last executing test programs:

14m32.526204927s ago: executing program 0 (id=213):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r1 = dup2(r0, 0xffffffffffffffff)
write$UHID_INPUT(r1, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006)
syz_open_dev$char_usb(0xc, 0xb4, 0x3ff)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2880c2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800200601fe800000000200000000dd0000eaff21ff0200"/51, @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB], 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240)={0xfffffffa, 0x80000001}, 0x8)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
close(r3)
r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x200c0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000180)=0xffff0001)

14m30.053942565s ago: executing program 0 (id=216):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0x4, [{0x0, 0xd0}, {}, {}, {}]}, 0x68)

14m22.850140643s ago: executing program 0 (id=233):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp6\x00')
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x1800800, &(0x7f00000003c0)='\xcd\xf99\x89a\xc0(4z\x95\x82\x92\xd2\x13\x8e\xf0S|\x06\x81\x843\xa1\xff%ma\xfdm};\x81\xac\xfd8\x9a\v\x8a\xe8F\xa5\xe1L\x9189\x10\x98N#6\xaf\xc4\x9b\xcdq\x97\xd4\x8c\xf0\xc1P3\x15\xa1$.\x95Oa\xd7\xfe\x1d\xf2\xe9\x05v\xd5\x92\xf1F\x7f\xdf\xb3\b\xa5f\xff\x8e0\x9d\x88r\x1d+\xc2\xd2\xf5\x01}\xa1\xd3)\xdd\xd2{\xe1%\xb0\xe3=b\xe6k\xed\x05C\xa4}\x14\xda\xb1J\x9b\xf1u\xc5\xfc\xe9(\xde\x8bG\xb7\xffqL\xdc\x16#\xe8\xd5\xd4B\x91\x84\x87>8\v\x88\xe7V')
chdir(&(0x7f00000000c0)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000020000, 0x4, 0x4, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r4 = syz_clone(0x2000000, &(0x7f00000024c0)="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", 0x55b, 0x0, 0x0, 0x0)
r5 = syz_open_procfs$namespace(r4, &(0x7f0000001380)='ns/uts\x00')
open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x801)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000008, &(0x7f00000000c0)=0x1, 0x4)

14m19.822460326s ago: executing program 0 (id=238):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0}}], 0x2, 0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0xf1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r0], 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x90}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc701000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741b0665bb33be6f0e742213d0bf5528a601b5934b867f39f7d776ac06a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd777791232d5db32d14bc1c3d000000000000000000000016a1049b6f094e504c28d7daa2f61b2a7c14d2343b4308b36e6b141371c958406e212b3accb45f87aef8bd5e2181fd7826b9e5cb2f6a63f113491239dca17e4fb33e670daf1cd7a99015ae9e1ca32b4e64dc38b55d525bd10971b0898be9d6e6154dfc99b20622b604b87ba03524c2fed51056d672b1b966657de5c86ab09195fba55af17663fecf1b5c5a76cf07615c7ee54c361449e275371a8c4243b9060ecdeecfb1603b061a8a62159830049061800953f7d00c43c95068c62c2ca1ad7fea9de97216dbc9c8e36a5607608e77d1d7d72b78b4f1eab8e40000000000000000adc90eb850f42f44e4b48c9cc39412c0ce6c9f4b95936ec36efc8dfbc54eb44affe1cd0f14d124df0c29c51b5628646b8155a1859358aa08f71fd2d9b2c4288a0d8870e8767173c65476e1a4f000c580f61d73f5be35ca1aa1235cf3096526dedec1199479b1b5adfaf2b6e05b7f90c9098ed4accddabd802ac5dc1b436e00"/738], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
unshare(0x22020600)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0xcb0a)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000002400)={{<r7=>r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x1, &(0x7f0000000240)={@align=0x10001, {0x6, 0xb242, 0x30, 0x9}}, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x400}, {[0x7fffffff, 0x3ff, 0x1, 0x5]}, 0x3, 0x80, &(0x7f0000002380)=""/128})
ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000002480)={0x8, 0x0, 0x0, 0x6, 0x2, 0x0, [{0x8, 0x3, 0x7, '\x00', 0x1c89}, {0x3, 0x7, 0x5, '\x00', 0x80}]})

14m18.842437518s ago: executing program 0 (id=243):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp6\x00')
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x1800800, &(0x7f00000003c0)='\xcd\xf99\x89a\xc0(4z\x95\x82\x92\xd2\x13\x8e\xf0S|\x06\x81\x843\xa1\xff%ma\xfdm};\x81\xac\xfd8\x9a\v\x8a\xe8F\xa5\xe1L\x9189\x10\x98N#6\xaf\xc4\x9b\xcdq\x97\xd4\x8c\xf0\xc1P3\x15\xa1$.\x95Oa\xd7\xfe\x1d\xf2\xe9\x05v\xd5\x92\xf1F\x7f\xdf\xb3\b\xa5f\xff\x8e0\x9d\x88r\x1d+\xc2\xd2\xf5\x01}\xa1\xd3)\xdd\xd2{\xe1%\xb0\xe3=b\xe6k\xed\x05C\xa4}\x14\xda\xb1J\x9b\xf1u\xc5\xfc\xe9(\xde\x8bG\xb7\xffqL\xdc\x16#\xe8\xd5\xd4B\x91\x84\x87>8\v\x88\xe7V')
chdir(&(0x7f00000000c0)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000020000, 0x4, 0x4, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r4 = syz_clone(0x2000000, &(0x7f00000024c0)="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", 0x55b, 0x0, 0x0, 0x0)
r5 = syz_open_procfs$namespace(r4, &(0x7f0000001380)='ns/uts\x00')
open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x801)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000008, &(0x7f00000000c0)=0x1, 0x4)

14m16.468290215s ago: executing program 0 (id=247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24000040)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@getchain={0x3c, 0x66, 0x200, 0x703d2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xb}, {0xfff2, 0x1}, {0xf}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000380)="81491d2bd82a38031f98f54bc4ebfa5c92ae4f3efca522e4d4c92916", 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00')

14m1.294062386s ago: executing program 32 (id=247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24000040)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@getchain={0x3c, 0x66, 0x200, 0x703d2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xb}, {0xfff2, 0x1}, {0xf}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000380)="81491d2bd82a38031f98f54bc4ebfa5c92ae4f3efca522e4d4c92916", 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00')

13m0.30847258s ago: executing program 5 (id=409):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000001080))
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000003c0)})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syslog(0x4, 0x0, 0x0)
syz_emit_ethernet(0x6c, &(0x7f0000000700)={@multicast, @remote, @void, {@x25={0x805, {0x0, 0x0, 0xec, "14a52bf88ee19efacbc69f68531953058fd7a1d3d4c17d059bb765fa671424fa2d6d52163744dbf3083d7c2b0e57360aa817680ac2ba1d24baa9fd5eb21c97613b4f711e4fdde81a0f6df833b91ad5317194e01e97e94ed805b8a7"}}}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x4, 0x2, 0x0, 0x2, 0x4000, 0xffffffffffffffff}, {0xfff, 0x800}, {0x3}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x26}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0)

12m58.998835077s ago: executing program 5 (id=413):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0xffffffffffffff23, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x400100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x408, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x5, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x8009, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1e, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x6, 0x8, 0x5, 0x48002, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0x4, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x101, 0x5, 0x80000001, 0x1, 0x0, 0xe0, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x4247dc8c, 0x6, 0x204, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x4, 0x120000, 0x9, 0x7fffffff, 0x7, 0x8, 0x80000004, 0x5, 0x7e5, 0x49, 0x9, 0x8, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x49, 0x1a, 0x2000004, 0x1ff, 0x844, 0x6, 0x10000, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0xfffffffe, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
sendmmsg(r2, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, &(0x7f0000000340))
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, 0x0, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000020008000400000000000c002e"], 0x70}, 0x1, 0x0, 0xa1ff, 0x800}, 0x40)

12m57.062607159s ago: executing program 5 (id=421):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x400, 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e26, 0xb, @mcast2, 0x9}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary)
keyctl$link(0x8, r4, r5)
ioctl$TCFLSH(r0, 0x540b, 0x2)

12m56.144665942s ago: executing program 5 (id=423):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0)
listen(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$RTC_UIE_ON(r2, 0x701d)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x60)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
exit(0x7)
statx(r6, 0x0, 0x1000, 0x10, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mlock(&(0x7f0000080000/0xf000)=nil, 0xf000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4fd201bf827546cd, 0x0)

12m51.700101759s ago: executing program 5 (id=434):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
shutdown(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0xae3e}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b062dbd7000ffdbdf25300000000500350008000000050033000900000005003600000000000800020077433b234d9dd8c6ca4728f0332e7c787bc81a307716e5403e2fd23b45a2073b6aecf11b24f01671fcd3b88c1fdd8b4deb3ded6e413383d3fcc0ee328ca9b47a29cf9e0013002f0a85d0f05547077d6b26af87140cbbb71c76a4abf68f6515dc54cb95f1530bfc11417abaf7de7b9b5d2a841f33746ea73687fb72a9dfa5081c552ea872497db7508e55504ce680f7", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)

12m50.202363464s ago: executing program 5 (id=436):
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
syz_open_procfs$pagemap(r0, &(0x7f0000000280))
socket$nl_route(0x10, 0x3, 0x0)
add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x6}, &(0x7f0000000100)=0x9c) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000380), 0x10, 0x0, r3}, 0x94) (rerun: 64)

12m34.248694268s ago: executing program 33 (id=436):
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
syz_open_procfs$pagemap(r0, &(0x7f0000000280))
socket$nl_route(0x10, 0x3, 0x0)
add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x6}, &(0x7f0000000100)=0x9c) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000380), 0x10, 0x0, r3}, 0x94) (rerun: 64)

9m11.870709939s ago: executing program 4 (id=1022):
syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[], 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x10000002)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
socket(0x2b, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a31000000002000078005000300200000000c00018008000140ffffffff08000840000000e4050005000200000005000100", @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

9m8.173483898s ago: executing program 4 (id=1034):
r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) (async)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x67, 0x6, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private0={0xfc, 0x0, '\x00', 0x4}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x3b, 0xb, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x7fff, 0x6]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hopopts={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x966, 0x1]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}]}}}], 0x118}}], 0x1, 0x810) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async, rerun: 32)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) (rerun: 32)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000002c0)={0x2, r0}) (async)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd20e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m7.65176194s ago: executing program 4 (id=1039):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x5})
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x32, 0x800000)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6})
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shutdown(r1, 0x0)
close(0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
listen(r4, 0x1)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)

9m7.521388122s ago: executing program 4 (id=1040):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xae}, [], {0x95, 0x0, 0x0, 0x13}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)

9m6.512257826s ago: executing program 4 (id=1043):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xa0480, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2)
close(0x3)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f0000000080)={[0xa]})
socket(0x10, 0x3, 0x0)

9m5.893519233s ago: executing program 4 (id=1044):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@const={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x3e}, 0x20)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f0000000080)={0x7, 0x1, 0x9}, 0x0)

8m50.829342127s ago: executing program 34 (id=1044):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@const={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x3e}, 0x20)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f0000000080)={0x7, 0x1, 0x9}, 0x0)

1m49.110301917s ago: executing program 7 (id=2110):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x541c00, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r0, 0x242c0000)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"a9887c4436d170f760d3cd69fb974bda", <r2=>0x0, 0x0, {0x8, 0x6}, {0x7, 0x2}, 0x4, [0xffffffffffffffff, 0x4, 0x7f, 0x3, 0x100000001, 0x7, 0x200, 0x8, 0x200000000000, 0x1, 0x80000000, 0x7fffffff, 0x3, 0x2, 0x100, 0x8]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{}, r2, 0xa, @unused=[0x5, 0x6, 0x1530e0b6, 0xfffffffffffffeff], @name="c191ff373db1f8ce3667a43cc7dc85b9b89a23aec8ba81c4fda7799acf61470ec3b242eb0c5858d71cad8a4d75f6cf1e8f7a09dcf15548b37fc498e93c9bd24274ddfb3d9e6d58e49fe6eb1b8e07c5a904a15cb6cd5af209bd68767fb0084fd19ff83e70516bdb45a8ea007b9aa132a0cd7812601f807b20cb4cdb40e8be6b283caa7c344b357ad2c63417bd08af140ab41837e722122052ce77f16ca3dc6920bc83c65506ab370c996f4f812900c882bf33693b138cff04fd5b718f7aaacedd1fde3827919c1a6945371ee777e94b8e11797ee8a997d70fbf00c2a4f4403e47f343c2dcc2a109397b38fbe9192d74c4e85c4e83c60f972fce773b9d4970136a574ea30739d33402a43bd66d4befbde6da9a18c051ff029b57b2e667fb79a316210c2c7b367acc42735662cef1720f77ac445c91a88cf676111c9a3296f7c99bb91f85521d019a1880ee04b2fe13a074a63a0befc2b3f6e59a57b24afca654fd33cd0d2ad956290b7dd5b6c72fafff0caa9e0aae7bb0f5bb98f258770d97dd3bf16cdaf2fcaa377dec17deab3adf760c42946746df2449dad603a729ab94342331887ae13c064ba5abdf9377fdabe94196f388a7c282ed562179cff90aa544fe53302aca0fe0f5fa9b483665faccdbcdf217b75af2a3c1c3a6e9ce4511642985ca3f286b6323723adc1092661475739d4287d5a83ebcf7dff068858d24984ef6410e8ed216454193b041b9a481eeb5d6860911459967dfd086d6487567bd966bc60493ab38fbc2588803c1dbe178f7a08db88eb2aab30cde762f95b0bbe4486af8d32bef2463feea54479032099057c5e6eb8f8f7aafa0e6422071d4cc5ceb6206a57148a1bb822d4d3e937927815f0d97577cd6e55b1a27b2f66f862877bdc2bfec891606d3881168233fcd6edcb56db6fa48cc48455eb74284001b460c22eaea3dd205b43708e8c1c11e3631713e38c48e3e473b2e0f080e225e447f4c7c8939d464da139dc8964121f46a9a3c46117665914a4a8a01c04777891e2365f518786f4b028f6c7687f8bea7d6f5256edd9d01274a7d847541b1cd7c36427d952f2008dcdc5476c8914f3fe9ae8eed1b0e29ab4aa15f16493eef22d0344e4fccd5b4be31a3e2b3d12508a5bebf5fb24ca8e545ed3c430f0a81584aa8b61b20c0eae350945154b4ec88177218afdd2fa830c64657f2febb92cd6190e5daa31cfaae138af2c863aeb14422198dbcc48942c6fc1e66c348a357dadf34a68ef3ca978119c4d2b250b19d8e7d14c560f938ef6a071b7e32a3fd4a992d0355d6c537786e8d3c4d65cee35ddea54737ff2ee781c924f52c94b9ab1da23f730c1bdd866e7206d2b8189e65398ddec4ea8df47e5927274483df8a08586089999901017878377d51588df48208edd82622c3fe997238ace0b52b26d8474c8ba0e8526b2948a06517e36351c929212045457ae12cbf2c23a9b09e5f42ccea0a1e38f353d2ec6f3e54755a825411e5872587cb01291dbfed6c192346a376780fd6eacf24883816e70eb05060b64ae792eab1bc2b8fbd0272b9f8d20d4b94ddf19c003d482c25ea3f54196d383f4f430f1b3466c858f381b724cf8b30437f371b6a8ff57a5bf509ca90ca9ebe0afbdfdda10f8707ea6a2539a8777d665d9013be13c5804541a2e73e330ba296a2e79ee0be355e661dfc5f591cccc8146ecaa0fe161b035b1a49886e963ecd503cd86ae1d3ed339c3d9306c982a89e73b98ceb844d4b1305b2411814b05a89b3131ac183c96708deb6e62e32c51ea1d352394b72d84169d021845c757ee569622fc0080ea9d719c4aa620d2ea45f1f9260d237447f89c4c75eb5f9018783c33c27d90d0bfe89d33099e463d5cf9ebfe58415595c1044ab30f742962e396ea98fbc2b6f36b6ade0f59266d5180f582ed5d5f7fcb40e21f43ac1bede0b4f954c48d6dce31cda4a8e2b643a4e958af67984827e3f65df5082b6952ea840e8c7b23e016988dcd92aeea8c703da4fb7cc0daec98c542a85582ba8c7d54e75cdf9cb3153e6a786d7c2a3afee71692e9526095e296f492fc598d97b61cb10e94be52f77c6b3ecba8cd3e08d9ee046a7d45a8671a716b89f8762e0fd34beadcb9c35f95010480a0049ae444bf41d483392e3fe87fdac48c4d99f2d3f5725736a802bec853030de92a9d86f5052eaa952a2139f157fd2007c1ac5b49f321c68e0e7bcfe84cceeb0fc2e0c7e432186dc3d84670ecc958862a7a5008a4ca8d162b42e5d9341ed71ed7f7fd44344a22fee77e4649582d709b70f1e09190a3e33ccedfb72a9f8fff71741f9890320faeee287bbeef58f15c0e60255ce9d6117d378a20ae479cd96670564edab52acd4541b14590c0e56b579785ec7a94e77e0deebe900082dc3f8b01e3fdc4284ba65ca47076e9f0716c530d74386150bcfd5d8b1be48035f49ae6c7e65632c61316ee28334b8d71573f7fecf5749814e3b82a8abd6727319916d87f35aae0f69ca675af85542199b57e024061ec6caf485eedc5b7c3f3579a06e9c8d06fa37054a3cb67f903648405b4fd12ff5aead338999da593f907063dbeeeab3d4694e61f13239e6eb88852fb711b873fe4841123085399a8d980e1a21e6560c2b0fadde4133d70428d2cf30e57b38e3c6c1e9a464c8ffa46d5d4ec7c543df1861e638cdc36c4b61714d1a050aca363c96cbbe5162d6f3ef6a0b7f2a1c6822cce58b29fe37457aa94741cac9fde3efc416a998dc49ee6b825583039bcb8224b02f0ca89fe1ddb5f6fa412ede03bbf5652d60d07c457944d5969dbbe8def3a94db28d14406f09246d3bb5c187e1c8edd25eb6e5e3f76017236cfc6b1617dc7fdaa9823829153f5df763a37f21e31ec1b179b2d9b831a0b5d0c54f0d4bef3d87aadde16979e2f7580bf1a24893a210b8cb539fd3b367164d9fcb7566bf060e3c8bbbc88e3ad26adf812d9a17e10af1a6893b36494b96b0e004822182d640ff1cb8bcac8c8d064dce6d2c71979518ce2e1be5cb3ded3667a7428453bf55601659ca8d9e3139f64f71514681fc634797435b33269ad700e0d52b492d4b9fd1f97b336ba3490272e8b33174d1194bbfa4caca72e61676a708a82fd7a4d40cb76fd06f44eaecdd7f79dde267b9188572d53934cf3825b2dd14a9a2f26deb27ddfad3365fb664f076335bcb9084924afd9fdaaba3802b75574281c6781f2e8f1d49cd52c0090892b84b7c2b7c780bc1cb9155dda252d0af09f32b46f76cd0431a943c008dbc37931dfbe7bd3e655624111f15cb30f3ec384fbaa81654f40192420f8e1e2e80010522499a8258a28adab604de94d43d16cabc7a15b6f3a1b3a84f92e501374ba014b3f0a835479bbdd9b665063a7e86a0127be3a94aac61ea3704b55b35161dd1872aece63778cc941aa431464e783ad2bbd3d1a8b1e1b7e5d851314b18c481888c0a39c6c1b4cf5d03b0896c797bacb57987ab8241ca83ec3a3216b1f6da1fc457a97e0cd002a7d5ba87f05396302e8e51a67e1e4b3fb580dec852ed9a1a0705e91e29761aef0d72f6f214376a021e08c6c76a23c5d610afafb2206bc037cc7f62bbd2ebc90843e92c720d0ee3fb58e6528023ced1ae8014d643f04184ea4af2b28cbeea2587254ad3ff0ff969615e387c0c62d07e5bf94e3517ba6dc75944335c417328e4cb167ce35b2fe2edd41463f866396c077ec3b8a2b735df87160c662c091971785973c296c611445fb41103d1b469c16e8454e6ac173e0fe41ce700830ad4ee9aedf5f58d47bd80afd5ead0389e778cb2acdf8c9b29e1bd02170775a425b352d64cf898f0caf8bb864e0ecd1e3deb3e48e237a59e02cd412926083abcc75519afb261190508613296c2170dfabf50c09124c1fc36d1e1bae035616885a018cf65cc3c18c7750cae20c1b5df05c9f455bf483bac43f06d47a20e4b207aaf7b9b9797f05c6e547deadda64d43266b6301c36edc50a09b437c53cde83665cb5d06358ac70587ab7c2510bc10fdcfc63661dc93734d27ced2465920c54eafb0682e6103ee434bd4f266104884ba8b9ec33aa104faa5992c2881a2f7dca61c44e265e9808a8584330c1382dae6bb6f20345f68e42ab7dd2a0312d11beba521cd9b27ffd4db79f8cc2c0940d708204f3eb3ea428eef88389cd6dbaf2fd6f0f38139f9e45437b943a00775913f2ed1311e3b694677ffa1e882aff9f3d2ef22810fe62086e49f115b030908c0afc71ab69f70a0c5119d991dba649749b3939f37e7a588395db9dba1681730331b071c3b5649cab11cb11469f9c02473a24942ea3f90b50a8ea63e5dcc5ce6c34ec4c5a82632bc661a832a8e850574c4fd6ba5eda57833036a4397d790efdaac815c39dce3e9a945eb0ba5cdda99173f18c2f91cf83c5151e9066a3f3c053c4977288c1619d42e0571b29ef66b40b29dddc7e7755d8a8d42e5ed2618a73b0c7dfbdd2e273f13b313699560c8757591fecdcc99482e0a5ae78e2ffeb6ed246c74305368b1839d1a83f9221090b239f462850a6461c26797b5580ad2e3677fc3afc493cf562cee4078a80dd970797f8f8b9ea55adb4b8fb3c3ba3a9668fac60fad04d5c1d6ebd155a5dacb4b299a12ed24a8b04a258a8e0b8ebb072ae1db3a146c3384cb3dae73583418ea5404822519473b90ab42efa91f16aab5a2de62b5477281706880d57ed997413444412a0e850dcb89808dfe3fe16fc7338833f0b89c36db0a65643d660958c4667968b84bcf0f0ee9e2daf4b34f758203d31bd988bad8f5f8c7c3104efc9a8c95495aac83a84a9598a33b92b56bc5f5cd21f273561e58eb20ee52d85e4efb1f358ec25b238eda653142fa8545493edb6e1d0c459a864d0eca9b5f7e90e6ed5bdb57cc89347e8d3a7e03181ab1ff1d723d6de58218493ce73f950325fc099bb0fea4ff0ce921ba8c6baf143891d8c0022d920d7d8d0269725a157a0fabf898ed7217c16b0c982a98a9f68e7213d0298154c31856a353c42dc80088d874d09a7d433fc7b8b6e9434323774d77a857ad6bd22df40cf8b758750dc2ca7d59f096154c9d248e5ba81962a3f17866f604bd36528f474a32cf35d4e63f20fe9f05f20c6151429887014fc97b424d0ac5a06711a008e17fe87feb162b253824be656b27976dccdcfefb5d2238e20753c6588b40cbf316b69347f70f5b41c96d4e1c8648205ca6f8e71a1bc3900d94ca0c62b83eb60d1eb136d010379f0d25e42e8b3449803cf7a65cda9f1007e7949cd0e1cff3c51a93d2c67df5b6c6951ded48b671cf1033d92535b62604ceb5f28eb23fee89d6164b3a18661d97bb92ef27eca5425663f508820e8bcf360ba244856a9386c7ec2905e5d881c87e005b7a2c8c96ca4b92e476514a06d8cf922ac2f06f2a29a44f26a7477b66add7127aa43cb72000ba4543a6749b8355fed0e80d5a311cabd1abb498ea9d09adef237add49bb9bdf89827b2a5a375778e61e0bc9ae092dc0fa37422d7dacf334d395b9f0c062fab95165a58a069930bb7cc26d14e243d50f20c976cf8123717dcd8ab8b7862d5d99bf850c1d253ca012808fe83f094fbee3bad1534c5e941df62629f44bfad465271fb81fc56a8145def9197a02d933a40e381d9c16806135d097d7cbf7e2996a6e653d1fc7177a11128e590227d3590dac3ef003a62f448da146f2208e51ddad5e231799726fc9f3cc"})
newfstatat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
quotactl_fd$Q_GETINFO(r0, 0x0, r3, &(0x7f0000001240))
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001280), 0x8881, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000012c0)={<r5=>0x0, 0x1, r0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001300)={<r6=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000001340)={<r7=>0x0, 0x1, r0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001380)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000001400)={&(0x7f00000013c0)=[r5, r6, r7, r8], 0x4})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@generic={&(0x7f0000001440)='./file0\x00', 0x0, 0x10}, 0x18)
rmdir(&(0x7f00000014c0)='./file0/file0\x00')
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001500)={{r1}, {@void, @max}})
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000001540)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x3, 0x5, 0x3, 0xac9, 0xb18d, 0x6, 0x5, 0x6, 0x7, 0x5, 0x7, 0x3, 0x3, 0x9, 0x10000, 0x2, 0x8, 0x4, 0xbbf, 0x2, 0x0, 0x9, 0xfffff556, 0x2, 0xd, 0x3, 0xfffffff7, 0x100, 0x401, 0x3, 0x5]})
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r4, 0xc0106450, &(0x7f0000001600)={<r9=>0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000001640)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$NILFS_IOCTL_GET_CPSTAT(r10, 0x80186e83, &(0x7f0000001680))
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x7)
getgid()
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r11 = syz_open_dev$cec(&(0x7f00000016c0), 0x0, 0x105801)
cachestat(r11, &(0x7f0000001700)={0x4, 0x7f}, &(0x7f0000001740), 0x0)
rename(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='./file0\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f0000001800), r0)
epoll_pwait(r0, &(0x7f0000001840)=[{}], 0x1, 0x8, &(0x7f0000001880)={[0x1]}, 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
read$msr(r0, &(0x7f00000018c0)=""/118, 0x76)

1m48.852667958s ago: executing program 7 (id=2112):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a054916c1daefacbba44be4516d4a3109be69fadbb59804db61952172fa8454456af0299aa82e99807f5269ebd89fd6baecb833b1d5b54a5b3b7b207ce8a3582a186e4f52842d218db07c47ac72fdbe7ad2e96d779ace50cb1f7b40a4665e5634409a766e48c3e5251ce3548e367495b1358ea8e1b2d89decde96d874d24ed42162f08942b5285790ed3a26aae9a88368cdf374e8e470b2bf43af181ec8cc778f23ecbd4dbc876cd1825fdc550a929efbf10d0defaee5837bcf40fcd289d631d40d9e965c110ae531c87d47d771d8"], 0xfdef)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'})
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrandom(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
socket$netlink(0x10, 0x3, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601030000000000000000010000000500010007000000a54cebfa95a0e9c041"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)

1m45.222906042s ago: executing program 7 (id=2121):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000002000000020000000000e800000000000000000105000000080000000000000001000085000000000000000001"], 0x0, 0x5a}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="5eeced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, &(0x7f0000000200)='m', 0x1)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100))
r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

1m45.024201889s ago: executing program 7 (id=2124):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44800)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000100)={0x2000})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x20014000}], 0x1, 0x0)

1m44.958919924s ago: executing program 7 (id=2126):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="050000000000e9dbdf050000000008000300", @ANYRES32=r5, @ANYBLOB="0c00238005000600ff"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002140)={&(0x7f0000000b80)={0x1514, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x808}, @NL80211_ATTR_PEER_MEASUREMENTS={0xaa0, 0x111, 0x0, 0x1, {0xa9c, 0x5, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x4}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x28c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x30}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xac}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}]}]}, {0x41c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x94b6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x301}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x27}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7c27}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x255}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2d0, 0x111, 0x0, 0x1, {0x2cc, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x688a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xed28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d3}]}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x750, 0x111, 0x0, 0x1, {0x74c, 0x5, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38d}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x371}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}]}, {0x534, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x37ed}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x354, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf62}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x1514}, 0x1, 0x0, 0x0, 0x811}, 0x4000)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

1m44.688523946s ago: executing program 7 (id=2128):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
dup(r0)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0)

1m44.176249732s ago: executing program 35 (id=2128):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
dup(r0)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0)

20.128223427s ago: executing program 8 (id=2365):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
bind$nfc_llcp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
socket$kcm(0x2a, 0x2, 0x0)
socket(0x1e, 0x5, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

19.350649289s ago: executing program 8 (id=2368):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
bind$nfc_llcp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
socket$kcm(0x2a, 0x2, 0x0)
socket(0x1e, 0x5, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0)
ioctl$TIOCGRS485(r7, 0x5453, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r8)
pread64(r8, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17.845778512s ago: executing program 8 (id=2372):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27032400000214000e00002fb96dffff1144ee163cddcb0000008000008276000000000000", 0x25}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)

17.801928351s ago: executing program 2 (id=2373):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x210c80, 0x0)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004500)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "2643dce015fda4df0f646eb478223fd5306ad932a4f9f83929d66eb19fdb43ff9b894e1ae5078798b0dfc10757a909a1268cb190dcb9c1274a00", 0x21}, 0x48, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @auto=[0x30, 0x54, 0x64, 0x37, 0x34, 0x36, 0x62, 0x63, 0x64, 0x66, 0x32, 0x65, 0x63, 0x37, 0x64, 0x39]}, &(0x7f0000000200)={0x0, "d424fba16b328309de4fba2c9cca2756e8b3b2435639a8a689a6cf00005872e90370c8492f7220d30a6938a77855cdd887eb5b403998eb0176007e5353cfe85d", 0x10}, 0x48, r1)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00'], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18150000", @ANYRES32=0x0, @ANYBLOB="000000000000002018", @ANYRES32=r2, @ANYRESHEX=0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0xe)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd)
ioctl$VT_OPENQRY(r4, 0x5600, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40448b5)
r5 = syz_pidfd_open(r0, 0x0)
setns(r5, 0x24020000)
syz_clone(0x930e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)

16.634742232s ago: executing program 2 (id=2376):
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '\x00'}, {}, {0x20, '\x00'}, {0x20, '&'}, {0x20, '#  \x17D\xd09\xd7r\xf7G6\x99\xe3\xc9x\xee\"yG\x80\x7f\xaa\xc8`<u\x82J\xfd\x18\n+168\r|\x98\x1a\xb5\xba\a\xb6\xfbW\b!8\x13\vx\xf6\x05\xa5\xe6Z\xdf\v\xed\x18\xcb\xc1\xddp\xbc\x8e\xfe\x06\xebZ\x9f\x7f\xe2\'C\xe1\xf6n\xc4gf\xff\xb5\xc9\xa6\xa5\xcbO\xd1\xe2'}, {0x20, '#! '}], 0xa, "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"}, 0x1b8)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000002)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000}}, {{0xa, 0x4e24, 0x0, @private2}}}, 0x108)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}, {0x0}], 0x2, 0x9, 0x100)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r7, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x27, &(0x7f0000001680)=0x5, 0x4)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2000)

15.196006109s ago: executing program 1 (id=2380):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c00565d60e3393cc10615987bb6861daae9b6875338ffaa9649ce70bc50781e315f180f54405dc8e7fb36ec684092a7efa9844abebf"])
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x20009, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x6c, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0xfffffffe, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x7, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x68, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x9, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x7, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x9, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x10, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x1, 0x3, 0x88, 0x2, 0xffffff80, 0x5, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x80005, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x1f, 0x136, 0x6]}, 0x45c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$cec(&(0x7f0000000480), 0x0, 0x481)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x10)
r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='personality\x00')
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000000)={0x0, 0x1, 0x3})
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r3])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r5, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0)
write$binfmt_script(r5, &(0x7f0000000400)={'#! ', '', [], 0xa, "201100000000b073dbc2e1e649efc1d73828a06efe233dc8013ff03212750dda49e8d9eed99dedf65d632853f4dfe6d11ac5eb9dc22d5ec2b368dd84d61c"}, 0xffffff9b)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x420080)
mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008, 0x10, r6, 0x82000000)

9.706317057s ago: executing program 2 (id=2393):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
bind$nfc_llcp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
socket$kcm(0x2a, 0x2, 0x0)
socket(0x1e, 0x5, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

9.445022971s ago: executing program 8 (id=2394):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
bind$nfc_llcp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
socket$kcm(0x2a, 0x2, 0x0)
socket(0x1e, 0x5, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0)
ioctl$TIOCGRS485(r7, 0x5453, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r8)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000080)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

9.41983322s ago: executing program 6 (id=2395):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x6170, 0x4)
sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2", 0xf}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015)
recvmmsg(r1, &(0x7f0000000380), 0x0, 0x2002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route(r0, 0x0, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c460504028d04000000000000000200060004000000f1020000380000005e020000080400000400200002"], 0x78)
close(r5)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001100)=ANY=[], 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)

9.225600642s ago: executing program 1 (id=2397):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp6\x00')
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x1800800, &(0x7f00000003c0)='\xcd\xf99\x89a\xc0(4z\x95\x82\x92\xd2\x13\x8e\xf0S|\x06\x81\x843\xa1\xff%ma\xfdm};\x81\xac\xfd8\x9a\v\x8a\xe8F\xa5\xe1L\x9189\x10\x98N#6\xaf\xc4\x9b\xcdq\x97\xd4\x8c\xf0\xc1P3\x15\xa1$.\x95Oa\xd7\xfe\x1d\xf2\xe9\x05v\xd5\x92\xf1F\x7f\xdf\xb3\b\xa5f\xff\x8e0\x9d\x88r\x1d+\xc2\xd2\xf5\x01}\xa1\xd3)\xdd\xd2{\xe1%\xb0\xe3=b\xe6k\xed\x05C\xa4}\x14\xda\xb1J\x9b\xf1u\xc5\xfc\xe9(\xde\x8bG\xb7\xffqL\xdc\x16#\xe8\xd5\xd4B\x91\x84\x87>8\v\x88\xe7V')
chdir(&(0x7f00000000c0)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000020000, 0x4, 0x4, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
socket(0x18, 0x2, 0x6)
r4 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs$namespace(r4, &(0x7f0000001380)='ns/uts\x00')
open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x801)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000008, &(0x7f00000000c0)=0x1, 0x4)

8.638591527s ago: executing program 2 (id=2399):
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(r1, 0x6, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x2, @remote, 0x41}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003180), 0x0, 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f00000072c0)={&(0x7f0000007280)={&(0x7f0000007200)="40ca7c", 0x3, 0x1, 0x1, 0x7}}, 0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100ffef0000040000000300000a500000000c0a010100000000000000000a0000060900020073797a310000040009000100e7ab834f115b829b0d0c10e0e4d273797a3100000000240003801c0000800c00018006000100d10300000c00d7ab000000002df31ab304000080140000261100010010000000000000000100000a10fe64d6f0bc0c2cd1c11ee19a9d0bb1004d3b76db2922224ebb15474302ebd255494117c42753bcbc58b5ab41139e640b7eee4bbd274567998850f02020c4a4b0351e409323d6a40d845c8b5c8735b67a56bf5040f80729d52d4907c2bf59abc89fafaa"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$FIONCLEX(r4, 0x5450)

8.584131068s ago: executing program 3 (id=2400):
syz_emit_ethernet(0x5e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0)
creat(&(0x7f0000001440)='./file0\x00', 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44)
fcntl$setlease(r1, 0x400, 0x0)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r2, 0x5402, 0x0)
write$binfmt_aout(r2, 0x0, 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
syz_open_pts(r2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003f80)={0x2020}, 0x1e04)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x200fffe, 0xe, 0x55, &(0x7f0000000240)="a06a0064d082778c19380e07c428bd434e3d40cbdb66d20f5732e9d042f0e6002d647aa34bc8226c696919aad7c0525b710a4f4f9bfd6a55a0b5fabed5fd55ea54ae8a36f1cbc7eeab3a6f427d7547ed23dac616de56acf1d984e272c8c0f926136ed8d5e4f87436bf2885d6ec504b8388c8632edc90ca3fbe90ab66ffe4669bdbc67cf2931ebbccf74cde8bb1781b5a54b30e1e4a51841080e2f4f380bec6000000", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x44, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4, 0x40}, 0x28)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4)

7.657878993s ago: executing program 8 (id=2401):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001800ffff2cbd7000010000010a000000ff00000900"], 0x2c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff64e4ff030000df2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00011f69703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080)

7.459845325s ago: executing program 3 (id=2402):
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/23, @ANYRES32, @ANYBLOB="00000000fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x3f00]}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)

7.388855414s ago: executing program 8 (id=2403):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601020000000000000000030000030500010007001cbc113ce2d0"], 0x1c}}, 0x4000040)
r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800)
bind$vsock_stream(r3, 0x0, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000040)=0x2, 0x5)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
lseek(r5, 0x8000000000000000, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

7.37809467s ago: executing program 2 (id=2404):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27032400000214000e00002fb96dffff1144ee163cddcb0000008000008276000000000000", 0x25}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)

6.940489702s ago: executing program 1 (id=2405):
r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x48c02, 0x0)
readv(r0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000580)={0x6, 0x118, 0xfa00, {{0x8001, 0x0, "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", 0x6, 0x1, 0x8, 0x5, 0x3, 0x10, 0xcc}}}, 0x120)
bind$tipc(r4, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x4, 0x3}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, 0x0}, 0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r7=>0x0})
r8 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
r9 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000180)=0x80)
write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000000)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r8, 0x0, 0x0)
close(r8)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800b00010067656e657665000018000280140007002001000000000400000000000000000008000a005b5e8a60437c4aa3a0ee84df57f1d2f267a0ddbd4a1ea88047f9ab5dd295c374ac88b3dc99971c3f73adbba80cbead71579a48046230f70243afcb8b2c5aef3e53108dad00730cf9c8d38924d07442b02350ab9089e7436b5e9d17875de0ad7ce2232b3b818f3c4092f1a9ea81a58db7c20f459bcb8222964fb88d4ebda71d6ecd86d863e50798c179002616a44cc873fe4acb0e2c", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

6.880730707s ago: executing program 3 (id=2406):
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000300), 0x0, 0x2, 0x0) (async)
syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) (async)
socket$netlink(0x10, 0x3, 0x14)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r0, 0x0, 0x8})
setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000004a40)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @local, 0x4}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x4ac8, @private0, 0x9}, 0x1c, &(0x7f0000004700)=[{&(0x7f0000000780)='2U', 0x2}], 0x1}}], 0x2, 0x0) (async)
shutdown(r5, 0x1) (async)
setsockopt(r5, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) (async)
ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f00000000c0)={0xcb, "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"})
ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000340)=r0) (async)
r7 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$xdp(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)='~', 0x1}], 0x1, 0x0, 0x0, 0x44}, 0x2c090) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x43}}, 0x0) (async)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x1f, 0x4, 0x3f, 0x4, @vifc_lcl_addr=@remote, @private=0xa010105}, 0x10)

6.73600793s ago: executing program 6 (id=2407):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
r2 = syz_pidfd_open(r1, 0x0)
flistxattr(r2, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0xc000800)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0xf002, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)

5.912969336s ago: executing program 3 (id=2408):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000002600010000002f000000000006"], 0x14}], 0x1}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
listen(0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, 0x0, 0x0)

5.674237436s ago: executing program 1 (id=2409):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003401300000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0)

4.500462454s ago: executing program 6 (id=2410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000040027bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="04001400"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'macvtap0\x00', @random="a6de9e2c7fdb"})

4.396852686s ago: executing program 6 (id=2411):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4e21, 0x5, @loopback}}}, 0x88)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4000845)

4.345779277s ago: executing program 3 (id=2412):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x335000, 0x1000, 0x3, 0x1f}, 0x20)
syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x40, 0xf, 0x51, {0x51, 0x2, "3d8041909ce0ecd4317f4f468e0c3f922aa10f90756885430e8a6356304b862252dd50f3c3d25d07b3d7ad4a1b1d4582a8c77a6a8276cf535b021b13c0688ba9948753fd87ca6a7f592d6cb357b25e"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x0, 0x85, "35bc99787b0a38e39baad81f6b0505ba3d69d82221235b7e49b912e7897030cb18a4516f6f950ba388d17e31cd4f8899615dd368bd541e3823b3798f22d099ef1e5848bb5cf3f0ebb57e67d0bdaaf5c9640661c8984d6fda4da5fe5bb7703475661c15a4c5c8a13b63d0690127f5b4b96aff9d66c25cd10e060a1babfe56665f9841eab0df"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xa7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x81, 0x2, 'fM'}, &(0x7f0000000440)={0x20, 0x82, 0x1, "03"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "94341f"}, &(0x7f00000004c0)={0x20, 0x84, 0x4, "9b178d2f"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "47d32f"}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x6031, 0x4})
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xefc8, 0x1f480, 0x0, 0x332})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a00000004"], 0x48)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e000"], 0x14)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6)
io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

3.613309995s ago: executing program 1 (id=2413):
syz_emit_ethernet(0x5e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0)
creat(&(0x7f0000001440)='./file0\x00', 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44)
fcntl$setlease(r1, 0x400, 0x0)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r2, 0x5402, 0x0)
write$binfmt_aout(r2, 0x0, 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
syz_open_pts(r2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003f80)={0x2020}, 0x1e04)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x200fffe, 0xe, 0x55, &(0x7f0000000240)="a06a0064d082778c19380e07c428bd434e3d40cbdb66d20f5732e9d042f0e6002d647aa34bc8226c696919aad7c0525b710a4f4f9bfd6a55a0b5fabed5fd55ea54ae8a36f1cbc7eeab3a6f427d7547ed23dac616de56acf1d984e272c8c0f926136ed8d5e4f87436bf2885d6ec504b8388c8632edc90ca3fbe90ab66ffe4669bdbc67cf2931ebbccf74cde8bb1781b5a54b30e1e4a51841080e2f4f380bec6000000", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x44, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4, 0x40}, 0x28)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4)

3.450228458s ago: executing program 6 (id=2414):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x130, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x66}}}}, [@NL80211_ATTR_KEYS={0xe0, 0x51, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "1fbf2abe93"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a215949a94c3fcb816bf841dd"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e8888597f3"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_SEQ={0x14, 0x4, "bf2020c64f5baf256683d16f8eddf953"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "746338090516a4f21376b8d25d"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc000000, {0x1, 0x1, 0x7, 0x9}}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6}]}, 0x130}, 0x1, 0x0, 0x0, 0x200040d0}, 0x20040040)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x4c1})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0x0, 0xe000, 0x8})

138.569552ms ago: executing program 2 (id=2415):
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(r1, 0x6, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x2, @remote, 0x41}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003180), 0x0, 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f00000072c0)={&(0x7f0000007280)={&(0x7f0000007200)="40ca7c", 0x3, 0x1, 0x1, 0x7}}, 0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100ffef0000040000000300000a500000000c0a010100000000000000000a0000060900020073797a310000040009000100e7ab834f115b829b0d0c10e0e4d273797a3100000000240003801c0000800c00018006000100d10300000c00d7ab000000002df31ab304000080140000261100010010000000000000000100000a10fe64d6f0bc0c2cd1c11ee19a9d0bb1004d3b76db2922224ebb15474302ebd255494117c42753bcbc58b5ab41139e640b7eee4bbd274567998850f02020c4a4b0351e409323d6a40d845c8b5c8735b67a56bf5040f80729d52d4907c2bf59abc89fafaa"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$FIONCLEX(r4, 0x5450)

112.528355ms ago: executing program 1 (id=2416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000140)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffed, r3, 0x0}])
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
io_getevents(r4, 0x4, 0x0, &(0x7f0000000580), &(0x7f0000000440)={0x77359400})
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003fc2f6240c40911003806010203010902240001720610060904f0e802b51c800309050102ff03ff1081"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$cdc_ncm(r5, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="00231eabf39b068ae1e4ad011c8341740000001e21d6813216510729b6663135681c92ca678fafe1000000000000000000"], &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x20, 0xd, 0x2c, "f1ea8cee016cc33ae140a638db53c6d8794813f0c158199b760efbd9f5fbd4a6cc52ef8689045073a9eb5f42"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x8, 0x7, 0x1, 0xf922, 0x6ad9, 0xd, 0x7, 0x6, 0x4, 0x7fff, 0x31f9, 0xff}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x10000}, &(0x7f0000000780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x4}, 0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="f8ab9b936f8767fb6985743311db234d48617336e551f6eded0bed9490f2b713b9283445882b59a97a818c86583e966ef212d9ab183a00998d384a19d8248918c8f2fd26d308b5546202a02280632a9ab3b191274e21635732d05d21be28b9c5f615eb208dd30549e0b3ac2638c7c40492b947f47a65ea099f13e019e8b29ca238b55ab72e637030101ce869660492abd5df01e59f2031c078c2cdee1ce924ce128f569f8a2ac993665268adca5c51d2e65c8c4f2e6b35c246d44588e2baf0fc1ccc422d5730ff5573b1bbaaa9af0ea8f8c4b008075a09c9", 0xd8}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000041dca435"], 0x50, 0x800}}, {{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000000940)="84ae986bdb94e6eeaf77dcd3b8500bd4cedf5424ce3a15b8ce53f218052238459806ba8869a995998f39eb31f06b1a8fb422300aa26bca52673cf2e9237ef1dc47b414e3a2f424ec8abe7d87a4351e768e2d2a9b25979b580e5bffa57000fb4f4a690f089b4c73f2a64d2cc372d19a1c245d4059fb3d806eb0e7d13a2ca3beb30b851bfc51eb52388e8947d8381a8646ddf40840999a860c40a8dac26afbc75573cb2a1a8c4606f749a8e758b20cf8f6afd30fce96452fb512d13abcbf502c7a46e0f817f986bb23ee0a2ff24ef66563237f6ff5cb8ec359f7ccb846b67f2e9467cec918754386111bb6c5d9d61f", 0xee}, {&(0x7f0000000a40)="d067bfd32c2757c23fe88bb094b9c9940fc100223282c837381f16f9c70e2758eedd519fc458c22b0d4fecce42c9d366ca8e2086990f2578c25ef4eda95d65edf57d08f7927a813b8cb0614d011ab4649b9744c8ad86ad15476ca2be1c89a605ee7e865f6b55adac350a9223cf2225d2a0a048d7178ee3b8a124e08ca5a37d85d176337d46735251753a5170854d997cbbc16c671e1159c147f80df77740ef42c7c1b7d517b60c675f37542527", 0xad}, {&(0x7f0000000b00)="f80fa24c0f38648a28150506f1ffe2e166d40169df16344276ab532a1a5f769f3b7157d3e740a4ccd796", 0x2a}, {&(0x7f0000000b40)="c25d1aaa28693c9853595d1090e14729a711938b5fb2a53e4f5001f039040ab72d48d68414d11a7c4e6a734eb7eba84dc908da088b185cd376332babf6d5650c56d0fe903729a0da813dcd4739275ffe0af81819d86f196aa574c8dc90652ac6f649d945bab788bcf8cba2ecc10b2d8facc4dc14336497e8c871142bc420369f72f4f76c2d3df721f5a92d34ede58b090a0d559e5a591b465a04248908c2e22ea4f10427c56e83edcf5d37aab92903c5eb3c844059df", 0xb6}, {&(0x7f0000000e00)="028c3da72abc8a1501bbadc663d731707895b4301c8ce95487a456ab64abf90340cae4e7dc8a449d5c1955943439e86746bf8acd860601404a4cf06f6f4ddcd1bc826e3a1d24c43783d3e0956d945356f08c9d12c3d6a769cee236a779558fd1e1e2a5e8c8fbcd7084059bcbf94c2b4b8ff8dbb3a400d20ca014019ea018217498135ba669f7a14379dbe9d7215d8b8988046667b62591869cb0f7a831af5bfe6f48fd39871dc4622d77870ea3fedcc49d40812347e5595b5d17a35d2ffa0fcd138167c5982a5fbe5a9444d40690be3f8bb1fdb675b5f0690603b96c4f7079e9", 0xe0}, {&(0x7f0000000d00)="4be6ac9a3162fb32effa1e730885127375d705ab010abc93474b089212481f959ea7d3612ad8310248517158941b8f3c9ef42bd73f7a9d53f18e115edf86c00256ef3815905a7622dd0bcf00", 0x4c}, {&(0x7f0000000d80)="d4760aacad6970fdb99d6c4bc8cc1fe8e46b5a2baa7fc61bc224ecb6c12f2332bcc0aaa3725eb43f944cfc8ca6ad173885ab0a3b1696ab96a4ed7c900b9c38411afa0ef0c9b99a7d153d1809858fd5b70ee1ba95ffb5ee07e802077f2e56b70ebfafd1845617e3b54d41aa099e3055609b99516ce8ef", 0x76}, {&(0x7f0000002340)="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", 0x1000}], 0x8, &(0x7f00000033c0), 0x0, 0x40804}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003400)="2c79e999e682e6facdf695d23df18cdc6cec18ae492b3ffb9ba049d97a7173569ae454f3801b0707565e711a7ebfbd3213eabfe5a36015c7c7cd539ec9b53a73bb81bc4545a91c27000ac0231f7d6918c222065ea13002ddda6ef820d9c9b7ead3e7dbd6f2aa5eea9f8a85201352", 0x6e}, {&(0x7f0000003480)="18b6747abeb06facf8fb4fa5d902b8792cbdaf6f5d8ef10c93a4932cdb02bdfeed6905d20be9a272908ae269fe39ab56ba0a97e6c2c6450fe463950702f234acf072fb7eab790cb8f8cf77", 0x4b}, {&(0x7f0000003500)="c60ab299f42d73901628f8a3703d9dfbf1814f595b28", 0x16}, {&(0x7f0000003540)="1f4755340f5819727ad65ad7d3d7bde5a1c32c190de1c21a13192e808e3a877520c90d8dca8c5c6206fd5850985ce51c0245d36e2fa7ba0aa84433c0b180a95c8647172078f890009c26c7dae064dd14b7a0ccaebbe9", 0x56}, {&(0x7f00000035c0)="64941117873280b5d591932e1833bbf6b0454b4db4baacfc956b1a6b1ea2b48e7900147b7aa3cef64054aff6c854efca8bce20a07ce7b28a92705cc0a50ffbf92bef5ced452e2b4432b6cc6ed68b2e7945112855a441dce08fcd25790b8e0b8edb24a4847b84c2d3eb1657676f3867aeaa0f49d5abfd0775132064e58bfd460b0986b423b190535ae96de268ccbfdb373c8338a045644e0322c248aa52a20f52de9f877944f4b64f5994d3a10f9f4b5e03cb5e53813f8aac5b0f377f301d3a3196279a", 0xc3}], 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000100010000000100000032facff2a2d62f1b582f248f6c82738e65953000", @ANYRES32=r0, @ANYRES32], 0x18, 0x20009004}}, {{&(0x7f0000003780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003800)="256dff8fce016a182b902795acf13b6f34848fd4a7154fd842c38de49d087b23a3d69f7c17783e9244389870c73029528dce2d7813e697627470c48b1292", 0x3e}, {&(0x7f0000003840)="c1dbe33a174ce0788252d46ceacd33fbaadf4d1f6f78f44c848ab64d348c2b089e19382bb5896a6b08a9342e97dbb47e498d4b206a4ea1a385cc940f35d4d088fb8ab508b179d888d8756d34f92d9c76d12ee7e0785f819b2fdddf098135d4360bf3eeb0fef750b51046ff726721ac0b1b3c108e0fe407360149f4edc1aea3cc9d39c7089d693c23b21b373e7836b8dc74f53b2e0d5dc476f80bdd7040be055c1fedcd3eac", 0xa5}, {&(0x7f0000003900)="6d05b56ae4f76035e70cdb109cceb3940f8d5143d48dc0f909fe55097f7c9dd7", 0x20}, {&(0x7f0000003940)="f7aa61e3b09f435966a2d927fdcc5353aeb9d2fd8a479dbd55354fd64e638d9a716795d885aad3f8ccb0d523ae467d6bdff6d7e35d35136138c46740bffab8dbac8a8b318341e8a3bd", 0x49}, {&(0x7f00000039c0)="f530221f8228d4c693bf0e735e37f7ab7402591c497c4dc0e7ff4f5e8479694317679e144f99b57d690d", 0x2a}], 0x5, &(0x7f0000000f00)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000108000002000000c3b2788342894d5310d0c9d229eb70823d6fc99373910837d890473f8a0117f0f1c0ad0c0c6872e7c16804833ed83d2b3bf0bed234c368b1182cb10cc09daa1a5e71b6f699543fd054ea6fbb29fab5263087ff25382189051cc78bda5b2db54052ea8679e88bb78827757dc95b2e04c3cfc2c0a95dcdce8c5707e3a0dfa91cc0041b874657984672efa3b6f0b627aa5a165c9cdf73083aea88eec863", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4000000}}, {{&(0x7f0000005cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008300)=[{&(0x7f0000005d40)="eb11b37dcaefada72ce8870053ee8c85c088870c752d355545f70e7b992ba6696dc79946ae701a3b47a1f29507cc65e8b6d4c20d74edae0ad24c16a2ca0cc59d565ef6fe534ad0d0387d9acafc10f1a484c802106ed6ab56298fe709cbecbbac6c6bb7fe1cd1c01b8db7a29201c15735dd2e8045e42f46f615aab68628f68a924d9d1d19d752ee33649020ffd4a16db1cbc99ba9ea385006ea1ea65a7b16b56628294162b53bf190151db71e996433eb29dbc9799abe606fa7dd64a1aa9666", 0xbf}, {&(0x7f0000007e80)="90ca5a28af29cd550bbda820656096cf7ad3f18e753c443a32f9ea67c15d6ae0bff1898808eb33d203a975b3d2914b0a8fcd6aeab034644445931ed27951e5bdc5d528a811d4b4d24e68854865b60a41b145a54337f7801f12b77a4cda7186d4254265cd52b7b9a70ab2d7be623facb0c41528edec66c112a9ed197e5de427aaedb3c18a099aaea12a", 0x89}, {&(0x7f0000007f40)="25b5fe304125cdac531d91edb00b9e44c2b857df283b39efa1299e26b815bbfa09b3368752445f13f284ae1358b7da39616ba1ddb426198de6e344844e2fb0779d3dea36159ab552f35fc0fd287c1cd77cacd1961e797a977f99f746ca2c109913e4e6a27cf2ac3e1c34c8bf75560fec5bb06c49c2b0342c5fde82418e79beb2c7f3866e522b3619f68eb61e28ce11fc8eb74e47421059a3a14cce3dc8dd421dc095155259cbe55f7a7e7e9b", 0xac}, {&(0x7f0000008000)="b772b201d67876c71ef0d92c140b5a31a4ab7acfd3c0740b59436aa71a1f074d045f0cdc6e34145d94d5f84c16cc562341476eef20bc5c4e78d53f70428160258a862e6c9690f99c0536bbe0d07481655cfdc6d011e982f3b32ad2b299c8f0443d6c11c6b2ad0c147a547f0619ed03fa2ac98340deec9e696e45e721aca151416264777bcfcd01b4794f3a25a1a95f844022173f63eb2914c898b82f5b27183b7614f49be13469e485232cdd5bc8258c0d7c0074d3a78d4f25eea829df509518cc45", 0xc2}, {&(0x7f0000008100)="a099c36d5aaaeb6b527618662138deed8fa7df7a22748939c7b76f48441491a4882a7e244c5a1ed61dfc707fae5980e9f12d48aaaa8b6a759743f3f783e8be57b40e07d6f08f9b35b994aef6a39b8ecb4f1335288e97b791b6b6f097ee52035f9e1a9dba8211c0b2d7c728b264f6dc574226a2d3d019327f0fb6bde59eb24eaf1245e55764091174ebf614f81cd139fb63fbe44d3a9aff25639253deae", 0x9d}, {&(0x7f00000081c0)="e7112a0487dfa500024e38aaf3775278f852504b71d49f18d16850d49b50576620526cbb26fe8e2b5f7810a3a2102740e4f6efa1df104ccf8ec2dee12449c22d17acb41d62465a5932afc5602b1324dd06011638a3b41a8d66666a4fc6d3e09d0fe07df14e8ccee1f40b9022807c07a3e100acb6f208bd44222db079d1c3169314a935c65d67f9d768782e0d852f4ba63e3d7d7183", 0x95}, {&(0x7f0000008280)="533ad4ec2b7ff09f626bc4c843a2d234a1a8dc07dc698a3a49614d240bb94f108cc88109a60fe5517b843f940710d8460b7469b88b75c1568bd4349348382fe881e9c4b66ab23d", 0x47}], 0x7, &(0x7f000000a400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x81}}], 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4525, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x200008, 0x1, 0x1})
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0xfffffffd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4040880)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc044560f, &(0x7f00000001c0)=@fd={0x4, 0x1, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x2, 0xc, 0xfc, 0x5, 0x7, 0x0, "739c00"}, 0x4000000})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000480)=0x2)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00@\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2000000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc2c45513, 0x0)

32.748833ms ago: executing program 6 (id=2417):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)='\x00'/14, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

0s ago: executing program 3 (id=2418):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}})
r2 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000380), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
fchdir(r0)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)

kernel console output (not intermixed with test programs):

59.376760][   T29] audit: type=1400 audit(1777974612.209:1364): avc:  denied  { bind } for  pid=13757 comm="syz.7.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  859.397903][   T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  859.559403][   T29] audit: type=1400 audit(1777974612.219:1365): avc:  denied  { setopt } for  pid=13757 comm="syz.7.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  859.589463][T13763] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  859.596490][   T29] audit: type=1400 audit(1777974612.219:1366): avc:  denied  { accept } for  pid=13757 comm="syz.7.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  859.621924][   T29] audit: type=1400 audit(1777974612.229:1367): avc:  denied  { write } for  pid=13757 comm="syz.7.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  859.668490][   T24] usb 4-1: Using ep0 maxpacket: 16
[  859.688616][   T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  859.715271][   T29] audit: type=1400 audit(1777974612.229:1368): avc:  denied  { read } for  pid=13757 comm="syz.7.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  859.729543][   T24] usb 4-1: config 0 has no interface number 0
[  859.779360][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  859.911288][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.921460][   T24] usb 4-1: Product: syz
[  859.925667][   T24] usb 4-1: Manufacturer: syz
[  859.930558][   T24] usb 4-1: SerialNumber: syz
[  860.407323][   T24] usb 4-1: config 0 descriptor??
[  860.429338][   T24] hub 4-1:0.132: bad descriptor, ignoring hub
[  860.448025][   T24] hub 4-1:0.132: probe with driver hub failed with error -5
[  860.482418][   T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input39
[  860.555523][   T29] audit: type=1400 audit(1777974613.939:1369): avc:  denied  { setopt } for  pid=13773 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  860.576283][T13774] netlink: 'syz.1.1898': attribute type 39 has an invalid length.
[  860.716306][   T29] audit: type=1400 audit(1777974614.099:1370): avc:  denied  { getopt } for  pid=13773 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  860.754447][T13752] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  861.007945][ T5721] usb 4-1: USB disconnect, device number 45
[  861.065779][   T29] audit: type=1400 audit(1777974614.449:1371): avc:  denied  { read } for  pid=13782 comm="syz.7.1900" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  861.106872][   T29] audit: type=1400 audit(1777974614.479:1372): avc:  denied  { open } for  pid=13782 comm="syz.7.1900" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  862.499750][T13791] block device autoloading is deprecated and will be removed.
[  864.578624][T13807] dummy0: entered allmulticast mode
[  864.597063][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  864.597079][   T29] audit: type=1400 audit(1777974617.479:1374): avc:  denied  { write } for  pid=13801 comm="syz.3.1905" name="file0" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  864.736205][T13799] dummy0: left allmulticast mode
[  864.759350][   T29] audit: type=1400 audit(1777974617.479:1375): avc:  denied  { open } for  pid=13801 comm="syz.3.1905" path="/406/file0" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  864.974002][T13810] overlayfs: missing 'lowerdir'
[  865.010142][   T29] audit: type=1400 audit(1777974617.479:1376): avc:  denied  { ioctl } for  pid=13801 comm="syz.3.1905" path="/406/file0" dev="tmpfs" ino=2183 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  865.261705][T13814] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  866.693295][T13818] lo speed is unknown, defaulting to 1000
[  866.713920][T13818] lo speed is unknown, defaulting to 1000
[  868.265764][   T29] audit: type=1400 audit(1777974621.619:1377): avc:  denied  { mount } for  pid=13835 comm="syz.7.1914" name="/" dev="autofs" ino=48972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  868.351217][T13496] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  869.077780][    T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  869.443428][    T9] usb 2-1: Using ep0 maxpacket: 16
[  869.777053][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  869.790770][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  869.805403][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  869.816005][T13496] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  869.833401][T13848] dummy0: entered allmulticast mode
[  869.849227][T13496] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  869.882008][T13496] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  869.896318][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  869.933650][T13841] dummy0: left allmulticast mode
[  869.947684][T13496] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  869.952403][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  869.957729][T13496] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.029108][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  870.035846][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  870.045540][T13496] usb 7-1: config 0 descriptor??
[  870.072555][   T29] audit: type=1400 audit(1777974623.449:1378): avc:  denied  { create } for  pid=13851 comm="syz.2.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  870.110482][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'.
[  870.124167][   T29] audit: type=1400 audit(1777974623.499:1379): avc:  denied  { write } for  pid=13851 comm="syz.2.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  870.147798][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  870.162195][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  870.201789][    T9] usb 2-1: Manufacturer: syz
[  870.206428][   T29] audit: type=1400 audit(1777974623.499:1380): avc:  denied  { nlmsg_read } for  pid=13851 comm="syz.2.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  870.241853][    T9] usb 2-1: config 0 descriptor??
[  870.380873][T13859] overlayfs: missing 'lowerdir'
[  870.487888][T13853] netlink: 420 bytes leftover after parsing attributes in process `syz.2.1918'.
[  870.557906][    T9] rc_core: IR keymap rc-hauppauge not found
[  870.738886][   T29] audit: type=1400 audit(1777974624.109:1381): avc:  denied  { allowed } for  pid=13831 comm="syz.6.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  870.760699][    T9] Registered IR keymap rc-empty
[  870.777003][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  870.809825][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  870.848120][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  870.901833][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40
[  870.937415][T13496] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  870.992313][   T29] audit: type=1400 audit(1777974624.379:1382): avc:  denied  { ioctl } for  pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3367 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  871.039141][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.107676][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.287655][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.330049][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.357640][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.377692][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.397659][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.444305][T13496] usb 7-1: USB disconnect, device number 24
[  871.447654][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.501092][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.537716][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  871.582308][T13873] syzkaller0: entered promiscuous mode
[  871.589591][    T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  871.600654][T13873] syzkaller0: entered allmulticast mode
[  871.607415][    T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  871.657354][    T9] usb 2-1: USB disconnect, device number 41
[  871.827621][   T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  872.017986][   T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  872.054506][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.079983][   T24] usb 4-1: Product: syz
[  872.096504][   T24] usb 4-1: Manufacturer: syz
[  872.118968][   T24] usb 4-1: SerialNumber: syz
[  872.156476][   T24] usb 4-1: config 0 descriptor??
[  872.305681][T13496] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  872.490866][T13496] usb 2-1: Using ep0 maxpacket: 32
[  872.784075][T13496] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  872.804219][T13496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.824198][T13496] usb 2-1: config 0 descriptor??
[  872.849637][T13496] gspca_main: sunplus-2.14.0 probing 041e:400b
[  872.989300][   T24] usb 4-1: Firmware: major: 229, minor: 0, hardware type: ATUSB (0)
[  873.302239][   T24] usb 4-1: Read permanent extended address 00:00:00:00:00:00:00:4b from device
[  873.589808][T13895] xt_CT: You must specify a L4 protocol and not use inversions on it
[  873.824310][   T29] audit: type=1400 audit(1777974627.209:1383): avc:  denied  { read write } for  pid=13874 comm="syz.3.1922" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  874.150586][T13496] gspca_sunplus: reg_w_riv err -110
[  874.203816][T13496] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  874.255037][   T29] audit: type=1400 audit(1777974627.209:1384): avc:  denied  { open } for  pid=13874 comm="syz.3.1922" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  874.304817][   T24] usb 4-1: USB disconnect, device number 46
[  874.414072][   T29] audit: type=1400 audit(1777974627.729:1385): avc:  denied  { read } for  pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  874.523375][   T29] audit: type=1400 audit(1777974627.779:1386): avc:  denied  { search } for  pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  874.613698][   T29] audit: type=1400 audit(1777974627.779:1387): avc:  denied  { search } for  pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  875.057076][T13910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.078125][T13910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.383732][T13914] overlayfs: missing 'lowerdir'
[  876.220245][ T5734] usb 2-1: USB disconnect, device number 42
[  876.422913][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  876.422930][   T29] audit: type=1400 audit(1777974629.809:1392): avc:  denied  { ioctl } for  pid=13922 comm="syz.1.1935" path="socket:[49108]" dev="sockfs" ino=49108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  877.596320][   T29] audit: type=1326 audit(1777974630.979:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.2.1938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4bf9cdd9 code=0x7ffc0000
[  878.100104][T13934] FAULT_INJECTION: forcing a failure.
[  878.100104][T13934] name failslab, interval 1, probability 0, space 0, times 0
[  878.117701][   T29] audit: type=1326 audit(1777974631.479:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.2.1938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4bf9cdd9 code=0x7ffc0000
[  878.154078][T13934] CPU: 0 UID: 0 PID: 13934 Comm: syz.2.1938 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  878.154098][T13934] Tainted: [L]=SOFTLOCKUP
[  878.154102][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  878.154110][T13934] Call Trace:
[  878.154114][T13934]  <TASK>
[  878.154119][T13934]  dump_stack_lvl+0x100/0x190
[  878.154138][T13934]  should_fail_ex.cold+0x5/0xa
[  878.154154][T13934]  should_failslab+0xc2/0x120
[  878.154167][T13934]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  878.154184][T13934]  ? audit_log_start+0x29d/0x930
[  878.154198][T13934]  audit_log_start+0x29d/0x930
[  878.154211][T13934]  ? __pfx_audit_log_start+0x10/0x10
[  878.154223][T13934]  ? find_held_lock+0x2b/0x80
[  878.154235][T13934]  ? ksys_write+0x190/0x250
[  878.154247][T13934]  ? ksys_write+0x190/0x250
[  878.154262][T13934]  audit_seccomp+0x61/0x1f0
[  878.154280][T13934]  __seccomp_filter+0x896/0x1140
[  878.154300][T13934]  ? __pfx___seccomp_filter+0x10/0x10
[  878.154319][T13934]  ? xfd_validate_state+0x129/0x190
[  878.154332][T13934]  ? ksys_write+0x1ac/0x250
[  878.154347][T13934]  __secure_computing+0x221/0x2e0
[  878.154365][T13934]  do_syscall_64+0x5d8/0xf80
[  878.154379][T13934]  ? clear_bhb_loop+0x40/0x90
[  878.154393][T13934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.154405][T13934] RIP: 0033:0x7f2f4bf9cdd9
[  878.154416][T13934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  878.154427][T13934] RSP: 002b:00007f2f4a1ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb
[  878.154439][T13934] RAX: ffffffffffffffda RBX: 00007f2f4c215fa0 RCX: 00007f2f4bf9cdd9
[  878.154447][T13934] RDX: 00002000000002c0 RSI: 0000000000000008 RDI: 0000000000000000
[  878.154454][T13934] RBP: 00007f2f4a1ee090 R08: 0000000000000000 R09: 0000000000000000
[  878.154461][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.154467][T13934] R13: 00007f2f4c216038 R14: 00007f2f4c215fa0 R15: 00007fff1ffd6d58
[  878.154483][T13934]  </TASK>
[  878.154489][T13934] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  878.411546][   T29] audit: type=1326 audit(1777974631.479:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.2.1938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2f4bf9cdd9 code=0x7ffc0000
[  878.449235][   T29] audit: type=1326 audit(1777974631.479:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.2.1938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4bf9cdd9 code=0x7ffc0000
[  878.498644][T13934] audit: out of memory in audit_log_start
[  878.528214][   T29] audit: type=1326 audit(1777974631.479:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.2.1938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4bf9cdd9 code=0x7ffc0000
[  878.582297][   T29] audit: type=1326 audit(1777974631.479:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.2.1938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2f4bf9cdd9 code=0x7ffc0000
[  878.636862][   T29] audit: type=1326 audit(1777974631.479:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.2.1938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4bf9cdd9 code=0x7ffc0000
[  878.908851][T13496] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  879.087982][T13496] usb 2-1: Using ep0 maxpacket: 32
[  879.104038][T13496] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  879.116741][T13496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.446169][T13496] usb 2-1: config 0 descriptor??
[  879.837848][    T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  880.013658][T13954] overlayfs: missing 'lowerdir'
[  880.090741][T13496] gspca_main: sunplus-2.14.0 probing 041e:400b
[  880.212321][    T9] usb 7-1: device descriptor read/64, error -71
[  880.217621][ T5734] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  880.727630][    T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  881.017613][ T5734] usb 3-1: device descriptor read/64, error -71
[  881.217756][    T9] usb 7-1: device descriptor read/64, error -71
[  881.277645][ T5734] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  881.362381][    T9] usb usb7-port1: attempt power cycle
[  881.398947][T13941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  881.409583][T13941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  881.556644][ T5344] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  881.564480][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  881.564513][   T29] audit: type=1400 audit(1777974634.879:1412): avc:  denied  { setopt } for  pid=13970 comm="syz.7.1947" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  881.942623][T13496] gspca_sunplus: reg_w_riv err -110
[  881.951911][T13496] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  882.007665][ T5734] usb 3-1: device descriptor read/64, error -71
[  882.026090][   T29] audit: type=1400 audit(1777974634.889:1413): avc:  denied  { connect } for  pid=13970 comm="syz.7.1947" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  882.048825][   T29] audit: type=1400 audit(1777974634.889:1414): avc:  denied  { write } for  pid=13970 comm="syz.7.1947" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  882.207864][ T5734] usb usb3-port1: attempt power cycle
[  882.260670][ T5344] usb 4-1: Using ep0 maxpacket: 32
[  882.297069][ T5344] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  882.319189][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.373212][ T5344] usb 4-1: config 0 descriptor??
[  882.401296][ T5344] gspca_main: sunplus-2.14.0 probing 041e:400b
[  882.573202][   T29] audit: type=1400 audit(1777974635.959:1415): avc:  denied  { write } for  pid=13983 comm="syz.6.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  882.627477][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  882.827252][   T29] audit: type=1400 audit(1777974636.209:1416): avc:  denied  { setopt } for  pid=13985 comm="syz.6.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  883.015655][T13986] batman_adv: batadv0: Adding interface: macvtap1
[  883.052974][T13986] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  883.165655][T13986] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  883.267585][ T5734] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  883.318707][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short
[  883.369876][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  883.410249][ T5734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  883.439376][ T5734] usb 3-1: string descriptor 0 read error: -22
[  883.452192][    T9] usb 2-1: USB disconnect, device number 43
[  883.456128][ T5734] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  883.493963][   T29] audit: type=1400 audit(1777974636.879:1417): avc:  denied  { nlmsg_write } for  pid=13989 comm="syz.6.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  883.545146][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.611839][   T29] audit: type=1400 audit(1777974636.999:1418): avc:  denied  { ioctl } for  pid=13989 comm="syz.6.1953" path="socket:[49515]" dev="sockfs" ino=49515 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  883.648119][ T5734] usb 3-1: selecting invalid altsetting 1
[  883.681458][ T5734] usb 3-1: unit 3 not found!
[  883.733222][T13969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  883.778173][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1954'.
[  883.784928][T13969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  883.829981][T13996] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1954'.
[  883.987791][ T5344] gspca_sunplus: reg_w_riv err -110
[  884.088268][ T5344] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  884.240420][ T5734] usb 3-1: cannot request logical cluster ID: 0 (err: -5)
[  884.262410][ T5734] usb 3-1: invalid MIXER UNIT descriptor 6
[  884.414359][ T5734] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -5
[  884.512674][T14003] overlayfs: missing 'lowerdir'
[  884.738418][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  884.841728][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  885.009927][T13496] usb 3-1: USB disconnect, device number 44
[  886.042762][ T5344] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  886.201318][ T5344] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  886.230197][    T9] usb 4-1: USB disconnect, device number 47
[  886.253050][ T5344] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  886.286658][ T5344] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  886.308154][ T5344] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.633855][T14007] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1957'.
[  887.960780][    T9] usb 8-1: USB disconnect, device number 21
[  888.941131][ T5734] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  890.691903][T14048] overlayfs: failed to resolve './file0/file1': -2
[  890.917264][   T29] audit: type=1400 audit(1777974644.289:1419): avc:  denied  { write } for  pid=14045 comm="syz.2.1968" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  890.955553][   T29] audit: type=1400 audit(1777974644.289:1420): avc:  denied  { map } for  pid=14045 comm="syz.2.1968" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  891.084906][   T29] audit: type=1400 audit(1777974644.339:1421): avc:  denied  { create } for  pid=14045 comm="syz.2.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  891.170677][   T29] audit: type=1400 audit(1777974644.349:1422): avc:  denied  { bind } for  pid=14045 comm="syz.2.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  891.260049][   T29] audit: type=1400 audit(1777974644.349:1423): avc:  denied  { connect } for  pid=14045 comm="syz.2.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  891.352164][   T29] audit: type=1400 audit(1777974644.739:1424): avc:  denied  { read write } for  pid=14054 comm="syz.7.1970" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  891.422630][T14057] lo speed is unknown, defaulting to 1000
[  891.444331][T14055] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  891.462300][   T29] audit: type=1400 audit(1777974644.769:1425): avc:  denied  { open } for  pid=14054 comm="syz.7.1970" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  891.490372][T14057] lo speed is unknown, defaulting to 1000
[  891.550316][   T29] audit: type=1400 audit(1777974644.789:1426): avc:  denied  { create } for  pid=14054 comm="syz.7.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  891.596372][T14055] netlink: 'syz.7.1970': attribute type 12 has an invalid length.
[  891.648707][   T29] audit: type=1400 audit(1777974644.789:1427): avc:  denied  { setopt } for  pid=14054 comm="syz.7.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  891.761093][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1973'.
[  891.860820][T14060] can0: slcan on ttyS3.
[  891.964411][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'.
[  892.252809][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'.
[  893.103702][   T29] audit: type=1400 audit(1777974646.249:1428): avc:  denied  { create } for  pid=14072 comm="syz.6.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  893.406116][T14064] bond1 (unregistering): Released all slaves
[  894.035808][T14078] vxfs: WRONG superblock magic 00000000 at 1
[  894.080478][T14078] vxfs: WRONG superblock magic 00000000 at 8
[  894.114497][T14076] dummy0: entered allmulticast mode
[  894.120108][T14076] dummy0: left allmulticast mode
[  894.297610][ T2166] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  894.324885][T14078] vxfs: can't find superblock.
[  894.449588][ T2166] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  894.460273][ T2166] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  894.476950][ T2166] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  894.497685][ T2166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.746502][T14058] can0 (unregistered): slcan off ttyS3.
[  894.890087][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1979'.
[  895.301963][T14106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1976'.
[  896.034752][ T5344] usb 2-1: USB disconnect, device number 44
[  896.545796][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  896.545815][   T29] audit: type=1400 audit(1777974649.469:1445): avc:  denied  { ioctl } for  pid=14120 comm="syz.2.1983" path="socket:[50542]" dev="sockfs" ino=50542 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  896.926111][   T29] audit: type=1400 audit(1777974650.309:1446): avc:  denied  { write } for  pid=14101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  897.013267][T14129] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1984'.
[  897.865252][   T29] audit: type=1400 audit(1777974651.249:1447): avc:  denied  { write } for  pid=14133 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  898.132919][ T5734] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  898.353281][T14151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1990'.
[  898.584325][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  899.482557][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  899.493331][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  899.506474][ T5734] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  899.515657][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.538889][ T5734] usb 2-1: config 0 descriptor??
[  900.068446][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'.
[  901.532587][ T5734] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  901.559050][ T5734] usb 2-1: USB disconnect, device number 45
[  902.146052][T14182] fido_id[14182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  903.457679][   T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  903.623501][   T10] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  903.650472][   T10] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  903.666654][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  903.687827][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.543719][T14200] FAULT_INJECTION: forcing a failure.
[  904.543719][T14200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  904.556974][T14200] CPU: 0 UID: 0 PID: 14200 Comm: syz.7.2003 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  904.557016][T14200] Tainted: [L]=SOFTLOCKUP
[  904.557024][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  904.557037][T14200] Call Trace:
[  904.557044][T14200]  <TASK>
[  904.557053][T14200]  dump_stack_lvl+0x100/0x190
[  904.557085][T14200]  should_fail_ex.cold+0x5/0xa
[  904.557115][T14200]  _copy_to_user+0x32/0xd0
[  904.557148][T14200]  simple_read_from_buffer+0xcb/0x170
[  904.557179][T14200]  proc_fail_nth_read+0x1af/0x230
[  904.557203][T14200]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  904.557229][T14200]  ? rw_verify_area+0xce/0x6d0
[  904.557249][T14200]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  904.557272][T14200]  vfs_read+0x1e4/0xb30
[  904.557302][T14200]  ? __pfx_vfs_read+0x10/0x10
[  904.557325][T14200]  ? __fget_files+0x215/0x3d0
[  904.557358][T14200]  ? __fget_files+0x21f/0x3d0
[  904.557392][T14200]  ksys_read+0x12a/0x250
[  904.557415][T14200]  ? __pfx_ksys_read+0x10/0x10
[  904.557440][T14200]  ? rcu_is_watching+0x12/0xc0
[  904.557477][T14200]  do_syscall_64+0x10b/0xf80
[  904.557500][T14200]  ? clear_bhb_loop+0x40/0x90
[  904.557524][T14200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.557544][T14200] RIP: 0033:0x7f7c0315d60e
[  904.557562][T14200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  904.557581][T14200] RSP: 002b:00007f7c04062fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  904.557601][T14200] RAX: ffffffffffffffda RBX: 00007f7c040636c0 RCX: 00007f7c0315d60e
[  904.557615][T14200] RDX: 000000000000000f RSI: 00007f7c040630a0 RDI: 000000000000000f
[  904.557628][T14200] RBP: 00007f7c04063090 R08: 0000000000000000 R09: 0000000000000000
[  904.557641][T14200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  904.557654][T14200] R13: 00007f7c03416218 R14: 00007f7c03416180 R15: 00007ffcd612fb58
[  904.557683][T14200]  </TASK>
[  905.019855][T14201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1999'.
[  906.325835][   T29] audit: type=1400 audit(1777974659.559:1448): avc:  denied  { ioctl } for  pid=14207 comm="syz.7.2005" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  907.422775][ T5734] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  907.737666][ T5734] usb 2-1: Using ep0 maxpacket: 32
[  907.752387][ T5734] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  908.178889][ T5734] usb 2-1: config 0 has no interface number 0
[  908.206497][ T5734] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  908.220519][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.230765][ T5734] usb 2-1: Product: syz
[  908.239070][ T5734] usb 2-1: Manufacturer: syz
[  908.244336][ T5734] usb 2-1: SerialNumber: syz
[  908.297598][ T5734] usb 2-1: config 0 descriptor??
[  908.337388][ T5734] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  908.595733][ T5734] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  908.694082][ T5734] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  908.867694][   T29] audit: type=1400 audit(1777974662.209:1449): avc:  denied  { bind } for  pid=14234 comm="syz.7.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  909.164388][T14219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.285991][T14219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.401467][T14241] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2014'.
[  909.490805][T14241] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2014'.
[  909.556486][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  909.622251][T14245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14245 comm=syz.7.2015
[  909.641059][   T10] usb 2-1: USB disconnect, device number 46
[  909.794227][T14240] syz.2.2012 (14240) used greatest stack depth: 18576 bytes left
[  909.799216][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  909.818613][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  909.833134][   T10] quatech2 2-1:0.51: device disconnected
[  909.896427][T14250] tmpfs: Unknown parameter 'q„ota'
[  909.942959][   T29] audit: type=1400 audit(1777974662.579:1450): avc:  denied  { firmware_load } for  pid=14236 comm="syz.2.2012" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  910.025713][   T29] audit: type=1400 audit(1777974663.229:1451): avc:  denied  { bind } for  pid=14246 comm="syz.6.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  910.102211][   T29] audit: type=1400 audit(1777974663.229:1452): avc:  denied  { node_bind } for  pid=14246 comm="syz.6.2016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  910.129667][T14252] fuse: Unknown parameter 'gromp_id'
[  910.208359][   T29] audit: type=1400 audit(1777974663.579:1453): avc:  denied  { ioctl } for  pid=14251 comm="syz.7.2017" path="socket:[50770]" dev="sockfs" ino=50770 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  910.246703][   T24] usb 4-1: USB disconnect, device number 49
[  912.155033][T14279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  912.287927][T14279] batman_adv: batadv0: Removing interface: batadv_slave_0
[  912.309012][T14279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  912.324239][T14279] batman_adv: batadv0: Removing interface: batadv_slave_1
[  912.397243][T14282] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  912.611415][T14288] dummy0: entered allmulticast mode
[  912.678366][ T5755] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  912.837806][ T5755] usb 2-1: Using ep0 maxpacket: 16
[  912.944719][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2028'.
[  912.968744][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2028'.
[  913.414172][ T5755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  913.450216][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  913.467789][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  913.482687][ T5755] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  913.497827][ T5755] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  913.523248][ T5755] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  913.545255][   T29] audit: type=1400 audit(1777974666.929:1454): avc:  denied  { read } for  pid=14299 comm="syz.3.2031" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  913.687286][ T5755] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  913.707603][ T5755] usb 2-1: Manufacturer: syz
[  913.715874][ T5755] usb 2-1: config 0 descriptor??
[  913.727576][   T29] audit: type=1400 audit(1777974666.929:1455): avc:  denied  { open } for  pid=14299 comm="syz.3.2031" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  913.741317][T14280] dummy0: left allmulticast mode
[  914.209487][   T29] audit: type=1400 audit(1777974666.929:1456): avc:  denied  { ioctl } for  pid=14299 comm="syz.3.2031" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  914.307917][ T5755] rc_core: IR keymap rc-hauppauge not found
[  914.313954][ T5755] Registered IR keymap rc-empty
[  914.324878][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.336307][T14311] fuse: Unknown parameter 'gromp_id'
[  914.367617][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.440535][ T5755] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  914.471157][ T5755] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41
[  914.486341][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.511480][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.537857][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.575929][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.608377][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.625611][   T29] audit: type=1400 audit(1777974668.009:1457): avc:  denied  { mount } for  pid=14313 comm="syz.3.2034" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  914.650045][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.677630][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.697642][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.721590][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.747748][ T5755] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  914.770778][ T5755] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  914.801125][ T5755] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  914.831085][ T5755] usb 2-1: USB disconnect, device number 47
[  914.899180][T14318] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  915.007717][   T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  915.036540][   T29] audit: type=1400 audit(1777974668.419:1458): avc:  denied  { bind } for  pid=14325 comm="syz.2.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  915.066053][   T29] audit: type=1400 audit(1777974668.449:1459): avc:  denied  { create } for  pid=14325 comm="syz.2.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  915.169573][   T10] usb 7-1: Using ep0 maxpacket: 32
[  915.184842][   T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  915.206397][   T10] usb 7-1: config 0 has no interface number 0
[  915.230055][   T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  915.390298][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.428682][   T10] usb 7-1: Product: syz
[  915.574334][   T10] usb 7-1: Manufacturer: syz
[  915.596122][   T10] usb 7-1: SerialNumber: syz
[  915.637434][   T10] usb 7-1: config 0 descriptor??
[  915.668597][   T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  915.871486][   T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  915.916931][   T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  915.947766][T13496] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  916.097879][T13496] usb 2-1: device descriptor read/64, error -71
[  916.797636][T13496] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  916.857967][   T29] audit: type=1326 audit(1777974670.249:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14340 comm="syz.7.2041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0319cdd9 code=0x7ffc0000
[  916.893514][   T29] audit: type=1326 audit(1777974670.249:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14340 comm="syz.7.2041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0319cdd9 code=0x7ffc0000
[  916.920915][   T29] audit: type=1326 audit(1777974670.269:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14340 comm="syz.7.2041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7c0319cdd9 code=0x7ffc0000
[  916.947598][T13496] usb 2-1: device descriptor read/64, error -71
[  916.960020][   T29] audit: type=1326 audit(1777974670.269:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14340 comm="syz.7.2041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0319cdd9 code=0x7ffc0000
[  917.110605][T13496] usb usb2-port1: attempt power cycle
[  917.447680][ T5755] usb 3-1: new low-speed USB device number 45 using dummy_hcd
[  917.455330][T13496] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  918.086822][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  918.107106][   T10] usb 7-1: USB disconnect, device number 28
[  918.648896][T13496] usb 2-1: device descriptor read/8, error -71
[  919.419609][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  919.583225][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  919.644504][ T5755] usb 3-1: Invalid ep0 maxpacket: 32
[  920.257819][ T5755] usb 3-1: new low-speed USB device number 46 using dummy_hcd
[  920.327041][   T10] quatech2 7-1:0.51: device disconnected
[  920.398732][T14364] fuse: Unknown parameter 'gromp_id'
[  921.545630][T14378] blktrace: Concurrent blktraces are not allowed on loop4
[  922.522197][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  922.522215][   T29] audit: type=1400 audit(1777974675.909:1496): avc:  denied  { read write } for  pid=14383 comm="syz.1.2053" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  922.606515][   T29] audit: type=1400 audit(1777974675.909:1497): avc:  denied  { open } for  pid=14383 comm="syz.1.2053" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  922.749056][T14382] overlayfs: failed to resolve './file0/file1': -2
[  923.211063][ T2166] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  923.379360][ T2166] usb 3-1: Using ep0 maxpacket: 32
[  923.399690][ T2166] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  923.424405][ T2166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.900128][ T2166] usb 3-1: config 0 descriptor??
[  924.004576][ T2166] gspca_main: sunplus-2.14.0 probing 041e:400b
[  924.875386][   T29] audit: type=1400 audit(1777974678.099:1498): avc:  denied  { read } for  pid=14405 comm="syz.3.2058" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  925.012376][   T29] audit: type=1400 audit(1777974678.109:1499): avc:  denied  { open } for  pid=14405 comm="syz.3.2058" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  925.953049][T14392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.967861][ T2166] gspca_sunplus: reg_w_riv err -110
[  925.976213][T14392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.992657][ T2166] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  925.998498][   T29] audit: type=1400 audit(1777974679.039:1500): avc:  denied  { create } for  pid=14403 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  926.022232][T14428] fuse: Unknown parameter 'gromp_id'
[  926.064760][   T29] audit: type=1400 audit(1777974679.049:1501): avc:  denied  { bind } for  pid=14403 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  926.109929][   T29] audit: type=1400 audit(1777974679.109:1502): avc:  denied  { listen } for  pid=14403 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  926.140953][   T29] audit: type=1400 audit(1777974679.109:1503): avc:  denied  { connect } for  pid=14403 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  926.163653][   T29] audit: type=1400 audit(1777974679.269:1504): avc:  denied  { accept } for  pid=14403 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  926.185067][   T29] audit: type=1400 audit(1777974679.439:1505): avc:  denied  { write } for  pid=14403 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  926.588268][T14443] random: crng reseeded on system resumption
[  927.273315][   T10] usb 3-1: USB disconnect, device number 47
[  927.395465][T14451] lo speed is unknown, defaulting to 1000
[  927.469553][T14451] lo speed is unknown, defaulting to 1000
[  929.488796][T14463] dummy0: entered allmulticast mode
[  929.699389][    T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  929.806159][T14448] dummy0: left allmulticast mode
[  929.867600][    T9] usb 7-1: Using ep0 maxpacket: 16
[  929.887776][    T9] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  929.940050][    T9] usb 7-1: config 0 has no interface number 0
[  929.992503][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2074'.
[  930.027962][   T29] audit: type=1400 audit(1777974683.339:1506): avc:  denied  { create } for  pid=14469 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  930.028300][    T9] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  930.286579][    T9] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  930.318166][    T9] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  930.327698][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.336612][    T9] usb 7-1: Product: syz
[  930.359319][    T9] usb 7-1: Manufacturer: syz
[  930.376937][    T9] usb 7-1: SerialNumber: syz
[  930.426987][    T9] usb 7-1: config 0 descriptor??
[  930.451299][T14466] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  930.479433][T14466] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  930.736914][T14466] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  930.760384][T14466] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  931.033070][   T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  931.063600][    T9] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  931.197722][   T10] usb 3-1: Using ep0 maxpacket: 16
[  931.209510][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  931.239504][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  931.265184][T14481] fuse: Unknown parameter 'gromp_id'
[  931.281479][T14466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  931.305565][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  931.332780][T14466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  931.347842][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  931.375298][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  931.397388][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  931.406730][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  931.470003][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  931.476420][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  931.531023][   T10] usb 3-1: Manufacturer: syz
[  931.537305][   T29] audit: type=1400 audit(1777974684.919:1507): avc:  denied  { create } for  pid=14465 comm="syz.6.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  931.539979][   T10] usb 3-1: config 0 descriptor??
[  931.636797][T14488] random: crng reseeded on system resumption
[  931.688080][ T2166] usb 4-1: new low-speed USB device number 50 using dummy_hcd
[  932.163293][    T9] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  932.191579][    T9] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  932.210559][   T10] rc_core: IR keymap rc-hauppauge not found
[  932.226698][   T10] Registered IR keymap rc-empty
[  932.233725][    T9] asix 7-1:0.34: probe with driver asix failed with error -71
[  932.243651][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.263374][ T2166] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  932.277639][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.279296][ T2166] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  932.303033][    T9] usb 7-1: USB disconnect, device number 29
[  932.323479][ T2166] usb 4-1: config 0 has no interface number 0
[  932.342714][ T2166] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  932.344174][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  932.366130][ T2166] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  932.405939][T14493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2079'.
[  932.415891][ T2166] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  932.425546][T14493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2079'.
[  932.435066][ T2166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.443685][T14493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2079'.
[  932.455250][ T2166] usb 4-1: config 0 descriptor??
[  932.471281][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42
[  932.539793][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.556300][T14496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2080'.
[  932.569941][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.599182][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.627648][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.662694][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.708572][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.757643][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.791831][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.830994][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.857712][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  932.894425][   T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  932.898227][T13496] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  932.913602][   T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  932.937803][   T10] usb 3-1: USB disconnect, device number 48
[  933.110394][T13496] usb 2-1: Using ep0 maxpacket: 32
[  933.116456][   T29] audit: type=1400 audit(1777974686.499:1508): avc:  denied  { create } for  pid=14479 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  933.127242][ T2166] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input43
[  933.147593][   T29] audit: type=1400 audit(1777974686.509:1509): avc:  denied  { setopt } for  pid=14479 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  933.190313][T13496] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  933.201381][T13496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.600841][T13496] usb 2-1: config 0 descriptor??
[  933.617216][ T2166] input: failed to attach handler kbd to device input43, error: -5
[  933.641893][T13496] gspca_main: sunplus-2.14.0 probing 041e:400b
[  933.801511][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2083'.
[  935.270924][T14498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  935.296325][T14498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.688410][   T29] audit: type=1400 audit(1777974689.079:1510): avc:  denied  { unmount } for  pid=14507 comm="syz.6.2084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  935.850498][T14508] lo speed is unknown, defaulting to 1000
[  935.925413][T14508] lo speed is unknown, defaulting to 1000
[  936.283896][T13496] gspca_sunplus: reg_w_riv err -110
[  936.289695][T13496] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  936.874920][T14525] fuse: Unknown parameter 'gromp_id'
[  937.180079][ T5734] usb 2-1: USB disconnect, device number 52
[  938.144625][T13496] usb 4-1: USB disconnect, device number 50
[  939.015801][T14543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14543 comm=syz.7.2093
[  939.085005][   T29] audit: type=1400 audit(1777974692.469:1511): avc:  denied  { write } for  pid=14548 comm="syz.2.2097" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  939.122057][   T29] audit: type=1400 audit(1777974692.499:1512): avc:  denied  { setopt } for  pid=14548 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  939.266859][    T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  939.489661][    T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  939.527603][    T9] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  939.554320][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  939.563776][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.891689][T14558] random: crng reseeded on system resumption
[  940.914615][T14571] Cannot find add_set index 0 as target
[  941.297660][T14564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2096'.
[  941.308149][T14572] fuse: Unknown parameter 'gromp_id'
[  941.507460][T14578] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2106'.
[  941.537582][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  942.400804][    T9] usb 3-1: Using ep0 maxpacket: 32
[  942.583604][    T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  942.592997][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.625696][    T9] usb 3-1: config 0 descriptor??
[  942.638675][    T9] gspca_main: sunplus-2.14.0 probing 041e:400b
[  942.722522][   T29] audit: type=1400 audit(1777974696.109:1513): avc:  denied  { write } for  pid=14590 comm="syz.7.2110" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  942.854149][   T29] audit: type=1400 audit(1777974696.139:1514): avc:  denied  { create } for  pid=14590 comm="syz.7.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  943.587258][T14599] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2112'.
[  944.317429][T14570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.327871][T14570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  944.617253][ T2166] usb 2-1: USB disconnect, device number 53
[  945.666449][T14619] dummy0: entered allmulticast mode
[  945.773046][    T9] gspca_sunplus: reg_w_riv err -110
[  945.778439][    T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  945.869797][ T5734] usb 3-1: USB disconnect, device number 49
[  945.907590][ T5713] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  946.028990][T14610] dummy0: left allmulticast mode
[  946.247022][ T5713] usb 4-1: Using ep0 maxpacket: 16
[  946.261455][ T5713] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  946.279274][ T5713] usb 4-1: config 0 has no interface number 0
[  946.301186][ T5713] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  946.311427][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.319669][ T5713] usb 4-1: Product: syz
[  946.326321][ T5713] usb 4-1: Manufacturer: syz
[  946.361737][ T5713] usb 4-1: SerialNumber: syz
[  946.385161][ T5713] usb 4-1: config 0 descriptor??
[  946.411074][ T5713] hub 4-1:0.132: bad descriptor, ignoring hub
[  946.429066][ T5713] hub 4-1:0.132: probe with driver hub failed with error -5
[  946.466482][ T5713] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input44
[  946.469331][T14625] overlayfs: failed to clone lowerpath
[  946.804498][T14639] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2125'.
[  947.345286][ T1107] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  947.545614][ T1107] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  948.201004][ T1107] team0: Port device netdevsim1 removed
[  948.313080][ T1107] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  948.577549][ T5734] usb 4-1: USB disconnect, device number 51
[  948.585447][T14655] overlayfs: failed to clone lowerpath
[  948.655278][ T1107] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  948.675764][T14658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  948.691636][T14658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  948.702689][T14658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  948.710397][T14658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  948.718605][T14658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  948.753524][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  948.760861][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  948.771943][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  948.790274][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  948.803106][T14648] lo speed is unknown, defaulting to 1000
[  948.809003][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  948.829120][T14648] lo speed is unknown, defaulting to 1000
[  948.861131][   T29] audit: type=1400 audit(1777974702.249:1515): avc:  denied  { mounton } for  pid=14656 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  948.909712][ T5734] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  949.091727][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.141470][ T5734] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  949.290890][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.332305][ T5734] usb 4-1: Product: syz
[  949.355895][ T5734] usb 4-1: Manufacturer: syz
[  949.395014][ T5734] usb 4-1: SerialNumber: syz
[  949.449114][ T5734] usb 4-1: config 0 descriptor??
[  949.454328][ T1107] bridge_slave_1: left allmulticast mode
[  949.467230][ T1107] bridge_slave_1: left promiscuous mode
[  949.479701][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state
[  949.493073][ T1107] bridge_slave_0: left allmulticast mode
[  949.500822][ T1107] bridge_slave_0: left promiscuous mode
[  949.508267][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.525930][ T5734] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  949.776637][ T5734] usb 4-1: USB disconnect, device number 52
[  949.876776][ T1107] bond1 (unregistering): (slave vti0): Releasing backup interface
[  949.902356][ T1107] vti0 (unregistering): left promiscuous mode
[  950.060764][   T29] audit: type=1400 audit(1777974703.449:1516): avc:  denied  { write } for  pid=14671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  950.131370][   T29] audit: type=1400 audit(1777974703.509:1517): avc:  denied  { mount } for  pid=14690 comm="syz.6.2138" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  950.154511][T14691] fuse: fd is not a fuse device
[  950.180435][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  950.191943][   T29] audit: type=1400 audit(1777974703.579:1518): avc:  denied  { write } for  pid=14692 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  950.227880][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  950.240834][ T1107] bond0 (unregistering): Released all slaves
[  950.263048][ T1107] bond1 (unregistering): Released all slaves
[  950.296511][T14691] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2138'.
[  950.343520][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13
[  950.377402][ T1107] tipc: Left network mode
[  950.777619][ T5734] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  950.927162][ T5618] Bluetooth: hci0: command tx timeout
[  951.286926][ T1107] hsr_slave_0: left promiscuous mode
[  951.321275][ T1107] hsr_slave_1: left promiscuous mode
[  951.360831][ T1107] veth1_macvtap: left promiscuous mode
[  951.369561][ T5734] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  951.370958][ T1107] veth0_macvtap: left promiscuous mode
[  951.404674][ T5734] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  951.423432][ T1107] veth1_vlan: left promiscuous mode
[  951.426447][ T5734] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  951.453556][ T1107] veth0_vlan: left promiscuous mode
[  951.455702][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.689514][   T29] audit: type=1400 audit(1777974705.069:1519): avc:  denied  { write } for  pid=14703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  951.802460][T14701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2140'.
[  951.817088][   T10] usb 4-1: USB disconnect, device number 53
[  952.046774][   T29] audit: type=1400 audit(1777974705.429:1520): avc:  denied  { write } for  pid=14725 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  952.136734][ T1107] team0 (unregistering): Port device vlan0 removed
[  952.541216][   T29] audit: type=1400 audit(1777974705.789:1521): avc:  denied  { write } for  pid=14730 comm="syz.2.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  952.635403][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'.
[  952.678070][ T1107] team0 (unregistering): Port device team_slave_1 removed
[  952.692495][ T1107] team0 (unregistering): Port device team_slave_0 removed
[  952.884351][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14
[  952.891094][T14656] lo speed is unknown, defaulting to 1000
[  952.906575][ T5734] lo speed is unknown, defaulting to 1000
[  952.906650][ T5734] syz0: Port: 1 Link DOWN
[  952.993213][ T5618] Bluetooth: hci0: command tx timeout
[  953.038765][T14739] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2148'.
[  953.078861][T14739] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2148'.
[  953.175205][T14742] netlink: 'syz.6.2147': attribute type 10 has an invalid length.
[  953.183201][T14739] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2148'.
[  953.758992][   T35] smbdirect: ib_dev[syz0] removed
[  955.777102][   T29] audit: type=1400 audit(1777974709.159:1522): avc:  denied  { ioctl } for  pid=14748 comm="syz.2.2149" path="socket:[51882]" dev="sockfs" ino=51882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  955.825102][ T5618] Bluetooth: hci0: command tx timeout
[  957.323284][ T5713] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  957.453799][ T1107] IPVS: stop unused estimator thread 0...
[  957.677886][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  957.694765][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  957.705664][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  957.726938][ T5713] usb 4-1: device descriptor read/all, error -32
[  957.949501][T14658] Bluetooth: hci0: command tx timeout
[  958.612945][   T29] audit: type=1400 audit(1777974711.999:1523): avc:  denied  { write } for  pid=14749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  958.708165][ T5713] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  958.725369][T14656] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.753905][T14656] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.770637][T14656] bridge_slave_0: entered allmulticast mode
[  958.785849][T14656] bridge_slave_0: entered promiscuous mode
[  958.802762][   T29] audit: type=1400 audit(1777974712.189:1524): avc:  denied  { write } for  pid=14789 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  958.837108][T14656] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.856604][T14656] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.869702][T14656] bridge_slave_1: entered allmulticast mode
[  958.877722][T14656] bridge_slave_1: entered promiscuous mode
[  958.890476][ T5713] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  958.923097][ T5713] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  958.943546][T14656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  958.957468][ T5713] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  958.962325][T14656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  958.991688][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15
[  959.008398][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.131153][T14656] team0: Port device team_slave_0 added
[  959.162898][T14656] team0: Port device team_slave_1 added
[  959.242366][T14656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  959.280712][T14656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  959.379247][T14774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'.
[  959.419584][ T2166] usb 4-1: USB disconnect, device number 55
[  959.444376][T14656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  959.837595][ T5734] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  960.223168][T14656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  960.250874][T14656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  960.322709][T14656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  960.353010][   T29] audit: type=1400 audit(1777974713.739:1525): avc:  denied  { write } for  pid=14794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  960.399201][ T5734] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  960.417659][ T5734] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  960.445086][T14656] hsr_slave_0: entered promiscuous mode
[  960.451596][ T5734] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  960.474682][T14656] hsr_slave_1: entered promiscuous mode
[  960.488905][ T5734] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  960.568893][ T5734] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  960.722373][ T5734] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  960.804391][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.870399][ T5734] usb 3-1: Product: syz
[  960.915152][ T5734] usb 3-1: Manufacturer: syz
[  960.953267][ T5734] usb 3-1: SerialNumber: syz
[  961.198399][ T5734] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  961.271570][ T5734] imon 3-1:155.0: unable to initialize intf0, err -90
[  961.302193][ T5734] imon:imon_probe: failed to initialize context!
[  961.315177][   T29] audit: type=1400 audit(1777974714.699:1526): avc:  denied  { write } for  pid=14818 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  961.353961][ T5734] imon 3-1:155.0: unable to register, err -19
[  961.411277][ T5734] usb 3-1: USB disconnect, device number 50
[  961.425352][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16
[  961.444965][   T29] audit: type=1400 audit(1777974714.769:1527): avc:  denied  { mounton } for  pid=14817 comm="syz.3.2160" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  961.542466][   T29] audit: type=1400 audit(1777974714.769:1528): avc:  denied  { mount } for  pid=14817 comm="syz.3.2160" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  961.700522][T14836] fuse: Unknown parameter 'gromp_id'
[  962.900252][T14656] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  962.904691][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'.
[  962.943040][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  962.967258][T14656] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  962.990227][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  963.010855][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'.
[  963.013019][T14656] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  963.022966][ T5734] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  963.040570][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  963.049812][T14656] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  963.071013][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  963.189313][ T5734] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  963.217188][ T5734] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  963.240055][ T5734] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  963.262780][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.266855][T14867] lo speed is unknown, defaulting to 1000
[  963.281544][T14656] 8021q: adding VLAN 0 to HW filter on device bond0
[  963.326204][T14656] 8021q: adding VLAN 0 to HW filter on device team0
[  963.366882][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state
[  963.374043][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  963.419063][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.426196][ T7395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  963.977378][T14851] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2169'.
[  963.992412][ T5734] usb 4-1: USB disconnect, device number 56
[  964.104213][T14885] No such timeout policy "syz0"
[  964.490456][   T29] audit: type=1400 audit(1777974717.879:1529): avc:  denied  { mount } for  pid=14870 comm="syz.2.2166" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  964.584718][   T29] audit: type=1400 audit(1777974717.969:1530): avc:  denied  { unmount } for  pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  964.763524][T14892] netlink: 'syz.2.2176': attribute type 10 has an invalid length.
[  964.773886][T14867] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  964.845190][T14892] team0: Port device vlan0 added
[  965.574183][T14656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  965.623637][   T29] audit: type=1400 audit(1777974719.009:1531): avc:  denied  { read write } for  pid=14915 comm="syz.1.2182" name="cgroup.max.descendants" dev="cgroup2" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  965.672340][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2182'.
[  965.693405][   T29] audit: type=1400 audit(1777974719.039:1532): avc:  denied  { open } for  pid=14915 comm="syz.1.2182" path="<too_long>" dev="cgroup2" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  965.969273][ T5734] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  966.523087][T14931] FAULT_INJECTION: forcing a failure.
[  966.523087][T14931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  966.552997][T14931] CPU: 0 UID: 0 PID: 14931 Comm: syz.2.2184 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  966.553031][T14931] Tainted: [L]=SOFTLOCKUP
[  966.553039][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  966.553060][T14931] Call Trace:
[  966.553067][T14931]  <TASK>
[  966.553075][T14931]  dump_stack_lvl+0x100/0x190
[  966.553108][T14931]  should_fail_ex.cold+0x5/0xa
[  966.553138][T14931]  _copy_from_user+0x2e/0xd0
[  966.553171][T14931]  kvm_vm_ioctl+0xb31/0x4050
[  966.553214][T14931]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  966.553266][T14931]  ? kasan_quarantine_put+0x104/0x240
[  966.553298][T14931]  ? lockdep_hardirqs_on+0x78/0x100
[  966.553325][T14931]  ? find_held_lock+0x2b/0x80
[  966.553346][T14931]  ? tomoyo_path_number_perm+0x28f/0x580
[  966.553370][T14931]  ? tomoyo_path_number_perm+0x28f/0x580
[  966.553399][T14931]  ? tomoyo_path_number_perm+0x188/0x580
[  966.553426][T14931]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  966.553461][T14931]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  966.553488][T14931]  ? do_vfs_ioctl+0x226/0x13e0
[  966.553512][T14931]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  966.553534][T14931]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  966.553572][T14931]  ? __fget_files+0x215/0x3d0
[  966.553597][T14931]  ? hook_file_ioctl_common+0x149/0x410
[  966.553641][T14931]  ? selinux_file_ioctl+0x13b/0x290
[  966.553667][T14931]  ? selinux_file_ioctl+0xb6/0x290
[  966.553696][T14931]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  966.553727][T14931]  __x64_sys_ioctl+0x18e/0x210
[  966.553752][T14931]  do_syscall_64+0x10b/0xf80
[  966.553776][T14931]  ? clear_bhb_loop+0x40/0x90
[  966.553802][T14931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.553823][T14931] RIP: 0033:0x7f2f4bf9cdd9
[  966.553841][T14931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.553862][T14931] RSP: 002b:00007f2f4a1ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  966.553883][T14931] RAX: ffffffffffffffda RBX: 00007f2f4c215fa0 RCX: 00007f2f4bf9cdd9
[  966.553897][T14931] RDX: 0000200000000000 RSI: 000000004020aed2 RDI: 0000000000000004
[  966.553911][T14931] RBP: 00007f2f4a1ee090 R08: 0000000000000000 R09: 0000000000000000
[  966.553924][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  966.553936][T14931] R13: 00007f2f4c216038 R14: 00007f2f4c215fa0 R15: 00007fff1ffd6d58
[  966.553965][T14931]  </TASK>
[  966.657571][ T5734] usb 2-1: Using ep0 maxpacket: 32
[  966.686532][T14656] veth0_vlan: entered promiscuous mode
[  966.771421][ T5734] usb 2-1: config 0 has an invalid interface number: 151 but max is 0
[  966.782793][T14656] veth1_vlan: entered promiscuous mode
[  966.848388][ T5734] usb 2-1: config 0 has no interface number 0
[  966.854780][ T5734] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  966.865152][T14656] veth0_macvtap: entered promiscuous mode
[  966.866784][ T5734] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  966.880006][T14656] veth1_macvtap: entered promiscuous mode
[  966.889022][ T5734] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  966.899983][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.934430][ T5734] usb 2-1: Product: syz
[  966.942047][ T5734] usb 2-1: Manufacturer: syz
[  966.951429][ T5734] usb 2-1: SerialNumber: syz
[  966.961006][T14656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  966.974722][ T5734] usb 2-1: config 0 descriptor??
[  967.060101][T14939] overlayfs: failed to resolve './file0/file1': -2
[  967.126167][T14656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  967.520763][  T143] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  967.546993][  T143] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  967.571310][T14945] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2189'.
[  967.598697][  T143] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  967.628052][ T5734] usb 2-1: USB disconnect, device number 54
[  967.656090][  T143] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  967.679138][T11541] udevd[11541]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  967.897670][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.914137][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.925630][T14948] fuse: Unknown parameter 'gromp_id'
[  967.984952][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  968.009779][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  968.045847][   T29] audit: type=1400 audit(1777974721.429:1533): avc:  denied  { mounton } for  pid=14656 comm="syz-executor" path="/root/syzkaller.QwIMWq/syz-tmp" dev="sda1" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  968.117184][   T29] audit: type=1400 audit(1777974721.429:1534): avc:  denied  { mount } for  pid=14656 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  968.218355][   T29] audit: type=1400 audit(1777974721.549:1535): avc:  denied  { mounton } for  pid=14656 comm="syz-executor" path="/root/syzkaller.QwIMWq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  968.388037][   T29] audit: type=1400 audit(1777974721.549:1536): avc:  denied  { mounton } for  pid=14656 comm="syz-executor" path="/root/syzkaller.QwIMWq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  968.957175][T14960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2191'.
[  969.364652][   T29] audit: type=1400 audit(1777974721.579:1537): avc:  denied  { mounton } for  pid=14656 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  969.429312][   T29] audit: type=1400 audit(1777974721.579:1538): avc:  denied  { mount } for  pid=14656 comm="syz-executor" name="/" dev="gadgetfs" ino=8005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  969.537626][ T5713] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  969.586453][   T29] audit: type=1400 audit(1777974721.579:1539): avc:  denied  { mount } for  pid=14656 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  969.609812][   T29] audit: type=1400 audit(1777974721.579:1540): avc:  denied  { mounton } for  pid=14656 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  969.643718][   T29] audit: type=1400 audit(1777974721.579:1541): avc:  denied  { mount } for  pid=14656 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  969.769551][ T5713] usb 9-1: Using ep0 maxpacket: 32
[  970.101565][ T5713] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  970.127717][ T5713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.147584][ T2166] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  971.054718][ T5713] usb 9-1: config 0 descriptor??
[  971.085097][ T5713] gspca_main: sunplus-2.14.0 probing 041e:400b
[  971.179064][ T2166] usb 2-1: Using ep0 maxpacket: 16
[  971.294330][ T2166] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  971.380945][T14984] overlayfs: failed to resolve './file0/file1': -2
[  971.491482][ T2166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  971.502778][T14964] Bluetooth: MGMT ver 1.23
[  971.504586][ T2166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  971.504616][ T2166] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  971.504646][ T2166] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  971.506505][ T2166] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  971.506538][ T2166] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  971.506562][ T2166] usb 2-1: Manufacturer: syz
[  971.523556][ T2166] usb 2-1: config 0 descriptor??
[  972.114648][ T2166] rc_core: IR keymap rc-hauppauge not found
[  972.114666][ T2166] Registered IR keymap rc-empty
[  972.114763][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.137611][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.168390][ T2166] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  972.169707][ T2166] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input45
[  972.172646][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.189420][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.217786][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.249588][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.277960][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.298029][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.317894][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.339167][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.357883][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.377804][ T2166] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  972.410182][ T2166] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  972.410226][ T2166] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  972.445091][ T2166] usb 2-1: USB disconnect, device number 55
[  972.613691][   T29] audit: type=1400 audit(1777974725.999:1542): avc:  denied  { shutdown } for  pid=14976 comm="syz.2.2196" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  972.644506][T14999] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2203'.
[  972.802100][T14964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.805087][T14964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.817623][ T5344] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  972.926456][T15001] bridge0: port 2(bridge_slave_1) entered disabled state
[  972.926648][T15001] bridge0: port 1(bridge_slave_0) entered disabled state
[  972.979854][ T5344] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  972.979874][ T5344] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  972.979911][ T5344] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  972.979934][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.328143][T15013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2202'.
[  973.540116][T15004] usb 4-1: USB disconnect, device number 57
[  973.684689][T15017] fuse: Unknown parameter 'gromp_id'
[  973.768742][T15001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  973.774916][T15001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  973.977675][ T5713] gspca_sunplus: reg_w_riv err -110
[  973.977756][ T5713] sunplus 9-1:0.0: probe with driver sunplus failed with error -110
[  974.055730][T13496] lo speed is unknown, defaulting to 1000
[  974.055758][T13496] syz2: Port: 1 Link DOWN
[  974.056874][  T143] netdevsim netdevsim6 ªªªªª»: unset [0, 0] type 1 family 0 port 8472 - 0
[  974.056907][  T143] netdevsim netdevsim6 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.056944][  T143] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  974.056969][  T143] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.057023][  T143] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  974.057049][  T143] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.057079][  T143] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  974.076084][  T143] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  975.773404][T15021] usb 9-1: USB disconnect, device number 2
[  977.713514][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  977.713530][   T29] audit: type=1400 audit(1777974731.099:1548): avc:  denied  { name_bind } for  pid=15050 comm="syz.6.2213" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  977.939297][   T29] audit: type=1400 audit(1777974731.329:1549): avc:  denied  { write } for  pid=15027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  978.304432][   T29] audit: type=1400 audit(1777974731.679:1550): avc:  denied  { write } for  pid=15073 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  978.797638][T15006] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  978.959133][T15079] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096
[  979.129064][T15006] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  979.167355][T15006] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  979.167407][T15006] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  979.167435][T15006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.217339][T15090] fuse: Unknown parameter 'gromp_id'
[  980.165134][T15098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2218'.
[  980.391509][T15023] usb 4-1: USB disconnect, device number 58
[  980.522253][   T29] audit: type=1400 audit(1777974733.909:1551): avc:  denied  { ioctl } for  pid=15106 comm="syz.1.2224" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  981.605870][   T29] audit: type=1400 audit(1777974734.879:1552): avc:  denied  { write } for  pid=15083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  982.733767][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2231'.
[  982.766471][   T29] audit: type=1400 audit(1777974736.149:1553): avc:  denied  { write } for  pid=15135 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  982.887124][T15138] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2232'.
[  982.927245][T15138] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2232'.
[  983.077713][T15138] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2232'.
[  984.325293][T15144] fuse: Unknown parameter 'gromp_id'
[  985.187720][T15003] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  985.446545][T15003] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  985.593804][T15003] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  985.715830][T15003] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  985.848997][T15003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.649416][T15005] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[  987.359203][T15182] netlink: 'syz.6.2244': attribute type 10 has an invalid length.
[  987.373551][T15182] team0: Failed to send options change via netlink (err -105)
[  987.516713][T15005] usb 9-1: config index 0 descriptor too short (expected 6427, got 27)
[  987.525152][T15005] usb 9-1: config 0 has an invalid interface number: 21 but max is 0
[  987.534748][T15005] usb 9-1: config 0 has no interface number 0
[  987.541182][T15005] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  987.551506][T15005] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  987.561822][T15005] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  988.020943][   T29] audit: type=1400 audit(1777974740.739:1554): avc:  denied  { bind } for  pid=15181 comm="syz.6.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  988.052006][T15159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2239'.
[  988.066670][ T5344] usb 3-1: USB disconnect, device number 51
[  988.076769][T15182] team0: Port device dummy0 added
[  988.088187][T15005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.112507][T15005] usb 9-1: config 0 descriptor??
[  988.118133][T15182] geneve1: entered allmulticast mode
[  988.124780][T15182] netlink: 'syz.6.2244': attribute type 10 has an invalid length.
[  988.148762][T15182] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  988.319594][   T29] audit: type=1400 audit(1777974741.699:1555): avc:  denied  { write } for  pid=15148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.540884][   T29] audit: type=1400 audit(1777974741.929:1556): avc:  denied  { connect } for  pid=15198 comm="syz.1.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  988.581815][   T29] audit: type=1400 audit(1777974741.929:1557): avc:  denied  { read } for  pid=15198 comm="syz.1.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  988.606502][   T29] audit: type=1400 audit(1777974741.959:1558): avc:  denied  { write } for  pid=15199 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  989.884491][T15005] usb 9-1: USB disconnect, device number 3
[  990.355909][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'.
[  991.132456][T15221] fuse: Unknown parameter 'gromp_id'
[  991.174580][T15201] loop3: detected capacity change from 0 to 7
[  991.264612][T15201] Dev loop3: unable to read RDB block 7
[  991.278163][T15201]  loop3: AHDI p3 p4
[  991.288798][T15201] loop3: partition table partially beyond EOD, truncated
[  991.309160][T15201] loop3: p3 start 1702000233 is beyond EOD, truncated
[  992.143392][T15241] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2255'.
[  992.860483][   T29] audit: type=1400 audit(1777974746.249:1559): avc:  denied  { write } for  pid=15208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  992.912090][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  992.919003][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  993.177345][   T29] audit: type=1400 audit(1777974746.549:1560): avc:  denied  { write } for  pid=15256 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  993.296616][ T5344] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  993.579373][ T5344] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  993.589897][ T5344] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  993.610615][ T5344] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  993.646726][ T5344] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.214958][T15274] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2261'.
[  995.004708][T15005] usb 9-1: USB disconnect, device number 4
[  995.264534][T15273] overlay: ./file0 is not a directory
[  995.519885][T15291] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2268'.
[  997.266304][   T29] audit: type=1400 audit(1777974750.649:1561): avc:  denied  { read } for  pid=15296 comm="syz.3.2269" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  997.394165][T15301] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2271'.
[  997.402501][   T29] audit: type=1400 audit(1777974750.649:1562): avc:  denied  { open } for  pid=15296 comm="syz.3.2269" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  997.402556][   T29] audit: type=1400 audit(1777974750.679:1563): avc:  denied  { ioctl } for  pid=15296 comm="syz.3.2269" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  997.918605][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it
[  998.134580][   T29] audit: type=1400 audit(1777974751.519:1564): avc:  denied  { write } for  pid=15278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  998.265258][   T29] audit: type=1400 audit(1777974751.649:1565): avc:  denied  { write } for  pid=15314 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  998.381744][T14658] Bluetooth: hci0: link tx timeout
[  998.381843][T14658] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  998.692174][ T5618] Bluetooth: hci0: link tx timeout
[  998.705240][ T5618] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  998.713478][ T5618] Bluetooth: hci0: link tx timeout
[  998.718920][ T5618] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  999.113943][ T5618] Bluetooth: hci0: link tx timeout
[  999.119182][ T5618] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  999.631316][ T5618] Bluetooth: hci0: link tx timeout
[  999.638561][ T5618] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1000.081242][   T29] audit: type=1400 audit(1777974753.469:1566): avc:  denied  { open } for  pid=15337 comm="syz.1.2279" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1000.105141][ T5344] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1000.277460][   T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1000.448729][ T5618] Bluetooth: hci0: command 0x0406 tx timeout
[ 1000.458045][T15343] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1000.547707][ T5344] usb 9-1: Using ep0 maxpacket: 32
[ 1000.573632][ T5618] Bluetooth: hci0: link tx timeout
[ 1000.579288][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1000.861144][   T10] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1000.873276][ T5344] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1000.954765][   T29] audit: type=1400 audit(1777974753.839:1567): avc:  denied  { ioctl } for  pid=15337 comm="syz.1.2279" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1000.980244][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.988471][ T5344] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.998794][   T10] usb 3-1: config 0 descriptor??
[ 1001.006785][ T5344] usb 9-1: config 0 descriptor??
[ 1001.014099][   T10] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1001.022749][ T5344] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1001.092187][T15348] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2282'.
[ 1001.538672][ T5344] gspca_sunplus: reg_w_riv err -110
[ 1001.550755][   T10] gspca_sunplus: reg_w_riv err -110
[ 1001.633146][   T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[ 1001.665717][ T5344] sunplus 9-1:0.0: probe with driver sunplus failed with error -110
[ 1002.196226][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'.
[ 1002.206469][   T29] audit: type=1400 audit(1777974755.589:1568): avc:  denied  { write } for  pid=15331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1002.331410][T15366] FAULT_INJECTION: forcing a failure.
[ 1002.331410][T15366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1002.347319][T15366] CPU: 0 UID: 0 PID: 15366 Comm: syz.1.2286 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1002.347350][T15366] Tainted: [L]=SOFTLOCKUP
[ 1002.347357][T15366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1002.347368][T15366] Call Trace:
[ 1002.347375][T15366]  <TASK>
[ 1002.347382][T15366]  dump_stack_lvl+0x100/0x190
[ 1002.347414][T15366]  should_fail_ex.cold+0x5/0xa
[ 1002.347441][T15366]  _copy_to_user+0x32/0xd0
[ 1002.347473][T15366]  simple_read_from_buffer+0xcb/0x170
[ 1002.347498][T15366]  proc_fail_nth_read+0x1af/0x230
[ 1002.347521][T15366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1002.347543][T15366]  ? rw_verify_area+0xce/0x6d0
[ 1002.347568][T15366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1002.347591][T15366]  vfs_read+0x1e4/0xb30
[ 1002.347618][T15366]  ? __pfx_vfs_read+0x10/0x10
[ 1002.347639][T15366]  ? __fget_files+0x215/0x3d0
[ 1002.347673][T15366]  ? __fget_files+0x21f/0x3d0
[ 1002.347707][T15366]  ksys_read+0x12a/0x250
[ 1002.347729][T15366]  ? __pfx_ksys_read+0x10/0x10
[ 1002.347754][T15366]  ? rcu_is_watching+0x12/0xc0
[ 1002.347789][T15366]  do_syscall_64+0x10b/0xf80
[ 1002.347812][T15366]  ? clear_bhb_loop+0x40/0x90
[ 1002.347838][T15366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1002.347859][T15366] RIP: 0033:0x7f2d7a15d60e
[ 1002.347877][T15366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1002.347897][T15366] RSP: 002b:00007f2d7b088fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1002.347918][T15366] RAX: ffffffffffffffda RBX: 00007f2d7b0896c0 RCX: 00007f2d7a15d60e
[ 1002.347932][T15366] RDX: 000000000000000f RSI: 00007f2d7b0890a0 RDI: 0000000000000006
[ 1002.347944][T15366] RBP: 00007f2d7b089090 R08: 0000000000000000 R09: 0000000000000000
[ 1002.347957][T15366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1002.347970][T15366] R13: 00007f2d7a416038 R14: 00007f2d7a415fa0 R15: 00007fff05cf5368
[ 1002.348000][T15366]  </TASK>
[ 1002.542510][   T29] audit: type=1400 audit(1777974755.769:1569): avc:  denied  { write } for  pid=15367 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1004.251104][   T10] usb 3-1: USB disconnect, device number 52
[ 1004.271084][ T5344] usb 9-1: USB disconnect, device number 5
[ 1005.725145][   T29] audit: type=1400 audit(1777974759.109:1570): avc:  denied  { accept } for  pid=15395 comm="syz.8.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1005.804764][T15398] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2294'.
[ 1005.941992][   T29] audit: type=1400 audit(1777974759.309:1571): avc:  denied  { append } for  pid=15395 comm="syz.8.2293" name="comedi2" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1006.217714][T15024] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1007.141583][T15024] usb 9-1: Using ep0 maxpacket: 8
[ 1007.218622][T15024] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1007.383913][T15024] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1007.394604][T15024] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1007.404963][T15024] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1007.419490][T15024] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1007.499989][T15415] dummy0: entered allmulticast mode
[ 1007.973419][T15024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.065031][T15407] dummy0: left allmulticast mode
[ 1008.983152][T15024] usb 9-1: usb_control_msg returned -71
[ 1009.022226][T15024] usbtmc 9-1:16.0: can't read capabilities
[ 1009.221372][T15024] usb 9-1: USB disconnect, device number 6
[ 1009.741313][ T5344] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1009.950116][ T5344] usb 2-1: Using ep0 maxpacket: 32
[ 1010.006583][ T5344] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1010.079928][ T5344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.123900][ T5344] usb 2-1: config 0 descriptor??
[ 1010.155921][ T5344] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1010.200553][   T29] audit: type=1400 audit(1777974763.589:1572): avc:  denied  { name_connect } for  pid=15440 comm="syz.2.2306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1010.257706][   T29] audit: type=1400 audit(1777974763.629:1573): avc:  denied  { listen } for  pid=15440 comm="syz.2.2306" lport=47683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1010.295384][   T29] audit: type=1400 audit(1777974763.629:1574): avc:  denied  { accept } for  pid=15440 comm="syz.2.2306" lport=47683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1010.341719][T15445] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2307'.
[ 1010.380946][T15006] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1010.397895][T15024] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1010.551228][T15006] usb 9-1: Using ep0 maxpacket: 16
[ 1010.559778][T15024] usb 4-1: Using ep0 maxpacket: 32
[ 1010.566761][T15006] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1010.567175][T15024] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1010.585570][T15024] usb 4-1: config 0 has no interface number 0
[ 1010.592120][T15006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1010.592196][T15006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1010.592222][T15006] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1010.604224][T15024] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1010.635611][T15024] usb 4-1: config 0 interface 1 has no altsetting 0
[ 1010.637739][T15006] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1010.666780][   T29] audit: type=1400 audit(1777974764.049:1575): avc:  denied  { block_suspend } for  pid=15450 comm="syz.2.2309" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1010.682208][T15006] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1010.688503][T15024] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1010.718074][T15024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1010.728063][T15024] usb 4-1: Product: syz
[ 1010.732423][T15024] usb 4-1: Manufacturer: syz
[ 1010.737737][T15006] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1010.738234][T15024] usb 4-1: SerialNumber: syz
[ 1010.767018][T15006] usb 9-1: Manufacturer: syz
[ 1010.784092][   T29] audit: type=1400 audit(1777974764.169:1576): avc:  denied  { lock } for  pid=15450 comm="syz.2.2309" path="socket:[55904]" dev="sockfs" ino=55904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1010.814874][T15024] usb 4-1: config 0 descriptor??
[ 1010.814948][T15006] usb 9-1: config 0 descriptor??
[ 1010.855034][T15453] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2309'.
[ 1011.129189][T15006] rc_core: IR keymap rc-hauppauge not found
[ 1011.135160][T15006] Registered IR keymap rc-empty
[ 1011.149642][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1011.177629][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1011.200492][T15006] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1011.988072][ T5344] gspca_sunplus: reg_w_riv err -110
[ 1012.004545][ T5344] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[ 1012.019749][T15006] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input47
[ 1012.034715][T15425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.065660][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.099523][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.127250][T15425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1012.137613][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.157658][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.177664][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.233790][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.297831][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.476201][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.497683][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1012.517613][T15006] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1013.162318][T15006] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1013.175813][T15006] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1013.203336][T15006] usb 9-1: USB disconnect, device number 7
[ 1013.339459][T15005] usb 2-1: USB disconnect, device number 56
[ 1013.486395][T15024] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1013.724144][T15024] cx231xx 4-1:0.1: Failed to read PCB config
[ 1013.746542][T15024] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71
[ 1014.531994][T15024] usb 4-1: USB disconnect, device number 59
[ 1015.200806][   T29] audit: type=1400 audit(1777974768.589:1577): avc:  denied  { write } for  pid=15470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1015.461728][   T29] audit: type=1400 audit(1777974768.849:1578): avc:  denied  { write } for  pid=15502 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1016.929722][T15021] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1017.088002][T15021] usb 4-1: Using ep0 maxpacket: 32
[ 1017.120221][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2330'.
[ 1017.179925][   T29] audit: type=1400 audit(1777974770.549:1579): avc:  denied  { write } for  pid=15508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1017.199977][T15021] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1017.228335][T15021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.246408][T15021] usb 4-1: config 0 descriptor??
[ 1017.262235][T15021] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1017.327618][T15022] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1017.491931][   T29] audit: type=1400 audit(1777974770.879:1580): avc:  denied  { write } for  pid=15549 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1018.124196][T15022] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1018.257848][T15022] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1018.378959][T15022] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1018.491628][T15022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.337174][T15021] gspca_sunplus: reg_w_riv err -110
[ 1019.351832][T15021] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[ 1020.017433][T15578] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2329'.
[ 1020.246378][T15555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1020.264258][T15555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1020.495207][T15021] usb 3-1: USB disconnect, device number 53
[ 1021.507918][T15023] usb 4-1: USB disconnect, device number 60
[ 1022.647777][   T29] audit: type=1400 audit(1777974776.029:1581): avc:  denied  { ioctl } for  pid=15594 comm="syz.6.2347" path="socket:[55204]" dev="sockfs" ino=55204 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1022.776276][   T29] audit: type=1400 audit(1777974776.159:1582): avc:  denied  { mounton } for  pid=15591 comm="syz.1.2346" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1023.459562][T15593] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR
[ 1023.844976][T15609] lo speed is unknown, defaulting to 1000
[ 1023.980076][T15613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2349'.
[ 1024.147759][T15023] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1024.378286][T15023] usb 3-1: Using ep0 maxpacket: 16
[ 1024.385071][T15617] syzkaller0: entered promiscuous mode
[ 1024.390652][T15617] syzkaller0: entered allmulticast mode
[ 1024.391522][T15023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1024.427909][T15023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1024.468887][T15023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1024.486333][T15023] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1024.496391][T15023] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1024.511869][T15023] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1024.522278][T15023] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1024.564475][T15023] usb 3-1: Manufacturer: syz
[ 1024.722475][T15023] usb 3-1: config 0 descriptor??
[ 1025.838745][T15636] XFS (nullb0): Invalid superblock magic number
[ 1027.110964][T15023] rc_core: IR keymap rc-hauppauge not found
[ 1027.132112][T15023] Registered IR keymap rc-empty
[ 1027.213301][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.246786][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.290851][T15023] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1027.426793][T15023] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48
[ 1027.457769][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.151556][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.177645][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.199313][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.217809][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.239517][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.257627][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.277636][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.297629][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.320118][T15023] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1028.345123][T15023] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1028.386738][T15023] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1028.637324][T15659] XFS (nullb0): Invalid superblock magic number
[ 1028.657765][T15023] usb 3-1: USB disconnect, device number 54
[ 1031.876342][   T29] audit: type=1400 audit(1777974785.259:1583): avc:  denied  { append } for  pid=15680 comm="syz.3.2364" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1032.594290][T15003] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1032.634231][   T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1032.794778][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1033.242684][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1033.247569][T15003] usb 2-1: Using ep0 maxpacket: 16
[ 1033.338697][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1033.361454][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1033.422817][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.428384][T15003] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1033.449196][T15003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1033.461185][   T10] usb 4-1: config 0 descriptor??
[ 1033.463772][T15003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1033.488897][T15003] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1033.498798][T15003] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1033.513211][T15003] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1033.637769][T15003] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1033.855597][T15003] usb 2-1: Manufacturer: syz
[ 1033.876654][T15704] XFS (nullb0): Invalid superblock magic number
[ 1033.885564][T15003] usb 2-1: config 0 descriptor??
[ 1034.455700][T15703] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1034.498081][T15003] rc_core: IR keymap rc-hauppauge not found
[ 1034.522922][T15003] Registered IR keymap rc-empty
[ 1034.555217][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1034.564608][T15714] syzkaller0: entered promiscuous mode
[ 1034.570355][T15714] syzkaller0: entered allmulticast mode
[ 1034.587591][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1034.614380][   T10] usbhid 4-1:0.0: can't add hid device: -71
[ 1034.628390][T15003] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1034.645547][T15003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input49
[ 1034.652116][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1034.690967][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1034.713548][   T10] usb 4-1: USB disconnect, device number 61
[ 1034.751193][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1034.787718][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1034.817615][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1034.989107][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1035.022859][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1035.047867][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1035.109725][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1035.126233][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2375'.
[ 1035.139469][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1035.157609][T15003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1035.275818][T15003] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1035.284983][T15003] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1035.323161][T15003] usb 2-1: USB disconnect, device number 57
[ 1036.493024][T15745] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2378'.
[ 1036.675498][T15754] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2380'.
[ 1036.709373][T15754] tmpfs: Bad value for 'nr_blocks'
[ 1038.709097][T15770] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1040.279518][T15775] fuse: fd is not a fuse device
[ 1040.294375][   T29] audit: type=1400 audit(1777974793.679:1584): avc:  denied  { create } for  pid=15774 comm="syz.6.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1043.457606][T15813] overlayfs: failed to resolve './file0/file1': -2
[ 1044.096463][T15806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2399'.
[ 1044.191116][T15820] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2401'.
[ 1044.937423][T15795] process '/newroot/396/file0' started with executable stack
[ 1045.285840][T15828] syzkaller0: entered promiscuous mode
[ 1045.739242][T15828] syzkaller0: entered allmulticast mode
[ 1048.437663][T15006] usb 4-1: new low-speed USB device number 62 using dummy_hcd
[ 1048.708874][T15006] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1048.720032][T15006] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[ 1048.747145][T15006] usb 4-1: config 0 has no interface number 0
[ 1048.754063][T15006] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1048.791098][T15006] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1048.816017][T15006] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1048.838581][T15006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.875201][T15006] usb 4-1: config 0 descriptor??
[ 1049.501627][T15006] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input50
[ 1049.514727][T15006] input: failed to attach handler kbd to device input50, error: -5
[ 1051.536801][T15867] tipc: Started in network mode
[ 1051.541959][T15867] tipc: Node identity 080211, cluster identity 4711
[ 1051.550280][T15867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1051.720307][T15003] usb 4-1: USB disconnect, device number 62
[ 1051.731234][T15826] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1051.760006][T15826] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1051.967612][T15006] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1052.094358][T15826] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI
[ 1052.106443][T15826] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[ 1052.114837][T15826] CPU: 0 UID: 0 PID: 15826 Comm: syz.8.2403 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1052.125837][T15826] Tainted: [L]=SOFTLOCKUP
[ 1052.130136][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1052.140175][T15826] RIP: 0010:kernfs_rename_ns+0x3b/0xb30
[ 1052.145747][T15826] Code: 48 89 fb 4c 8d 73 30 48 83 ec 30 48 89 14 24 48 89 4c 24 08 e8 36 df 4e ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c8 09 00 00 48 8b 43 30 48 85 c0 0f 84 7c 09 00
[ 1052.165411][T15826] RSP: 0018:ffffc90005acf8f0 EFLAGS: 00010206
[ 1052.171486][T15826] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000ecc3000
[ 1052.179460][T15826] RDX: 0000000000000006 RSI: ffffffff82b9acaa RDI: 0000000000000000
[ 1052.187431][T15826] RBP: ffff8880232983c0 R08: 0000000000000007 R09: 0000000000000000
[ 1052.195404][T15826] R10: 000000007fffffff R11: ffffffff81000130 R12: ffff8880432b8200
[ 1052.203381][T15826] R13: ffff888072fce8c0 R14: 0000000000000030 R15: 1ffff92000b59f2b
[ 1052.211357][T15826] FS:  00007fa04bb946c0(0000) GS:ffff888124376000(0000) knlGS:0000000000000000
[ 1052.220291][T15826] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1052.226876][T15826] CR2: 00007fb14718ca10 CR3: 000000008602f000 CR4: 00000000003526f0
[ 1052.234880][T15826] Call Trace:
[ 1052.238153][T15826]  <TASK>
[ 1052.241082][T15826]  kobject_move+0x127/0x260
[ 1052.245601][T15826]  ? __pfx_kobject_move+0x10/0x10
[ 1052.250633][T15826]  ? kobject_put+0xb9/0x640
[ 1052.255150][T15826]  device_move+0xa9/0x1140
[ 1052.259575][T15826]  hci_conn_del_sysfs+0x86/0x1a0
[ 1052.264521][T15826]  hci_conn_del+0x506/0x1180
[ 1052.269123][T15826]  hci_conn_hash_flush+0x186/0x280
[ 1052.274250][T15826]  hci_dev_close_sync+0x5a7/0x1240
[ 1052.279378][T15826]  ? __pfx_hci_dev_close_sync+0x10/0x10
[ 1052.284936][T15826]  ? do_raw_spin_lock+0x128/0x260
[ 1052.289978][T15826]  hci_dev_do_close+0x2e/0xb0
[ 1052.294664][T15826]  hci_rfkill_set_block+0x225/0x3a0
[ 1052.299877][T15826]  ? lockdep_hardirqs_on+0x78/0x100
[ 1052.305089][T15826]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[ 1052.310810][T15826]  rfkill_set_block+0x205/0x510
[ 1052.315662][T15826]  rfkill_fop_write+0x2c0/0x580
[ 1052.320513][T15826]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 1052.325881][T15826]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 1052.331251][T15826]  vfs_write+0x2aa/0x1070
[ 1052.335602][T15826]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 1052.340974][T15826]  ? __pfx_vfs_write+0x10/0x10
[ 1052.345738][T15826]  ? find_held_lock+0x2b/0x80
[ 1052.350416][T15826]  ? __fget_files+0x215/0x3d0
[ 1052.355102][T15826]  ? __fget_files+0x215/0x3d0
[ 1052.359785][T15826]  ? __fget_files+0x21f/0x3d0
[ 1052.364467][T15826]  ksys_write+0x1f8/0x250
[ 1052.368800][T15826]  ? __pfx_ksys_write+0x10/0x10
[ 1052.373653][T15826]  ? rcu_is_watching+0x12/0xc0
[ 1052.378427][T15826]  do_syscall_64+0x10b/0xf80
[ 1052.383050][T15826]  ? clear_bhb_loop+0x40/0x90
[ 1052.387771][T15826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.393676][T15826] RIP: 0033:0x7fa04ad9cdd9
[ 1052.398084][T15826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1052.417683][T15826] RSP: 002b:00007fa04bb94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1052.426085][T15826] RAX: ffffffffffffffda RBX: 00007fa04b016090 RCX: 00007fa04ad9cdd9
[ 1052.434041][T15826] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008
[ 1052.441997][T15826] RBP: 00007fa04ae32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1052.449950][T15826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1052.457907][T15826] R13: 00007fa04b016128 R14: 00007fa04b016090 R15: 00007ffdfc04f628
[ 1052.465867][T15826]  </TASK>
[ 1052.468875][T15826] Modules linked in:
[ 1052.473178][T15826] ---[ end trace 0000000000000000 ]---
[ 1052.485071][T15006] usb 2-1: device descriptor read/64, error -71
[ 1052.503265][   T29] audit: type=1400 audit(1777974805.889:1585): avc:  denied  { read } for  pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 1052.545685][   T29] audit: type=1400 audit(1777974805.889:1586): avc:  denied  { search } for  pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1052.578019][T15826] RIP: 0010:kernfs_rename_ns+0x3b/0xb30
[ 1052.585198][   T29] audit: type=1400 audit(1777974805.889:1587): avc:  denied  { write search } for  pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1052.615343][   T10] tipc: Node number set to 134353152
[ 1052.615572][   T29] audit: type=1400 audit(1777974805.889:1588): avc:  denied  { add_name } for  pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1052.649631][T15826] Code: 48 89 fb 4c 8d 73 30 48 83 ec 30 48 89 14 24 48 89 4c 24 08 e8 36 df 4e ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c8 09 00 00 48 8b 43 30 48 85 c0 0f 84 7c 09 00
[ 1052.699386][T15826] RSP: 0018:ffffc90005acf8f0 EFLAGS: 00010206
[ 1052.710912][T15826] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000ecc3000
[ 1052.733060][T15826] RDX: 0000000000000006 RSI: ffffffff82b9acaa RDI: 0000000000000000
[ 1052.737557][T15006] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1052.742699][   T29] audit: type=1400 audit(1777974805.889:1589): avc:  denied  { create } for  pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1052.777641][T15826] RBP: ffff8880232983c0 R08: 0000000000000007 R09: 0000000000000000
[ 1052.790191][T15826] R10: 000000007fffffff R11: ffffffff81000130 R12: ffff8880432b8200
[ 1052.805711][T15826] R13: ffff888072fce8c0 R14: 0000000000000030 R15: 1ffff92000b59f2b
[ 1052.818118][   T29] audit: type=1400 audit(1777974805.889:1590): avc:  denied  { append open } for  pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1052.845750][T15826] FS:  00007fa04bb946c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000
[ 1052.855908][T15826] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1052.864945][T15826] CR2: 000000110c381983 CR3: 000000008602f000 CR4: 00000000003526f0
[ 1052.873034][   T29] audit: type=1400 audit(1777974805.889:1591): avc:  denied  { getattr } for  pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1052.895918][T15006] usb 2-1: device descriptor read/64, error -71
[ 1052.902221][T15826] Kernel panic - not syncing: Fatal exception
[ 1052.908559][T15826] Kernel Offset: disabled
[ 1052.912859][T15826] Rebooting in 86400 seconds..