T26811] RSP: 002b:00007efd4244c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.561387][T26811] RAX: ffffffffffffffda RBX: 00007efd41735f80 RCX: 00007efd4157e759 [ 458.563717][T26811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 458.566238][T26811] RBP: 00007efd4244c090 R08: 0000000000000000 R09: 0000000000000000 [ 458.569161][T26811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.572418][T26811] R13: 0000000000000000 R14: 00007efd41735f80 R15: 00007ffe3b7d8478 [ 458.575291][T26811] [ 458.613909][T26812] sp0: Synchronizing with TNC [ 459.182566][T26830] SET target dimension over the limit! [ 459.314457][T26838] FAULT_INJECTION: forcing a failure. [ 459.314457][T26838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.319049][T26838] CPU: 1 UID: 0 PID: 26838 Comm: syz.6.7481 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 459.322903][T26838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 459.326975][T26838] Call Trace: [ 459.328369][T26838] [ 459.329438][T26838] dump_stack_lvl+0x16c/0x1f0 [ 459.331172][T26838] should_fail_ex+0x497/0x5b0 [ 459.332950][T26838] _copy_to_user+0x32/0xd0 [ 459.334491][T26838] simple_read_from_buffer+0xd0/0x160 [ 459.335992][T26838] proc_fail_nth_read+0x198/0x270 [ 459.337685][T26838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.339525][T26838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.340958][T26838] vfs_read+0x1df/0xbe0 [ 459.341997][T26838] ? __fget_files+0x1fc/0x3a0 [ 459.343189][T26838] ? fdget_pos+0x267/0x390 [ 459.344321][T26838] ? __pfx_lock_release+0x10/0x10 [ 459.345727][T26838] ? trace_lock_acquire+0x14a/0x1d0 [ 459.347148][T26838] ? __pfx_vfs_read+0x10/0x10 [ 459.348683][T26838] ? __pfx___mutex_lock+0x10/0x10 [ 459.350552][T26838] ? __fget_files+0x206/0x3a0 [ 459.352224][T26838] ksys_read+0x12b/0x250 [ 459.353797][T26838] ? __pfx_ksys_read+0x10/0x10 [ 459.355499][T26838] do_syscall_64+0xcd/0x250 [ 459.357143][T26838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.359454][T26838] RIP: 0033:0x7efd4157d19c [ 459.361239][T26838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 459.366964][T26838] RSP: 002b:00007efd4244c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.369821][T26838] RAX: ffffffffffffffda RBX: 00007efd41735f80 RCX: 00007efd4157d19c [ 459.371965][T26838] RDX: 000000000000000f RSI: 00007efd4244c0a0 RDI: 0000000000000004 [ 459.374038][T26838] RBP: 00007efd4244c090 R08: 0000000000000000 R09: 0000000000000000 [ 459.376127][T26838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.378405][T26838] R13: 0000000000000000 R14: 00007efd41735f80 R15: 00007ffe3b7d8478 [ 459.380615][T26838] [ 459.381644][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.409744][T26840] Process accounting resumed [ 459.450054][ T1322] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 459.524100][T26850] netlink: 344 bytes leftover after parsing attributes in process `syz.9.7485'. [ 459.626199][ T1322] usb 9-1: Using ep0 maxpacket: 32 [ 459.639334][ T1322] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 459.656691][ T1322] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 459.659196][ T1322] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 459.661353][ T1322] usb 9-1: Product: syz [ 459.677778][ T1322] usb 9-1: Manufacturer: syz [ 459.679053][ T1322] usb 9-1: SerialNumber: syz [ 459.688752][ T1322] usb 9-1: config 0 descriptor?? [ 459.694526][T26830] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 459.746079][ T6048] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 459.799711][T26861] binder: 26855:26861 ioctl 890c 200005c0 returned -22 [ 459.905981][ T6048] usb 11-1: Using ep0 maxpacket: 8 [ 459.921039][ T6048] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 459.925083][ T6048] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 459.928028][ T6048] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.930624][ T6048] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.934998][ T6048] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.941766][ T6048] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.946281][T26864] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 459.965214][ T6006] usb 9-1: USB disconnect, device number 22 [ 460.176107][T26847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.179953][T26847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.289860][ T6048] usb 11-1: GET_CAPABILITIES returned 0 [ 460.292288][ T6048] usbtmc 11-1:16.0: can't read capabilities [ 460.807435][ T39] kauditd_printk_skb: 833 callbacks suppressed [ 460.807448][ T39] audit: type=1400 audit(461.705:68864): avc: denied { ioctl } for pid=26880 comm="syz.9.7495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.845931][ T39] audit: type=1400 audit(461.735:68865): avc: denied { write } for pid=26845 comm="syz.6.7484" name="usbtmc0" dev="devtmpfs" ino=3307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 460.852002][ T39] audit: type=1400 audit(461.745:68866): avc: denied { write } for pid=26845 comm="syz.6.7484" path="/dev/usbtmc0" dev="devtmpfs" ino=3307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 460.866052][ T35] usb 14-1: new high-speed USB device number 40 using dummy_hcd [ 460.871150][ T39] audit: type=1400 audit(461.765:68867): avc: denied { ioctl } for pid=26880 comm="syz.9.7495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.877624][ T39] audit: type=1400 audit(461.765:68868): avc: denied { ioctl } for pid=26880 comm="syz.9.7495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.883964][ T39] audit: type=1400 audit(461.765:68869): avc: denied { ioctl } for pid=26880 comm="syz.9.7495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.948634][ T39] audit: type=1400 audit(461.845:68870): avc: denied { ioctl } for pid=26880 comm="syz.9.7495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.026003][ T35] usb 14-1: Using ep0 maxpacket: 8 [ 461.029127][ T39] audit: type=1400 audit(461.925:68871): avc: denied { ioctl } for pid=26880 comm="syz.9.7495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.034009][ T35] usb 14-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.039799][ T39] audit: type=1400 audit(461.925:68872): avc: denied { ioctl } for pid=26880 comm="syz.9.7495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.040267][ T35] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 461.050128][ T39] audit: type=1400 audit(461.925:68873): avc: denied { ioctl } for pid=26880 comm="syz.9.7495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.051391][ T35] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 461.061856][ T35] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.078237][ T35] usb 14-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 461.080933][ T35] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.083154][ T35] usb 14-1: Product: syz [ 461.084363][ T35] usb 14-1: Manufacturer: syz [ 461.085744][ T35] usb 14-1: SerialNumber: syz [ 461.092399][ T35] usb 14-1: config 0 descriptor?? [ 461.101921][ T35] input: KB Gear Tablet as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input25 [ 461.388127][ T35] usb 14-1: USB disconnect, device number 40 [ 461.388901][T26883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7496'. [ 462.025983][ T6048] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 462.064585][T26896] usb usb9: usbfs: process 26896 (syz.9.7500) did not claim interface 0 before use [ 462.156930][ T6048] usb 7-1: device descriptor read/64, error -71 [ 462.185041][T26898] sg_write: data in/out 131036/70 bytes for SCSI command 0x0-- guessing data in; [ 462.185041][T26898] program syz.4.7501 not setting count and/or reply_len properly [ 462.396057][ T6048] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 462.525972][ T6048] usb 7-1: device descriptor read/64, error -71 [ 462.547912][ T35] usb 11-1: USB disconnect, device number 19 [ 462.572469][T26910] Process accounting resumed [ 462.638724][ T6048] usb usb7-port1: attempt power cycle [ 462.673529][T26912] x_tables: ip_tables: osf match: only valid for protocol 6 [ 462.944019][T26924] MINIX-fs: blocksize too small for device [ 462.976426][ T6048] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 462.999183][ T6048] usb 7-1: device descriptor read/8, error -71 [ 463.236013][ T6048] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 463.260325][ T6048] usb 7-1: device descriptor read/8, error -71 [ 463.367077][ T6048] usb usb7-port1: unable to enumerate USB device [ 463.590340][T26943] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 463.605027][T26943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7516'. [ 463.628448][T26943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=26943 comm=syz.4.7516 [ 463.871906][T26946] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=770954412 (770954412 ns) > initial count (134138459 ns). Using initial count to start timer. [ 464.041100][T26958] netlink: 344 bytes leftover after parsing attributes in process `syz.6.7522'. [ 464.118186][T26960] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 464.120989][T26960] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 464.125601][T26960] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.129400][T26960] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.310831][T26969] Process accounting resumed [ 464.855672][T26985] Process accounting resumed [ 464.991413][T26990] overlay: filesystem on ./bus not supported as upperdir [ 465.017882][T26991] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7532'. [ 465.020297][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7532'. [ 465.023256][T26991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4122 sclass=netlink_route_socket pid=26991 comm=syz.2.7532 [ 465.244970][T26996] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 465.406778][T27008] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 465.408551][T27008] binder: 27005:27008 ioctl 4018620d 20000100 returned -1 [ 465.479150][T27013] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.506228][T27012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.508151][T27012] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 465.509924][T27012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.511766][T27012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.544450][T27015] Process accounting resumed [ 465.816096][ T39] kauditd_printk_skb: 1421 callbacks suppressed [ 465.816116][ T39] audit: type=1400 audit(466.715:70295): avc: denied { write } for pid=27033 comm="syz.9.7549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 465.854203][ T39] audit: type=1400 audit(466.745:70296): avc: denied { read write } for pid=14480 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.863235][ T39] audit: type=1400 audit(466.745:70297): avc: denied { read write open } for pid=14480 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.877392][ T39] audit: type=1400 audit(466.745:70298): avc: denied { ioctl } for pid=14480 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.885272][ T39] audit: type=1400 audit(466.775:70299): avc: denied { create } for pid=27036 comm="syz.2.7550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 465.891748][ T39] audit: type=1400 audit(466.785:70300): avc: denied { write } for pid=27036 comm="syz.2.7550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 465.904395][ T39] audit: type=1400 audit(466.795:70301): avc: denied { read write } for pid=27038 comm="syz.9.7551" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.913556][ T39] audit: type=1400 audit(466.795:70302): avc: denied { read write open } for pid=27038 comm="syz.9.7551" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.925838][ T39] audit: type=1400 audit(466.805:70303): avc: denied { read write } for pid=27038 comm="syz.9.7551" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 465.925954][ T39] audit: type=1400 audit(466.805:70304): avc: denied { read write open } for pid=27038 comm="syz.9.7551" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 466.005789][T27041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7552'. [ 466.799288][T27088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7570'. [ 466.827978][T27092] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 467.166040][ T5946] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 467.278930][T27120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27120 comm=syz.2.7579 [ 467.283306][T27118] netlink: 'syz.2.7579': attribute type 4 has an invalid length. [ 467.316116][ T5946] usb 9-1: Using ep0 maxpacket: 8 [ 467.328036][ T5946] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 467.330921][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.334034][ T5946] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.337300][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.340129][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.348623][ T5946] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 467.351388][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.355142][ T5946] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.358427][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.362161][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.371785][ T5946] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 467.373789][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.379386][ T5946] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.383630][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.387654][ T5946] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.410294][ T5946] usb 9-1: string descriptor 0 read error: -22 [ 467.413163][ T5946] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 467.415544][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.441964][ T5946] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 467.516211][T23859] Bluetooth: hci3: command 0x0c1a tx timeout [ 467.516623][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 467.518292][T23859] Bluetooth: hci0: command 0x0405 tx timeout [ 467.520082][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 467.831095][T27126] netlink: 124 bytes leftover after parsing attributes in process `syz.2.7580'. [ 467.834774][T27126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7580'. [ 467.837789][T27125] netlink: 124 bytes leftover after parsing attributes in process `syz.2.7580'. [ 467.848498][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7580'. [ 468.295284][T27157] program syz.6.7591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.500516][T27177] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 468.660775][T27190] netlink: 344 bytes leftover after parsing attributes in process `syz.6.7599'. [ 469.899394][ T5946] usb 9-1: USB disconnect, device number 23 [ 470.035200][T27226] Process accounting resumed [ 470.852637][ T39] kauditd_printk_skb: 750 callbacks suppressed [ 470.852651][ T39] audit: type=1400 audit(471.745:71055): avc: denied { mount } for pid=27258 comm="syz.4.7623" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 470.867520][ T39] audit: type=1400 audit(471.755:71056): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 470.874234][ T39] audit: type=1400 audit(471.755:71057): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.888145][ T39] audit: type=1400 audit(471.755:71058): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 470.893825][ T39] audit: type=1400 audit(471.755:71059): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 470.903879][ T39] audit: type=1400 audit(471.765:71060): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 470.920342][T27261] Process accounting resumed [ 470.961612][ T39] audit: type=1400 audit(471.855:71061): avc: denied { read write } for pid=23179 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.969804][ T39] audit: type=1400 audit(471.865:71062): avc: denied { read write open } for pid=23179 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.978728][ T39] audit: type=1400 audit(471.865:71063): avc: denied { ioctl } for pid=23179 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.073421][ T39] audit: type=1400 audit(471.965:71064): avc: denied { read write } for pid=23179 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.067625][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7629'. [ 472.455171][T27289] kAFS: No cell specified [ 472.738938][T27299] binder: 27297:27299 ioctl c0306201 20000500 returned -14 [ 472.836348][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7640'. [ 472.877616][T27309] xt_hashlimit: size too large, truncated to 1048576 [ 473.943068][T27330] netlink: 'syz.9.7648': attribute type 10 has an invalid length. [ 473.957070][T27330] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 474.305391][T27337] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7650'. [ 475.869452][ T39] kauditd_printk_skb: 302 callbacks suppressed [ 475.869462][ T39] audit: type=1400 audit(476.765:71367): avc: denied { read write } for pid=23631 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.885709][ T39] audit: type=1400 audit(476.775:71368): avc: denied { read write open } for pid=23631 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.894688][ T39] audit: type=1400 audit(476.775:71369): avc: denied { ioctl } for pid=23631 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.902614][ T39] audit: type=1400 audit(476.775:71370): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 475.909758][ T39] audit: type=1400 audit(476.775:71371): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.918337][ T39] audit: type=1400 audit(476.775:71372): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 475.924085][ T39] audit: type=1400 audit(476.775:71373): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 475.933295][ T39] audit: type=1400 audit(476.775:71374): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 475.967293][ T39] audit: type=1400 audit(476.865:71375): avc: denied { prog_load } for pid=27349 comm="syz.6.7655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 475.972957][ T39] audit: type=1400 audit(476.865:71376): avc: denied { bpf } for pid=27349 comm="syz.6.7655" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 476.104867][T27352] random: crng reseeded on system resumption [ 477.108006][T27353] tipc: Started in network mode [ 477.109389][T27353] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 477.111516][T27353] tipc: Enabled bearer , priority 0 [ 477.243734][T27367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7659'. [ 477.261744][T27367] bond3: entered promiscuous mode [ 477.290534][T27367] gretap1: entered promiscuous mode [ 477.293000][T27367] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 477.310754][T27367] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 477.314817][T27367] gretap1: left promiscuous mode [ 477.324748][T27367] bond3 (unregistering): Released all slaves [ 477.387209][T27376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7662'. [ 477.391904][T27376] ipip0: entered promiscuous mode [ 477.665097][T27383] netlink: 'syz.6.7664': attribute type 10 has an invalid length. [ 477.673469][T27383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.677624][T27383] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 477.926653][T27391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7668'. [ 477.998967][T27394] netlink: 344 bytes leftover after parsing attributes in process `syz.2.7669'. [ 478.106375][ T1322] tipc: Node number set to 11578026 [ 478.138053][T27401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7670'. [ 478.329901][T27411] block nbd9: NBD_DISCONNECT [ 478.366582][T27411] ubi0: attaching mtd0 [ 478.369142][T27411] ubi0: scanning is finished [ 478.370448][T27411] ubi0: empty MTD device detected [ 478.511886][T27421] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7674'. [ 478.518344][T27411] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 478.520543][T27411] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 478.522442][T27411] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 478.524320][T27411] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 478.526552][T27411] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 478.528999][T27411] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 478.531705][T27411] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3394053769 [ 478.534568][T27411] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 478.537470][T27421] bridge1: entered promiscuous mode [ 478.538912][T27421] bridge1: entered allmulticast mode [ 478.539547][T27422] ubi0: background thread "ubi_bgt0d" started, PID 27422 [ 478.541638][T27416] ubi0: detaching mtd0 [ 478.566931][T27416] ubi0: mtd0 is detached [ 478.665463][T27433] FAULT_INJECTION: forcing a failure. [ 478.665463][T27433] name failslab, interval 1, probability 0, space 0, times 0 [ 478.670072][T27433] CPU: 2 UID: 0 PID: 27433 Comm: syz.2.7682 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 478.672851][T27433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.675696][T27433] Call Trace: [ 478.676614][T27433] [ 478.677640][T27433] dump_stack_lvl+0x16c/0x1f0 [ 478.678231][T27434] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 478.679153][T27433] should_fail_ex+0x497/0x5b0 [ 478.681010][T27434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 478.682255][T27433] should_failslab+0xc2/0x120 [ 478.684433][T27434] vhci_hcd vhci_hcd.0: Device attached [ 478.685520][T27433] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 478.688429][T27433] ? skb_clone+0x190/0x3f0 [ 478.689659][T27433] skb_clone+0x190/0x3f0 [ 478.690905][T27433] netlink_deliver_tap+0xab3/0xd90 [ 478.692555][T27433] netlink_unicast+0x5e1/0x7f0 [ 478.694129][T27433] ? __pfx_netlink_unicast+0x10/0x10 [ 478.694472][T27435] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 478.695938][T27433] netlink_sendmsg+0x8b8/0xd70 [ 478.695970][T27433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.695991][T27433] ____sys_sendmsg+0xaaf/0xc90 [ 478.696005][T27433] ? copy_msghdr_from_user+0x10b/0x160 [ 478.696028][T27433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.696049][T27433] ___sys_sendmsg+0x135/0x1e0 [ 478.696067][T27433] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.699304][ T1134] vhci_hcd: stop threads [ 478.700199][T27433] ? __pfx_lock_release+0x10/0x10 [ 478.702158][ T1134] vhci_hcd: release socket [ 478.703711][T27433] ? trace_lock_acquire+0x14a/0x1d0 [ 478.705753][ T1134] vhci_hcd: disconnect device [ 478.707195][T27433] ? __fget_files+0x206/0x3a0 [ 478.707222][T27433] __sys_sendmsg+0x16e/0x220 [ 478.707239][T27433] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.707260][T27433] do_syscall_64+0xcd/0x250 [ 478.707273][T27433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.707285][T27433] RIP: 0033:0x7f152277e759 [ 478.707296][T27433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.707306][T27433] RSP: 002b:00007f152360a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.707318][T27433] RAX: ffffffffffffffda RBX: 00007f1522935f80 RCX: 00007f152277e759 [ 478.707325][T27433] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 478.707332][T27433] RBP: 00007f152360a090 R08: 0000000000000000 R09: 0000000000000000 [ 478.707339][T27433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.707345][T27433] R13: 0000000000000000 R14: 00007f1522935f80 R15: 00007fff40f12278 [ 478.707358][T27433] [ 478.833417][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7683'. [ 478.836440][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7683'. [ 479.424100][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7693'. [ 479.643519][T27478] netlink: 'syz.9.7696': attribute type 1 has an invalid length. [ 479.647082][T27478] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 480.065068][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7701'. [ 480.132363][T27497] FAULT_INJECTION: forcing a failure. [ 480.132363][T27497] name failslab, interval 1, probability 0, space 0, times 0 [ 480.145278][T27497] CPU: 1 UID: 0 PID: 27497 Comm: syz.4.7700 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 480.148064][T27497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 480.150926][T27497] Call Trace: [ 480.151818][T27497] [ 480.152624][T27497] dump_stack_lvl+0x16c/0x1f0 [ 480.153944][T27497] should_fail_ex+0x497/0x5b0 [ 480.155197][T27497] ? fs_reclaim_acquire+0xae/0x150 [ 480.156561][T27497] should_failslab+0xc2/0x120 [ 480.157816][T27497] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 480.159317][T27497] ? __d_alloc+0x31/0xaa0 [ 480.160476][T27497] __d_alloc+0x31/0xaa0 [ 480.161580][T27497] ? mark_lock+0xb5/0xc60 [ 480.162736][T27497] d_alloc+0x4a/0x1e0 [ 480.163807][T27497] d_alloc_parallel+0xe9/0x12b0 [ 480.165116][T27497] ? __d_lookup+0x25c/0x4a0 [ 480.166318][T27497] ? trace_lock_acquire+0x14a/0x1d0 [ 480.167675][T27497] ? __pfx_d_alloc_parallel+0x10/0x10 [ 480.169027][T27497] ? __d_lookup+0x266/0x4a0 [ 480.170236][T27497] lookup_open.isra.0+0xab5/0x14c0 [ 480.171613][T27497] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 480.173075][T27497] ? path_openat+0x88a/0x2d60 [ 480.174320][T27497] ? mnt_get_write_access+0x20c/0x300 [ 480.175738][T27497] path_openat+0x904/0x2d60 [ 480.176969][T27497] ? __pfx_path_openat+0x10/0x10 [ 480.178285][T27497] ? __pfx___lock_acquire+0x10/0x10 [ 480.179655][T27497] do_filp_open+0x20c/0x470 [ 480.180823][T27497] ? __pfx_do_filp_open+0x10/0x10 [ 480.182192][T27497] ? find_held_lock+0x2d/0x110 [ 480.183474][T27497] ? _raw_spin_unlock+0x28/0x50 [ 480.184777][T27497] ? alloc_fd+0x41f/0x760 [ 480.185929][T27497] do_sys_openat2+0x17a/0x1e0 [ 480.187188][T27497] ? __pfx_do_sys_openat2+0x10/0x10 [ 480.188575][T27497] ? __fget_files+0x206/0x3a0 [ 480.189829][T27497] __x64_sys_open+0x154/0x1e0 [ 480.191095][T27497] ? __pfx___x64_sys_open+0x10/0x10 [ 480.192549][T27497] do_syscall_64+0xcd/0x250 [ 480.193772][T27497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.195368][T27497] RIP: 0033:0x7feb0757e759 [ 480.196612][T27497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.202485][T27497] RSP: 002b:00007feb082df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 480.204782][T27497] RAX: ffffffffffffffda RBX: 00007feb07735f80 RCX: 00007feb0757e759 [ 480.207121][T27497] RDX: 00000000000000e0 RSI: 0000000000040200 RDI: 0000000020000000 [ 480.209195][T27497] RBP: 00007feb082df090 R08: 0000000000000000 R09: 0000000000000000 [ 480.211491][T27497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.213461][T27497] R13: 0000000000000000 R14: 00007feb07735f80 R15: 00007fffbce58ad8 [ 480.215535][T27497] [ 480.419522][T27512] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 480.419701][T27509] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 480.911962][ T39] kauditd_printk_skb: 485 callbacks suppressed [ 480.911972][ T39] audit: type=1400 audit(481.805:71862): avc: denied { module_request } for pid=27518 comm="syz.4.7710" kmod="crypto-cryptd(__ecb-cast5-avx)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 480.959782][ T39] audit: type=1400 audit(481.855:71863): avc: denied { ioctl } for pid=27508 comm="syz.6.7708" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 480.968744][ T39] audit: type=1400 audit(481.865:71864): avc: denied { ioctl } for pid=27508 comm="syz.6.7708" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 480.976135][ T39] audit: type=1400 audit(481.865:71865): avc: denied { ioctl } for pid=27508 comm="syz.6.7708" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 481.260413][ T39] audit: type=1400 audit(482.155:71866): avc: denied { read write } for pid=14480 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.266901][ T39] audit: type=1400 audit(482.155:71867): avc: denied { read write open } for pid=14480 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.273350][ T39] audit: type=1400 audit(482.155:71868): avc: denied { ioctl } for pid=14480 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.286492][ T39] audit: type=1400 audit(482.175:71869): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 481.296091][ T39] audit: type=1400 audit(482.185:71870): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.303730][ T39] audit: type=1400 audit(482.185:71871): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 482.263192][T27545] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.7719'. [ 482.267704][T27545] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 482.288617][T27545] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 482.293048][T27545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=27545 comm=syz.6.7719 [ 482.534674][T27555] overlayfs: failed to resolve './file1': -2 [ 482.545109][T27554] loop5: detected capacity change from 0 to 9 [ 482.551388][T27554] Buffer I/O error on dev loop5, logical block 1, async page read [ 482.553432][T27554] Dev loop5: unable to read RDB block 8 [ 482.555112][T27554] loop5: unable to read partition table [ 482.565085][T27554] loop5: partition table beyond EOD, truncated [ 482.568805][T27554] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 482.568805][T27554] ) failed (rc=-5) [ 483.727931][T27573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7729'. [ 483.729507][T27579] netlink: 344 bytes leftover after parsing attributes in process `syz.6.7731'. [ 483.826476][T27584] Process accounting resumed [ 483.862269][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.864699][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.867360][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.869917][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.872052][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.874194][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.879308][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.881277][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.883262][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.885360][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.887493][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.889809][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.892758][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.895364][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.897753][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.899833][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.901924][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.903847][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.906222][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.908545][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.910656][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.912962][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.915038][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.917441][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.919555][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.921714][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.923620][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.925616][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.927652][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.929664][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.931553][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.933471][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 483.935412][T27123] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 484.115532][T27611] netlink: 'syz.9.7741': attribute type 10 has an invalid length. [ 484.134960][T27611] netlink: 'syz.9.7741': attribute type 10 has an invalid length. [ 484.137683][T27611] netlink: 2 bytes leftover after parsing attributes in process `syz.9.7741'. [ 484.141110][T27611] team0: entered promiscuous mode [ 484.143078][T27611] team_slave_0: entered promiscuous mode [ 484.145180][T27611] team_slave_1: entered promiscuous mode [ 484.153018][T27611] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.154923][T27611] bridge0: port 3(team0) entered blocking state [ 484.161051][T27611] bridge0: port 3(team0) entered disabled state [ 484.163515][T27611] team0: entered allmulticast mode [ 484.165069][T27611] team_slave_0: entered allmulticast mode [ 484.168454][T27611] team_slave_1: entered allmulticast mode [ 484.171454][T27611] bridge0: port 3(team0) entered blocking state [ 484.173125][T27611] bridge0: port 3(team0) entered forwarding state [ 484.193826][T27614] netlink: 344 bytes leftover after parsing attributes in process `syz.6.7742'. [ 484.250489][T27616] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 484.252299][T27616] binder: 27615:27616 ioctl 4018620d 20000100 returned -1 [ 484.268613][T27616] binder: 27615:27616 ioctl c0306201 20000080 returned -11 [ 484.616002][ T6006] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 484.662785][T27646] netlink: 344 bytes leftover after parsing attributes in process `syz.2.7755'. [ 484.776852][ T6006] usb 9-1: Using ep0 maxpacket: 8 [ 484.785297][ T6006] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 484.790107][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 484.793771][ T6006] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.801434][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.804262][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 484.820559][ T6006] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 484.822676][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 484.830360][ T6006] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.833562][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.838638][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 484.850339][ T6006] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 484.852211][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 484.854917][ T6006] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.864628][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.869349][ T6006] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 484.889825][ T6006] usb 9-1: string descriptor 0 read error: -22 [ 484.891458][ T6006] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 484.894818][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.941295][ T6006] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 485.149086][ T6006] usb 9-1: USB disconnect, device number 24 [ 485.638638][T27664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7757'. [ 485.652932][T27664] netlink: 'syz.2.7757': attribute type 2 has an invalid length. [ 485.655013][T27664] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 485.787399][T27667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=27667 comm=syz.2.7758 [ 485.939411][ T39] kauditd_printk_skb: 509 callbacks suppressed [ 485.939429][ T39] audit: type=1400 audit(486.835:72381): avc: denied { map_create } for pid=27672 comm="syz.4.7760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 485.951295][ T39] audit: type=1400 audit(486.845:72382): avc: denied { prog_load } for pid=27672 comm="syz.4.7760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 485.959922][ T39] audit: type=1400 audit(486.845:72383): avc: denied { bpf } for pid=27672 comm="syz.4.7760" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 485.965267][ T39] audit: type=1400 audit(486.845:72384): avc: denied { perfmon } for pid=27672 comm="syz.4.7760" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 485.995998][ T39] audit: type=1400 audit(486.845:72385): avc: denied { perfmon } for pid=27672 comm="syz.4.7760" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 486.001560][ T39] audit: type=1400 audit(486.855:72386): avc: denied { perfmon } for pid=27672 comm="syz.4.7760" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 486.015969][ T39] audit: type=1400 audit(486.855:72387): avc: denied { perfmon } for pid=27672 comm="syz.4.7760" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 486.027621][ T39] audit: type=1400 audit(486.855:72388): avc: denied { perfmon } for pid=27672 comm="syz.4.7760" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 486.032985][ T39] audit: type=1400 audit(486.855:72389): avc: denied { bpf } for pid=27672 comm="syz.4.7760" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 486.045590][ T39] audit: type=1400 audit(486.865:72390): avc: denied { create } for pid=27672 comm="syz.4.7760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 486.123644][T27679] Process accounting resumed [ 486.716825][ T1322] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 486.875978][ T1322] usb 7-1: Using ep0 maxpacket: 8 [ 486.885939][ T1322] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 486.888608][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.892615][ T1322] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.920434][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.924435][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 486.951221][ T1322] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 486.953723][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.965971][ T1322] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.969807][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.973615][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 486.989617][ T1322] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 486.992105][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.995718][ T1322] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.006317][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 487.009252][ T1322] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 487.032872][ T1322] usb 7-1: string descriptor 0 read error: -22 [ 487.034608][ T1322] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 487.037128][ T1322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.038191][T27724] netlink: 'syz.4.7776': attribute type 10 has an invalid length. [ 487.056617][T27724] batman_adv: batadv0: Adding interface: team0 [ 487.056831][ T1322] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 487.058255][T27724] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.066732][T27724] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 487.078203][T27724] netlink: 'syz.4.7776': attribute type 10 has an invalid length. [ 487.080314][T27724] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7776'. [ 487.082888][T27724] team0: entered promiscuous mode [ 487.084437][T27724] team_slave_0: entered promiscuous mode [ 487.087381][T27724] team_slave_1: entered promiscuous mode [ 487.090691][T27724] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.093325][T27724] batman_adv: batadv0: Interface activated: team0 [ 487.095718][T27724] batman_adv: batadv0: Interface deactivated: team0 [ 487.099574][T27724] batman_adv: batadv0: Removing interface: team0 [ 487.115323][T27724] bridge0: port 3(team0) entered blocking state [ 487.117303][T27724] bridge0: port 3(team0) entered disabled state [ 487.118984][T27724] team0: entered allmulticast mode [ 487.120434][T27724] team_slave_0: entered allmulticast mode [ 487.122097][T27724] team_slave_1: entered allmulticast mode [ 487.162361][T27721] netlink: 'syz.9.7777': attribute type 62 has an invalid length. [ 487.338626][ T6925] usb 7-1: USB disconnect, device number 56 [ 487.636018][ T35] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 487.766036][ T35] usb 9-1: device descriptor read/64, error -71 [ 488.006048][ T35] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 488.040280][T27123] Bluetooth: hci0: unexpected event 0x01 length: 33 > 1 [ 488.136010][ T35] usb 9-1: device descriptor read/64, error -71 [ 488.247237][ T35] usb usb9-port1: attempt power cycle [ 488.363243][T27756] Process accounting resumed [ 488.585981][ T35] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 488.608088][ T35] usb 9-1: device descriptor read/8, error -71 [ 488.663058][T27760] binder: BINDER_SET_CONTEXT_MGR already set [ 488.664671][T27760] binder: 27759:27760 ioctl 4018620d 200002c0 returned -16 [ 488.846009][ T35] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 488.867499][ T35] usb 9-1: device descriptor read/8, error -71 [ 488.976574][ T35] usb usb9-port1: unable to enumerate USB device [ 489.585564][T27783] overlayfs: missing 'workdir' [ 489.599015][T27785] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.7799'. [ 489.601882][T27785] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 489.626006][ T6925] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 489.786060][ T6925] usb 7-1: Using ep0 maxpacket: 8 [ 489.792371][ T6925] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 489.794420][ T6925] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.799570][ T6925] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.809498][ T6925] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 489.812044][ T6925] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.816507][ T6925] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.828222][ T6925] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 489.830279][ T6925] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.833201][ T6925] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.861369][ T6925] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 489.864451][ T6925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.867475][ T6925] usb 7-1: Product: syz [ 489.868917][ T6925] usb 7-1: Manufacturer: syz [ 489.870529][ T6925] usb 7-1: SerialNumber: syz [ 490.016440][T27800] netlink: 'syz.6.7805': attribute type 3 has an invalid length. [ 490.019158][T27800] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7805'. [ 490.182481][ T6925] adutux 7-1:168.0: interrupt endpoints not found [ 490.185589][ T6925] usb 7-1: USB disconnect, device number 57 [ 490.248613][T27808] bridge1: entered promiscuous mode [ 490.250046][T27808] bridge1: entered allmulticast mode [ 490.253638][T27809] bridge2: entered promiscuous mode [ 490.255074][T27809] bridge2: entered allmulticast mode [ 490.453003][T27814] netlink: 'syz.6.7809': attribute type 3 has an invalid length. [ 490.455822][T27814] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7809'. [ 490.464757][T27814] Malformed UNC in devname [ 490.464757][T27814] [ 490.467692][T27814] CIFS: VFS: Malformed UNC in devname [ 490.736789][T27826] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7815'. [ 490.739409][T27826] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 490.757096][T27826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=27826 comm=syz.4.7815 [ 490.883231][T27832] netlink: 344 bytes leftover after parsing attributes in process `syz.4.7818'. [ 490.963032][ T39] kauditd_printk_skb: 992 callbacks suppressed [ 490.963048][ T39] audit: type=1400 audit(491.855:73383): avc: denied { read write } for pid=14480 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.986082][ T39] audit: type=1400 audit(491.875:73384): avc: denied { read write open } for pid=14480 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.992514][ T39] audit: type=1400 audit(491.875:73385): avc: denied { ioctl } for pid=14480 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.999348][ T39] audit: type=1400 audit(491.875:73386): avc: denied { create } for pid=27835 comm="syz.6.7820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 491.004658][ T39] audit: type=1400 audit(491.875:73387): avc: denied { module_request } for pid=27835 comm="syz.6.7820" kmod="net-pf-10-proto-9-type-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 491.011306][ T39] audit: type=1400 audit(491.885:73388): avc: denied { read write } for pid=27837 comm="syz.4.7821" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.018509][ T39] audit: type=1400 audit(491.885:73389): avc: denied { read write open } for pid=27837 comm="syz.4.7821" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.025543][ T39] audit: type=1400 audit(491.885:73390): avc: denied { ioctl } for pid=27837 comm="syz.4.7821" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.032005][ T39] audit: type=1400 audit(491.885:73391): avc: denied { ioctl } for pid=27837 comm="syz.4.7821" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.038657][ T39] audit: type=1400 audit(491.885:73392): avc: denied { ioctl } for pid=27837 comm="syz.4.7821" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.141985][T27845] tipc: Resetting bearer [ 491.181098][T27845] tipc: Disabling bearer [ 491.221340][T27845] team0 (unregistering): Port device team_slave_0 removed [ 491.242175][T27845] team0 (unregistering): Port device team_slave_1 removed [ 491.259920][T27855] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7825'. [ 491.263229][T27855] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 491.276842][T27855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=27855 comm=syz.4.7825 [ 492.579925][T27902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=27902 comm=syz.2.7841 [ 492.916118][ T35] usb 14-1: new full-speed USB device number 41 using dummy_hcd [ 493.083133][ T35] usb 14-1: not running at top speed; connect to a high speed hub [ 493.096206][ T35] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.099665][ T35] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 493.101067][T27929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=27929 comm=syz.2.7851 [ 493.119556][ T35] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.122789][ T35] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.125717][ T35] usb 14-1: Product: 㛧禥期鈒ಹ鋶䶹芡⋙ꂓꋚ붳ด炫粔㐢杔࿪ꡢ䆶囡㿄뜍ᆎ傈啾敱沓箑轳뭕㏬錵ၮ좂綷濎챐鑨쁼亊冀譯尟鋑쒜鯯꣌ࢷ芕䖏ﵻ欚儷ꭷ鏋鳓ⓠ船科萦ᣂ婓慉嚩។◌鉌쎎筕溺ﳃ坥笉묿憝鳀㕭㡿踦Ắ접瘽ꎤ [ 493.135086][ T35] usb 14-1: Manufacturer: ȥ [ 493.137006][ T35] usb 14-1: SerialNumber: 줃栔參ﺽ骕ꕂ붅ꒅ꽠꺨ぽ쿺⻃ᡑ≚亄颞뮂䭏艿쑺썯糵捳坹擽獣㤤䮰ﭩ╦甧䦫ↅᑱ摊⋷軎죲┦꣖➪麾義刪䒵꯯㩂ᄨᯝ랼婟莣擂넓䓓쯳층鑮㰿落뤋攛⾈䨟餸䏸ᐔ痞॥띣⧗줹⻓㡞뀗尝蓮஫肿퉘袸䱣핳鍯䁩劰붖賷Ţ诇㩣낒팏⬅뷬庅磭Άņઙ顛鶷߶얾 [ 493.166185][ T6006] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 493.316181][ T6006] usb 11-1: Using ep0 maxpacket: 8 [ 493.344900][ T6006] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 493.347425][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 493.350351][ T6006] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.353591][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.356751][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.369235][ T6006] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 493.371393][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 493.374353][ T6006] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.377100][ T35] cdc_ncm 14-1:1.0: CDC Union missing and no IAD found [ 493.377689][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.379315][ T35] cdc_ncm 14-1:1.0: bind() failure [ 493.382232][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.392264][ T6006] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 493.392838][ T35] cdc_ncm 14-1:1.1: CDC Union missing and no IAD found [ 493.394927][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 493.399109][ T35] cdc_ncm 14-1:1.1: bind() failure [ 493.401666][ T6006] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.407755][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.409871][ T35] usb 14-1: USB disconnect, device number 41 [ 493.411722][ T6006] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.440971][ T6006] usb 11-1: string descriptor 0 read error: -22 [ 493.443246][ T6006] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 493.447028][ T6006] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.465578][ T6006] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 493.473103][T27940] Process accounting resumed [ 493.616157][T27945] block nbd2: Device being setup by another task [ 493.668638][ T35] usb 11-1: USB disconnect, device number 20 [ 493.727467][T27938] [ 493.728232][T27938] ====================================================== [ 493.730149][T27938] WARNING: possible circular locking dependency detected [ 493.732082][T27938] 6.12.0-syzkaller-00971-g158f238aa69d #0 Not tainted [ 493.734319][T27938] ------------------------------------------------------ [ 493.738081][T27938] syz.2.7854/27938 is trying to acquire lock: [ 493.739663][T27938] ffff888026600fa0 (&q->sysfs_lock){+.+.}-{3:3}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.742298][T27938] [ 493.742298][T27938] but task is already holding lock: [ 493.744115][T27938] ffff888026600a70 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 493.747140][T27938] [ 493.747140][T27938] which lock already depends on the new lock. [ 493.747140][T27938] [ 493.749891][T27938] [ 493.749891][T27938] the existing dependency chain (in reverse order) is: [ 493.752231][T27938] [ 493.752231][T27938] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 493.754501][T27938] blk_mq_submit_bio+0x1fbe/0x24b0 [ 493.755982][T27938] __submit_bio+0x384/0x540 [ 493.757365][T27938] submit_bio_noacct_nocheck+0x6fb/0xd70 [ 493.758962][T27938] submit_bio_noacct+0x93a/0x1e10 [ 493.760507][T27938] block_read_full_folio+0x812/0xa50 [ 493.762125][T27938] filemap_read_folio+0xc6/0x2a0 [ 493.763615][T27938] filemap_get_pages+0x1560/0x1be0 [ 493.765166][T27938] filemap_read+0x3ca/0xd70 [ 493.766619][T27938] blkdev_read_iter+0x187/0x480 [ 493.768144][T27938] vfs_read+0x87f/0xbe0 [ 493.769463][T27938] ksys_read+0x12b/0x250 [ 493.770812][T27938] do_syscall_64+0xcd/0x250 [ 493.772251][T27938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.773933][T27938] [ 493.773933][T27938] -> #3 (mapping.invalidate_lock#2){++++}-{3:3}: [ 493.776118][T27938] down_read+0x9a/0x330 [ 493.777387][T27938] filemap_fault+0x62e/0x2820 [ 493.778744][T27938] __do_fault+0x10a/0x490 [ 493.780011][T27938] do_pte_missing+0x1a8/0x3e70 [ 493.781390][T27938] __handle_mm_fault+0x100a/0x2a10 [ 493.782842][T27938] handle_mm_fault+0x3fa/0xaa0 [ 493.784226][T27938] __get_user_pages+0x8d9/0x3b50 [ 493.785670][T27938] get_user_pages_unlocked+0x1c2/0x780 [ 493.787351][T27938] hva_to_pfn+0x2da/0xea0 [ 493.788723][T27938] __gfn_to_pfn_memslot+0x23f/0x570 [ 493.790213][T27938] kvm_faultin_pfn+0x48c/0x1db0 [ 493.791659][T27938] kvm_tdp_page_fault+0x182/0x350 [ 493.793161][T27938] kvm_mmu_do_page_fault+0x59f/0x6a0 [ 493.794727][T27938] kvm_mmu_page_fault+0x214/0x1b70 [ 493.796216][T27938] handle_ept_violation+0x1f0/0x510 [ 493.797779][T27938] vmx_handle_exit+0x733/0x1ed0 [ 493.799226][T27938] vcpu_run+0x3020/0x4f80 [ 493.800546][T27938] kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 493.802201][T27938] kvm_vcpu_ioctl+0x6c7/0x1510 [ 493.803649][T27938] __x64_sys_ioctl+0x190/0x200 [ 493.805083][T27938] do_syscall_64+0xcd/0x250 [ 493.806424][T27938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.808296][T27938] [ 493.808296][T27938] -> #2 (&mm->mmap_lock){++++}-{3:3}: [ 493.810403][T27938] __might_fault+0x11b/0x190 [ 493.811759][T27938] _copy_from_user+0x29/0xd0 [ 493.813148][T27938] __blk_trace_setup+0xa8/0x180 [ 493.814538][T27938] blk_trace_ioctl+0x163/0x290 [ 493.815952][T27938] blkdev_ioctl+0x109/0x6d0 [ 493.817399][T27938] __x64_sys_ioctl+0x190/0x200 [ 493.818877][T27938] do_syscall_64+0xcd/0x250 [ 493.820185][T27938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.821862][T27938] [ 493.821862][T27938] -> #1 (&q->debugfs_mutex){+.+.}-{3:3}: [ 493.823873][T27938] __mutex_lock+0x175/0x9c0 [ 493.825397][T27938] blk_register_queue+0x13c/0x550 [ 493.827356][T27938] add_disk_fwnode+0x785/0x1300 [ 493.829160][T27938] brd_alloc.isra.0+0x5a2/0x840 [ 493.830684][T27938] brd_init+0x12b/0x1d0 [ 493.831923][T27938] do_one_initcall+0x128/0x700 [ 493.833326][T27938] kernel_init_freeable+0x5c7/0x900 [ 493.834829][T27938] kernel_init+0x1c/0x2b0 [ 493.836096][T27938] ret_from_fork+0x45/0x80 [ 493.837526][T27938] ret_from_fork_asm+0x1a/0x30 [ 493.839020][T27938] [ 493.839020][T27938] -> #0 (&q->sysfs_lock){+.+.}-{3:3}: [ 493.841134][T27938] __lock_acquire+0x250b/0x3ce0 [ 493.842531][T27938] lock_acquire.part.0+0x11b/0x380 [ 493.843977][T27938] __mutex_lock+0x175/0x9c0 [ 493.845365][T27938] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.847163][T27938] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 493.848873][T27938] nbd_start_device+0x15b/0xd70 [ 493.850463][T27938] nbd_ioctl+0x21a/0xfd0 [ 493.851905][T27938] blkdev_ioctl+0x276/0x6d0 [ 493.853383][T27938] __x64_sys_ioctl+0x190/0x200 [ 493.854809][T27938] do_syscall_64+0xcd/0x250 [ 493.856123][T27938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.857900][T27938] [ 493.857900][T27938] other info that might help us debug this: [ 493.857900][T27938] [ 493.860576][T27938] Chain exists of: [ 493.860576][T27938] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#51 [ 493.860576][T27938] [ 493.864369][T27938] Possible unsafe locking scenario: [ 493.864369][T27938] [ 493.866209][T27938] CPU0 CPU1 [ 493.867633][T27938] ---- ---- [ 493.869051][T27938] lock(&q->q_usage_counter(io)#51); [ 493.870452][T27938] lock(mapping.invalidate_lock#2); [ 493.872408][T27938] lock(&q->q_usage_counter(io)#51); [ 493.874416][T27938] lock(&q->sysfs_lock); [ 493.875547][T27938] [ 493.875547][T27938] *** DEADLOCK *** [ 493.875547][T27938] [ 493.878038][T27938] 4 locks held by syz.2.7854/27938: [ 493.879574][T27938] #0: ffff888107341198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x151/0xfd0 [ 493.882308][T27938] #1: ffff8881073410d8 (&set->tag_list_lock){+.+.}-{3:3}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 493.885279][T27938] #2: ffff888026600a70 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 493.888328][T27938] #3: ffff888026600aa8 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 493.891183][T27938] [ 493.891183][T27938] stack backtrace: [ 493.892698][T27938] CPU: 3 UID: 0 PID: 27938 Comm: syz.2.7854 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 493.895308][T27938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 493.898711][T27938] Call Trace: [ 493.899911][T27938] [ 493.900701][T27938] dump_stack_lvl+0x116/0x1f0 [ 493.901923][T27938] print_circular_bug+0x41c/0x610 [ 493.903244][T27938] check_noncircular+0x31a/0x400 [ 493.904527][T27938] ? __pfx_check_noncircular+0x10/0x10 [ 493.905962][T27938] ? lockdep_lock+0xc6/0x200 [ 493.907234][T27938] ? add_lock_to_list+0x17d/0x390 [ 493.908549][T27938] __lock_acquire+0x250b/0x3ce0 [ 493.909971][T27938] ? __pfx___lock_acquire+0x10/0x10 [ 493.911371][T27938] lock_acquire.part.0+0x11b/0x380 [ 493.912755][T27938] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.914442][T27938] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 493.916022][T27938] ? rcu_is_watching+0x12/0xc0 [ 493.917413][T27938] ? trace_lock_acquire+0x14a/0x1d0 [ 493.918818][T27938] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.920548][T27938] ? lock_acquire+0x2f/0xb0 [ 493.921748][T27938] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.923375][T27938] __mutex_lock+0x175/0x9c0 [ 493.924590][T27938] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.926212][T27938] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.928415][T27938] ? __pfx___mutex_lock+0x10/0x10 [ 493.930162][T27938] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.931855][T27938] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 493.933436][T27938] ? lock_acquire.part.0+0x11b/0x380 [ 493.934812][T27938] ? __mutex_trylock_common+0xea/0x250 [ 493.936263][T27938] ? __pfx___mutex_trylock_common+0x10/0x10 [ 493.937941][T27938] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 493.939442][T27938] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 493.941145][T27938] ? rcu_is_watching+0x12/0xc0 [ 493.942415][T27938] ? __mutex_lock+0x1a6/0x9c0 [ 493.943642][T27938] ? __pfx___mutex_trylock_common+0x10/0x10 [ 493.945225][T27938] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 493.946731][T27938] ? __pfx___mutex_lock+0x10/0x10 [ 493.948103][T27938] ? trace_contention_end+0xea/0x140 [ 493.949483][T27938] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 493.951217][T27938] ? nbd_ioctl+0x151/0xfd0 [ 493.952848][T27938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 493.954619][T27938] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 493.956059][T27938] nbd_start_device+0x15b/0xd70 [ 493.957415][T27938] ? bpf_lsm_capable+0x9/0x10 [ 493.958641][T27938] nbd_ioctl+0x21a/0xfd0 [ 493.959709][T27938] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 493.961364][T27938] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 493.963059][T27938] ? __pfx_nbd_ioctl+0x10/0x10 [ 493.964359][T27938] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 493.966197][T27938] ? __pfx_lock_release+0x10/0x10 [ 493.967961][T27938] ? trace_lock_acquire+0x14a/0x1d0 [ 493.969892][T27938] ? __pfx_nbd_ioctl+0x10/0x10 [ 493.971299][T27938] blkdev_ioctl+0x276/0x6d0 [ 493.972572][T27938] ? __pfx_blkdev_ioctl+0x10/0x10 [ 493.973956][T27938] ? selinux_file_ioctl+0x180/0x270 [ 493.975331][T27938] ? selinux_file_ioctl+0xb4/0x270 [ 493.976704][T27938] ? __pfx_blkdev_ioctl+0x10/0x10 [ 493.978029][T27938] __x64_sys_ioctl+0x190/0x200 [ 493.979283][T27938] do_syscall_64+0xcd/0x250 [ 493.980456][T27938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.981990][T27938] RIP: 0033:0x7f152277e759 [ 493.983186][T27938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.988423][T27938] RSP: 002b:00007f152360a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.990648][T27938] RAX: ffffffffffffffda RBX: 00007f1522935f80 RCX: 00007f152277e759 [ 493.992747][T27938] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000a [ 493.994786][T27938] RBP: 00007f15227f175e R08: 0000000000000000 R09: 0000000000000000 [ 493.996848][T27938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.998887][T27938] R13: 0000000000000000 R14: 00007f1522935f80 R15: 00007fff40f12278 [ 494.001057][T27938] [ 494.076749][T27945] block nbd2: shutting down sockets [ 501.117433][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.127439][ T39] kauditd_printk_skb: 529 callbacks suppressed [ 501.127454][ T39] audit: type=1400 audit(502.025:73922): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 501.134853][ T39] audit: type=1400 audit(502.025:73923): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.140694][ T39] audit: type=1400 audit(502.025:73924): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.146568][ T39] audit: type=1400 audit(502.025:73925): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.152679][ T39] audit: type=1400 audit(502.025:73926): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 VM DIAGNOSIS: 16:16:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000343aac RBX=0000000000000000 RCX=ffffffff8b25d399 RDX=ffffed100d4c7026 RSI=ffffffff8bd1d240 RDI=ffffffff81647f5c RBP=fffffbfff1bd2b10 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de95880 R14=ffffffff905fcbc8 R15=0000000000000000 RIP=ffffffff8b25e77f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feb0829dd58 CR3=000000002e0d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000cdb2 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555711c7aa4 00005555711c7aa0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555711c04a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557123820f 00005555712380b0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555711cb624 00005555711cb620 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030333935 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080f800305c0b080 801000020150d404 a090908010000201 50d4068010000280 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff fff3081080030030 656c69662f2e01ff ffffffffffffffef ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0802800303ffffff ff04001000108004 0f80040010000a01 2c9e007366706d74 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800401c708000601 2b9a000200070030 656c69662f2e01ff ffffffffffffffef ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0103ffffffff0400 10001080040f8004 0010000a012c9e00 020007007366706d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7401ffffffffffff fffff30810800300 30656c69662f2e01 ffffffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef080f800305c0b0 80801000020150d4 0002000704a09090 801000020150d400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200070680100002 800401c708000601 2b9a000200070030 656c69662f2e01ff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000002c46ac RBX=0000000000000001 RCX=ffffffff8b25d399 RDX=ffffed100d4e7026 RSI=ffffffff8bd1d240 RDI=ffffffff81647f5c RBP=ffffed1003b59910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dacc880 R14=ffffffff905fcbc8 R15=0000000000000000 RIP=ffffffff8b25e77f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005613cae07908 CR3=000000004f472000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0770c488 00007feb0770c480 00007feb0770c478 00007feb0770c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0826d100 00007feb0770c440 00007feb0770c458 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0770c498 00007feb0770c490 00007feb0770c488 00007feb0770c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000005d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=ffff88806a838128 RCX=ffffffff8169b2ce RDX=0000000000000000 RSI=ffffffff8bd1d240 RDI=ffffffff8da6cb90 RBP=0000000000000002 RSP=ffffc9000614f9d0 R8 =0000000000000000 R9 =fffffbfff20bf979 R10=ffffffff905fcbcf R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81738741 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feb0829cf98 CR3=000000004f472000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0770c488 00007feb0770c480 00007feb0770c478 00007feb0770c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0826d100 00007feb0770c440 00007feb0770c458 00007feb0770c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0770c498 00007feb0770c490 00007feb0770c488 00007feb0770c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000005d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff850d0570 RDI=ffffffff9aaf61c0 RBP=ffffffff9aaf6180 RSP=ffffc90005cdefe8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=fffffbfff355ec8a R15=dffffc0000000000 RIP=ffffffff850d0597 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f152360a6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feb082def98 CR3=00000000440e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000004 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb075f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0770c488 00007feb0770c480 00007feb0770c478 00007feb0770c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0826d100 00007feb0770c440 00007feb0770c458 00007feb0770c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb0770c498 00007feb0770c490 00007feb0770c488 00007feb0770c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000005d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000