last executing test programs: 12m18.656917312s ago: executing program 32 (id=62): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_ADAP_S_PHYS_ADDR(0xffffffffffffffff, 0x40026102, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x2000000, 0x0) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) 12m10.32907069s ago: executing program 33 (id=96): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0x4000000, [@sadb_sa={0x2, 0x1, 0x0, 0xff, 0x2, 0xe9, 0x0, 0x20000000}]}, 0x20}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_GET_COMMAND_Q(r2, 0x2279, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000008c0)={{r2}, {@val={r3}, @max}}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2d, 0x2c, 0x2, 0x2, 0x5, 0xac, 0x5, 0x2, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000900)={&(0x7f0000000340)={0xcc, r5, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x61, 0xac, "484077a6c903d8969b39b2d0f0683c6705b19cd2fc26809e5ba99bffafe395429c1fe222ab395849a7f43e94d1ebe5a453faf509a5ac07517b8a4689d94af857e32b34851a6d44ea07ee6daff25f436da9ff83cccbfb9e3587c75b2ac8"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2be}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x0) 12m0.387695391s ago: executing program 6 (id=97): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) r1 = socket$packet(0x11, 0x3, 0x300) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000480)={r3, 0x35, "71abcc78bc3ea324a3233a320393fed0ef9376d456b67b2a4164096bb7387995ea2efc39030afbf06c0579c912da8d50da4d3fff8a"}, &(0x7f00000004c0)=0x3d) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000009600)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) shutdown(r4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000240)={0x0, &(0x7f0000000080)}, 0x10) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x385a00) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x7, 0x1, 0x2, 0x5}, {0xfffc, 0x2, 0xd, 0x8001}, {0x1, 0x81, 0x1, 0x4}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = accept4(r1, &(0x7f0000000180)=@tipc, &(0x7f0000000200)=0x80, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000001dc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x56ef772920b95a2d}, 0xc, &(0x7f0000001d80)={&(0x7f0000001e00)={0xe54, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x6e4, 0x11d, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x5}, {0x4, 0x7}, {0x4}, {0x5, 0x8}, {0x5, 0x5}, {0x5, 0x7}, {0x2, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x2, 0x3}, {0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x5}, {0x6, 0x1}, {0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x4, 0x8}, {0x6}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x9}, {0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x4, 0x3}, {0x6, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x2}, {0x3, 0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {0x5, 0x6}, {0x1}, {0x4, 0x7}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x3}, {0x2, 0x6}, {0x6, 0x8}, {0x6}, {0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xe8, 0x6, 0xe2e1, 0x7f, 0x6]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x18, 0x3, 0xb801a3476687328e, 0x12, 0x9, 0x1, 0x5, 0x8, 0xb, 0x142128205b79ef0c, 0x1f, 0xc, 0x48, 0x18, 0x12, 0x60, 0x3, 0x6c, 0x16, 0x12, 0x1b, 0x30, 0x6, 0x18, 0x60, 0x16, 0xb, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x81, 0xf621, 0x1, 0x9, 0x43, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x852, 0x4, 0x8, 0x8, 0x6, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x5}, {0x7, 0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x2, 0xa}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x6}, {0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x3}, {0x6}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x9}, {0x2}, {0x4, 0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x6}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x3}, {0x1, 0x1b}, {0x1, 0xa}, {0x2, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x7}, {0x5}, {0x2, 0xa}, {0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x2, 0x9}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x8}, {0x1, 0x7}, {}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x3, 0x8}, {0x6, 0x2}, {0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {}, {0x1, 0x8}, {0x3, 0xa}, {0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x8}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x5, 0x5}, {0x3}, {}, {0x4, 0x9}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x7, 0x1}, {0x5, 0x7}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe56, 0xfffe, 0x8000, 0x8, 0x5, 0x9, 0x6, 0x786]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3}, {0x3, 0x5}, {0x1}, {0x7, 0xa}, {0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x5, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x5}, {0x4, 0x5}, {0x3, 0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x9}, {0x6}, {0x0, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x6816, 0x81, 0x0, 0x7, 0x88, 0xf]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x8}, {0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0x9}, {0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x3, 0x7}, {0x5, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x9}, {0x3}, {0x6, 0x3}, {0x2, 0x3}, {0x7, 0x2}, {0x7}, {0x7, 0x1}, {0x5, 0x9}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x5}, {0x3, 0x8}, {0x6, 0x3}, {0x3}, {0x2, 0x1}, {0x6, 0x4}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x5, 0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x3, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1000, 0x0, 0x59, 0x2, 0x9, 0x800, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x6, 0x1, 0x75, 0x0, 0x1, 0x18, 0x4, 0x6c, 0x36, 0x16, 0x16, 0x9]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x100, 0xf1, 0x3ff, 0x0, 0xfe, 0x0, 0xf5e4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x9, 0xff, 0xa2a7, 0x0, 0x3, 0x7, 0x4]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x4}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x4}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x8}, {0x5, 0x5}, {0x1, 0x3}, {0x5, 0x2}, {0x6}, {0x5, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x5, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x6}, {0x7, 0xc}, {0x6, 0x6}, {0x5}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x7, 0x6}, {0x5, 0x1}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x3, 0x6}, {0x2, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x5}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0x5}, {0x7, 0x3}, {0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x9, 0x4, 0x0, 0x6, 0x8, 0xfffb, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f2, 0xe, 0x1, 0x8, 0x9, 0x4, 0x40, 0x8]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x60, 0x48, 0x0, 0x3, 0x24, 0xc, 0x19]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x4, 0xfffa, 0x3, 0x5, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x9, 0x2, 0x2, 0xc, 0x9, 0x6c, 0x4, 0x0, 0x6, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x224, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x12, 0x2, 0x4, 0x63ed, 0x3, 0x3, 0x1000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x6}, {0x2, 0x7}, {}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x3, 0x5}, {0x4, 0x3}, {0x6, 0x7}, {0x3, 0x8}, {0x5, 0x5}, {0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0x9}, {0x6, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x8}, {0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x8}, {0x3}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x9}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x4}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4}, {0x2, 0x6}, {0x6, 0x3}, {0x2, 0x1}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x5}, {}, {0x0, 0x6}, {0x1, 0x4}, {0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x0, 0x8}, {0x7, 0x8}, {0x7, 0x2}, {0x0, 0x7}, {0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0xa}, {0x3}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x4}, {0x2, 0xa}, {0x3, 0x5}, {}, {0x2, 0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7fff, 0x4, 0x0, 0x200, 0x9, 0x0, 0x79]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x6, 0x46, 0x3, 0x5, 0x2dd, 0x6]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf13, 0x7, 0x1, 0x1, 0x6ed4, 0xd, 0x9, 0x7d24]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x2}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0x2}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x8}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x1}, {0x6, 0x3}, {0x0, 0x8}, {}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x128a, 0x1, 0x961, 0x5, 0x7ff, 0x1, 0x6, 0xd]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xff01, 0x9, 0x4679, 0x8, 0x4, 0x2, 0x4]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0xa}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x9}, {0x6, 0x4}, {0x6, 0x7}, {0x3, 0x5}, {0x3}, {0x7}, {0x7, 0xa}, {0x6, 0x3}, {0x3, 0x8}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0x1}, {0x1}, {0x3, 0x6}, {0x7, 0x5}, {}, {0x3, 0x5}, {0x6}, {0x4, 0x7}, {0x7}, {0x1}, {0x3, 0x2}, {0x4, 0x9}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x1}, {0x6, 0x6}, {0x6}, {0x4, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x3, 0x8}, {0x0, 0x8}, {0x3}, {0x3, 0xd}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x3, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x3}, {0x2}, {}, {}, {0x3, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x9}, {0x4}, {0x3, 0x9}, {0x3, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0x3}, {0x7}, {0x3, 0x2}, {0x6, 0x6}, {0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x6}, {0x2, 0x5}, {0x5, 0x2}, {0x4, 0x9}, {0x5, 0x4}, {0x3, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x7, 0x0, 0x80, 0x0, 0x4, 0xd97d]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x4}, {0x2, 0x7}, {0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xb65, 0x6, 0x9, 0x5, 0x87, 0x5, 0x17a5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1ec, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x47}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x198, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xd6d, 0x4, 0x6, 0x3, 0x6, 0x2, 0x800]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xb6b, 0x6, 0x2, 0x1, 0xc275, 0x128, 0x4dc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x5}, {0x1}, {0x2, 0x2}, {0x7, 0x6}, {0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x3}, {0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x3, 0x9}, {0x2, 0x1}, {0x6, 0x7}, {0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x5}, {0x2, 0x7}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x4, 0x30, 0x48, 0xc]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x3, 0x2, 0x24, 0x18, 0x30, 0xb, 0x36, 0x48, 0x36, 0x30, 0x6, 0x28, 0x3, 0x5, 0x5, 0x3, 0x5, 0x1b, 0x2, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x6, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x16, 0x60, 0x48, 0x2, 0x2, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f8a, 0x6, 0x3f, 0x72a5, 0x2, 0x7, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x2}, {}, {0x6, 0x4}, {0x1, 0x6}, {0x4, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x6, 0xfff9, 0x3, 0x10, 0x83e9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x9, 0x3, 0x12, 0x24, 0xc, 0xb, 0x6c, 0x6, 0x1, 0x30, 0x3d, 0x1b, 0x37, 0x9, 0x48, 0x3, 0x6c, 0x60, 0xa, 0x60, 0x0, 0x5, 0x1, 0x9, 0x18, 0x6c, 0x6, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0x94df, 0x7f, 0x9, 0x1ff, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x568, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100400}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xad}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xb, 0xd562, 0xe8, 0x0, 0x8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x18, 0xb, 0x48, 0x6c, 0x24, 0x3, 0x24, 0x24, 0x1, 0x4, 0x3, 0x3, 0x6c, 0x4, 0x2, 0x5, 0x24, 0x24, 0x6, 0x2, 0x6, 0x5, 0x5, 0x6, 0x24, 0xb, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x5, 0x400, 0x8, 0xf755, 0x40, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x3, 0x9, 0xb, 0x6, 0xff, 0x4]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x1}, {0x4, 0x3}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0x5}, {0x6, 0x8}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x1}, {0x4, 0x4}, {0x2}, {0x4}, {0x2, 0xf}, {0x3, 0x2}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x5}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x6, 0x8}, {0x3, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x7}, {0x1, 0xa}, {}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0x9}, {0x6, 0x6}, {0x6, 0x3}, {0x7}, {0x6, 0x3}, {0x2, 0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x7, 0x6}, {}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x3}, {0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x16, 0x60, 0x48, 0xb, 0x3, 0x6, 0xb, 0x1, 0x3, 0x6c, 0x12, 0x24, 0x2]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x27e7, 0x5c, 0x400, 0x20, 0x0, 0x2, 0x4, 0x6]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0xa}, {0x2, 0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x5, 0x9}, {0x5, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0xa}, {0x6, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x2, 0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x2, 0xe, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0x0, 0x401, 0xe, 0x8, 0x6, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0xb13, 0x3, 0xfff, 0x2, 0x9, 0xb]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0xc, 0x2, 0x24, 0x5, 0x1b, 0x30, 0x9, 0x6c, 0x2, 0x12, 0xb, 0x1b, 0x48, 0x12, 0x6c, 0x6, 0x6, 0x30, 0x1b, 0x1b, 0x0, 0x60, 0x12, 0x2, 0x1, 0x9, 0x1, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x40, 0xb, 0xffff, 0x0, 0x8, 0xbee, 0x44]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x39, 0x4, 0xb, 0x21, 0x1b, 0xb, 0x30, 0x6c, 0x60, 0x61, 0x30, 0x48, 0x4, 0x6c, 0x24, 0x16, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0x9, 0xffff, 0xfffa, 0x7, 0x1000, 0x8]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x2, 0x8, 0x8000, 0x0, 0xfff, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xf, 0x2, 0x4, 0x7, 0x401, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xfff, 0x208, 0x7, 0x9, 0x1, 0xcc3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x1b, 0x5, 0x30, 0x3f, 0x18, 0x1b, 0x1b, 0x9, 0x30, 0x36, 0xb]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x6}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x4}, {0x1, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {}, {0x7, 0x2}, {0x6, 0x8}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x0, 0x7, 0x4, 0x3, 0xffff, 0x1]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x9}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x2}, {0x6, 0x3}, {0x4}, {0x3, 0x9}, {0x2, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x3}, {0x7}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0xf, 0x12, 0x36, 0x60, 0x36]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x2]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0xa}, {0x4, 0x4}, {0x5, 0xa}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0xa}, {0x7, 0x6}, {0x6, 0x3}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x2, 0x1b, 0x36, 0x1b, 0x6c, 0x1, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1, 0xc, 0x32, 0x3, 0x6, 0x36, 0x4, 0x1b, 0x4, 0x6c, 0x16, 0x24, 0x6, 0x24, 0x12, 0x12, 0x1, 0x9, 0x1, 0x80, 0x6c, 0x3, 0x48, 0xb, 0x6c, 0x18, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9800, 0x4, 0x8, 0x3, 0x1, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xfff, 0x3, 0xffff, 0x0, 0x7, 0xd1c1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0xe54}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x40000) close_range(r6, r1, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) read(r8, &(0x7f0000000300)=""/97, 0x61) syz_usb_connect$uac1(0x2, 0x87, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000201e0420304000010203010902750003010710800904000000010100000a240106000a00020102090401000001020000a0ef879041f93ca00009050109080009060507250100080c000904020000010200000904020101010200000e24020109040d02aa002db0703f07240104080300090582094000030c0807250100030000"], 0x0) 11m58.232844194s ago: executing program 34 (id=143): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/83, 0x53) getdents(r1, &(0x7f0000000000)=""/116, 0x74) ioctl$FIBMAP(r0, 0x2284, 0x0) 11m58.040094583s ago: executing program 5 (id=147): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000080)="ff098755") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000007000050401000000000000", @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, 0x0, 0x0, 0x4a1ab295fe1da1cb}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/97, 0x61}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000718000/0x2000)=nil, 0x2000, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000000114242"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="8c7edc37d068c848198829f03edaeff0ff29029c63bf0bedfdd3f67d26f4d7e4b72c273f63796c1d83a791882c4fffc620276c2e073be3a560e12cf7c292", 0x3e}], 0x1, &(0x7f0000000f80)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001080)="efafc975bbf380869c4c14877e8942a86797cfa040463c7da205e1c91b9653be59d086b87160953033a772503e355ea15f5d461339ae4c4a85b61b7cb93707dbd3fd5f37881f36aa4b93d80d149d65f7360d6d9a89e3cbfbf2dbbef98090377ecd34b1ff1f96ccf7f9a1b5e549e08d8895f4ef1eeb0bbbd05ac5e08f9faf7a696d4de571bc286abc13350065f77b829e42b3709e7d0515470f51fd1c9f35270da300529f00", 0xa5}], 0x1}}], 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 11m57.280257586s ago: executing program 6 (id=148): r0 = syz_open_dev$usbmon(&(0x7f0000000480), 0x10, 0x80882) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x467e6) r1 = socket(0x2, 0x80805, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2}}, 0x20) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r4, 0x0, 0x1, 0x4}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xa000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x9, 0x6, 0x4, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7, 0x1, 0x81}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0xf, 0x1, 0x0, r6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r7, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xb, 0x6, 0x8001}, 0x10, r8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000640)=[{0x1, 0x5, 0xa, 0x5}, {0x5, 0x4, 0x4, 0x7}], 0x10, 0xff}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r9, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0xd, 0x1a, &(0x7f00000022c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2ef, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x7, 0x0, 0xd, 0x7, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb78a}]}, &(0x7f00000023c0)='GPL\x00', 0x2, 0xfc, &(0x7f0000002400)=""/252, 0x41000, 0x1, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000002500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002540)={0x3, 0x10, 0xf, 0x7}, 0x10, r8, r9, 0x7, 0x0, &(0x7f0000002580)=[{0x1, 0x2, 0x0, 0x4}, {0x2, 0x3, 0x8, 0xc}, {0x4, 0x5, 0x6, 0x2}, {0x1, 0x3, 0xf, 0x1}, {0x4, 0x5, 0xd, 0x2}, {0x5, 0x5, 0x9, 0x3}, {0x1, 0x4, 0xf, 0x9}], 0x10, 0x2}, 0x94) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x2200892, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010006000000060002003039000006000300c0b4afde3400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e0800"], 0xbc}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newnexthop={0x30, 0x68, 0x405, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004084}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r13 = socket$netlink(0x10, 0x3, 0x0) preadv(r12, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0xfdef}], 0x1, 0x81000003, 0x410000) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 11m56.851886541s ago: executing program 6 (id=149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x44) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r4, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 11m56.778140212s ago: executing program 6 (id=150): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r2, &(0x7f0000001600), &(0x7f0000001700)=@udp=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 11m56.46726266s ago: executing program 6 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=@v2={0x3, 0x0, 0x12, 0x5a, 0xa2, "7716242216deebd486fbd7812401b231b13d5d52d19992d815feeeb1ff42813b5a6e35ce769ecf8c164af840b8e0026e15348c49a6962c5ff3b1cf6469c119f7d724986ad2a08a99b8418a1dddcb537a6a2e4f58442f633e234b6961caa0516b83fc31799c0b1ecc6d231b3781d1695f9ce8f9d39f28decadf281846ecb1e0099aa571b00117f2eb1a40ecda3dbb5f8a36cdb36647f2109b2d980724b8eadf4372f7"}, 0xab, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x4c831, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20040800) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c5fe68bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8ba58502975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc309bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x11000}) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100005}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='menu\x00', 0x5) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, 0x0) 11m56.113962405s ago: executing program 6 (id=152): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) mknodat(r0, &(0x7f0000000180)='./cgroup\x00', 0x1000, 0x81) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000006b07000000000000040000000000000000000000009500000000000000255c74c9088563490efdf3b0a09fc2b823ba7864c2ce34dc182a5453903efbd6ea83e8f4c5cdf50c53f186e26793a27ce0a58e44d01732365efa24a3c79d3d8336d73d0a3c4e5c168cf35041791ac247c84d7954eabd12a80b78fee89eed7a080822cfa7f5885f1aa9860334572af8885a5676d8adabdca2becf609a43ece0a47672ac31286ca9ed5e46cada40ab8d02e32333d10c4432833b1478e5763cf0f0068d107fb2188d0f292b2500a27919a585238db9"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0xcf) setxattr$security_ima(0x0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x10100080, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) memfd_create(0x0, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB="02c9000c000c0005001983040004000100"], 0x11) semget$private(0x0, 0x1, 0x1c1) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r3 = syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000280)={0x4, "468c5db3119f8c4c5afe4399bdc768ffb19a4c26e9c5527a07edb2558506a5d4", 0x5, 0x1, 0x2, 0x4, 0x4, 0x0, 0x8}) 11m55.949857044s ago: executing program 35 (id=152): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) mknodat(r0, &(0x7f0000000180)='./cgroup\x00', 0x1000, 0x81) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000006b07000000000000040000000000000000000000009500000000000000255c74c9088563490efdf3b0a09fc2b823ba7864c2ce34dc182a5453903efbd6ea83e8f4c5cdf50c53f186e26793a27ce0a58e44d01732365efa24a3c79d3d8336d73d0a3c4e5c168cf35041791ac247c84d7954eabd12a80b78fee89eed7a080822cfa7f5885f1aa9860334572af8885a5676d8adabdca2becf609a43ece0a47672ac31286ca9ed5e46cada40ab8d02e32333d10c4432833b1478e5763cf0f0068d107fb2188d0f292b2500a27919a585238db9"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0xcf) setxattr$security_ima(0x0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x10100080, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) memfd_create(0x0, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB="02c9000c000c0005001983040004000100"], 0x11) semget$private(0x0, 0x1, 0x1c1) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r3 = syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000280)={0x4, "468c5db3119f8c4c5afe4399bdc768ffb19a4c26e9c5527a07edb2558506a5d4", 0x5, 0x1, 0x2, 0x4, 0x4, 0x0, 0x8}) 11m55.784541295s ago: executing program 5 (id=155): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffd}, 0x10) listen(r1, 0xda8e) accept4(r1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) unshare(0x2040400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) msgget(0x0, 0x11) lstat(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) pipe2(0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000, 0x1) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7ff, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x3ff}, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@remote, 0x800, 0x1, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) 11m54.175314902s ago: executing program 5 (id=158): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x40007, 0x4, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000433000/0x4000)=nil, &(0x7f00004dd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000010e000/0x4000)=nil, &(0x7f0000680000/0x3000)=nil, &(0x7f0000898000/0x3000)=nil, &(0x7f000044d000/0x4000)=nil, &(0x7f00004d5000/0x4000)=nil, &(0x7f000000e000/0x3000)=nil, &(0x7f00003b4000/0x1000)=nil, &(0x7f00004d6000/0x3000)=nil, &(0x7f0000000000), 0x0, r0}, 0x68) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xb2, &(0x7f0000000000)=[{0x0, 0x1, 0x9}], 0x1, 0xffffffffffffffc0, 0x2, 0x0, 0x0, 0x10}) 11m53.067745965s ago: executing program 5 (id=160): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r2, &(0x7f0000001600), &(0x7f0000001700)=@udp=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 11m52.634614221s ago: executing program 5 (id=164): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket(0x1e, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x3f, 0x0, &(0x7f0000002400)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd47, 0x1000009, 0xffffeffffffffffb, 0x5, 0x10000, 0x3, 0x2, 0x10000006, 0x4, 0xfffffffffffffffe, 0x40000000800005, 0xfffffffffffffffe, 0x401, 0x0, 0x9, 0x100800089], 0x25000, 0x138041}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utime(0x0, &(0x7f0000000140)={0x8, 0x7}) wait4(r1, 0x0, 0x40000000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000008000000850000007b0000f8e48b3902394630c3b98c00953eacade905d62f57e65a89ed9a7d3a5d4765e8342f6692d4e6b906fd072e7565e8b1e29cf91af9c577a992814a2b2c233b9244d03f2a08a141f7188e7fd576ef22ef998f2532dbf014156435c3c6b83bc80bc54c5b005532d158de36cd7933732d7020a655aff07a93d140"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40043, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) syz_open_pts(r2, 0x141601) socket$inet6(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, 0x0) 11m51.873141563s ago: executing program 5 (id=173): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r2, &(0x7f0000001600), &(0x7f0000001700)=@udp=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r4, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 11m50.977834443s ago: executing program 36 (id=173): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r2, &(0x7f0000001600), &(0x7f0000001700)=@udp=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r4, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 9m2.215954876s ago: executing program 7 (id=903): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x110c75, 0x7fff, 0x100, 0x1ff, 0x800, 0xffffffff, 0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) readlink(&(0x7f0000000080)='./config\x00', &(0x7f0000000240)=""/201, 0xc9) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c, 0x0, 0x0, 0x40000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x80}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) symlinkat(&(0x7f0000000140)='./config/usb_gadget/g1/UDC\x00', r1, &(0x7f0000000200)='./dev\x00') prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 9m1.844560223s ago: executing program 7 (id=905): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r2, &(0x7f0000000290)="bb", 0x1) (fail_nth: 1) openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) 9m1.241341542s ago: executing program 7 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='2', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x0, 0x110, r1, 0x0) 9m0.630626644s ago: executing program 7 (id=913): mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000100)='v7\x00', 0x2a1b808, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/platform/devices/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) 8m59.01882696s ago: executing program 7 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x30, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe", 0xec}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) symlinkat(&(0x7f0000000180)='./gadget\x00', r0, &(0x7f0000000c40)='./mysys\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/devices/0000:00:00.0/device\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/16, 0x10) r3 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r4 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) dup3(r4, r3, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000480)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e20, @multicast2}}]}, 0x110) r5 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r5, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) syz_clone(0x80200, &(0x7f00000009c0)="0857e32456e97306b3d7ba6da0fcd67a63682ee072d1297b19a69b7edacec6d654b203728590a89c9044164c7421c37a6840c484126eae71d145c198cb00d0a58a626cf4e03d7bd6d892b34cf8dcd53b5fd64f1a4c97512afd107a1188e2a9427897df768a4578f21e28e3c92e40be1731f3e42b96be07d7239a4ce835de65a0", 0x80, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="299ae2bbb730d49048ecf2cae74d50f5a6dc696a91a7bc26551e665f18d59d3900810f28d5076acd93bb99e881560eeeadbb1e2a5693bee5b0924920d602638720528ce717c23578cec373a1cac2557ef755a84508dc2599c63b84fea96c8c6f4354bd04748e7c41135bfedc10a36feb4a3c81200a3b5a124a9c9b3a9f814a312a49fa35cf7817e150168d") fcntl$setstatus(r6, 0x4, 0x8e000) sendmsg$key(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0xe, 0x7, 0x5, 0xd, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd26, 0x3507}, @sadb_x_nat_t_type={0x1, 0x14, 0xf3}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bb9, 0x4, {0x6, 0x3c, 0x8, 0x4, 0x0, 0x8, 0x0, @in6=@private1, @in=@broadcast}}]}, 0x68}}, 0x24000090) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) 8m58.199402924s ago: executing program 7 (id=921): socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'ip6erspan0\x00', 0x800}) 8m43.079693197s ago: executing program 37 (id=921): socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'ip6erspan0\x00', 0x800}) 7m10.739796558s ago: executing program 1 (id=1336): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xfc6e, 0x80, 0x0, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d05, &(0x7f0000000800)="e7") ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000020c0)={0x3, 0xffffffff, 0x3, 0xfff, 0xffffd7dd, 0x48}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x922bac8556bdad8e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x88d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) 7m9.600366849s ago: executing program 1 (id=1338): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0x9, 0x3}, {0x6, 0x6}]}, 0x18, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x1694, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(0x0, &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x32}]}}}]}, 0x3c}}, 0x4040) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000200)={0x4, 0x3c00, {0xffffffffffffffff}, {}, 0x0, 0x5}) ptrace$ARCH_GET_CPUID(0x1e, r5, 0x0, 0x1011) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) madvise(&(0x7f000077a000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m5.038088066s ago: executing program 1 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000020603000000000000000010020000001c0007800800064000000001050040000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"/108], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x48804) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000009060300000000000000000002000000400007800c000180080001407f0000010c001480080001400a0101000c001840000000000000000d060005402710000099e2ce6a6c4e917f080006400000000105000100060000000900020073797a3100000000"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) poll(0x0, 0x0, 0x4b0) close(r0) poll(0x0, 0x0, 0x4b0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c492100", @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf25010000000800030009000000"], 0x1c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) setns(r0, 0x10000000) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b420f01c866ba420066b8e20066ef0f29902cbb000065660f3881470d666666440f38826b410f784628410f00114e0fd6c48bc4033921820f47a753fd", 0x46}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000040)={0xd5, 0x0, 0x40}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x6000, 0xe3) file_getattr(r8, &(0x7f0000000140)='./sys\x00', &(0x7f00000001c0), 0x18, 0x100) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x101000, 0x12) fcntl$setlease(r9, 0x400, 0x1) setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e23, 0x8, @local, 0x10000}, 0xffffffffffffffff, {[0x5, 0x8, 0x1, 0x3, 0xfffff800, 0x25, 0x3, 0x5]}}, 0x5c) 7m3.65814359s ago: executing program 1 (id=1366): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x104e80a, 0x0) 7m3.400009895s ago: executing program 1 (id=1371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)='#Y', 0x0, 0x2}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880), 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{0x0, 0x6}, {0x18, 0xa4}, 0x1, 0x7}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000017c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008094}, 0x800) r5 = timerfd_create(0x7, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004001) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000040)=0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00'}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) 7m2.284166361s ago: executing program 1 (id=1374): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) 7m2.008407835s ago: executing program 38 (id=1374): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) 3m30.573206636s ago: executing program 4 (id=2153): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000081, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r2, &(0x7f0000005b00)={0x2020}, 0x2020) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000080)={0x14, &(0x7f00000003c0)={0x0, 0x11, 0x53, {0x53, 0x21, "5d71dd55b0bd707a0d48f3fe966efde25a22c6b77926911a1f8543db551178525b6d14b1efd1bd89f014e3201578e01a2424e5efa458eeb933b3febb2174578dd21fcad7ce870c9da7ddb452e891e34efd"}}, &(0x7f00000004c0)={0x0, 0x3, 0x97, @string={0x97, 0x3, "e67d7b018b6f420ea55f0e19c907637007b838299bdb21fa8f358def263fe8cd36b45f8790065d116214897314b964b5552989e34fd9079cc06c7d76b84fd247f03516026b7de4fd74bc1d6d56442670c414bc7e885058e966289f5564fd2816b8e7312b6cb0dd2bd5951fe2ebfb9e7c7046e98de6d423692e3d80339230ce60023439f41655829e3292e4bc52a93d4399f558bc2d"}}}, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x42, "4d6b0f81342a9ab0b1c2e039a897e640721b19f48dc663eee38a7791cb1f12b85eb87135a73a38785976f18085976c8ad6bd5f8894c9c7090184f7e361f0368cdf93"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0xc0, 0x5, 0x1, '}'}, &(0x7f0000000280)={0x40, 0x5, 0x5, "be55a32d84"}}) 3m29.940093234s ago: executing program 4 (id=2155): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_emit_vhci(0x0, 0x88) socket(0x2, 0x805, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000000)="85d5736bf9f8ae64f45d00", 0xb}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x40400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x800, 0x2, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x828b, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x6f, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x6, &(0x7f0000000140)=[{0x7, 0x1, 0xdb, 0x7ee7}, {0xe6c, 0x2, 0x9, 0x5}, {0x9, 0x7, 0xa9, 0x6}, {0xa331, 0x9, 0x81, 0xc}, {0x907, 0xa, 0x3, 0x7}, {0x9, 0x9, 0x6, 0x7}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) 3m29.356871877s ago: executing program 4 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3m29.309106276s ago: executing program 4 (id=2161): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mprotect(&(0x7f0000181000/0x2000)=nil, 0x2000, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x1}) setns(r1, 0x20000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x1000, 0x96, 0x1, 0x3, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x18, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 3m28.295168099s ago: executing program 4 (id=2164): syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x11, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bb", 0x0, 0x0, 0x0, 0xffffffff}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xfff, &(0x7f0000000140)=0x0) io_getevents(r0, 0x3a, 0x80000000000012c, &(0x7f0000000400), &(0x7f0000000200)={0x0, 0x3938700}) socket$inet6(0xa, 0x80802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x4) socketpair(0x1b, 0x5, 0x8, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xbac6, 0x1000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r6, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="000094185a542c7115198c14c0252cecd0f48e9df20840e9174d428ef086fa25d7c79f3e7fd35116b40ece9bf0e9b3d1ee1884d0fc88c7289fdb8ceb6265ecd9e63179"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) 3m27.011558706s ago: executing program 4 (id=2168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250100000004000180100002800c00018008993105b5000000"], 0x28}, 0x1, 0x0, 0x0, 0x141}, 0x80c0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES32], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540), 0x200080, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0xd, 0x4, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r5, &(0x7f0000000400)="7472616e73706f72743d6c6f6f702c6e716e3d74657374737d627379732ca67873616271666c6f77", 0x28) r7 = openat$cgroup_ro(r5, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, 0x0, 0x0) readv(r7, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 3m11.570971931s ago: executing program 39 (id=2168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250100000004000180100002800c00018008993105b5000000"], 0x28}, 0x1, 0x0, 0x0, 0x141}, 0x80c0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES32], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540), 0x200080, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0xd, 0x4, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r5, &(0x7f0000000400)="7472616e73706f72743d6c6f6f702c6e716e3d74657374737d627379732ca67873616271666c6f77", 0x28) r7 = openat$cgroup_ro(r5, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, 0x0, 0x0) readv(r7, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 26.093536629s ago: executing program 3 (id=2975): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26.01862432s ago: executing program 3 (id=2976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0xffffffffffffffff) kcmp(r0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x40040) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) 24.567085818s ago: executing program 3 (id=2980): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x141002, 0x80) 24.386352417s ago: executing program 3 (id=2981): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) 24.24484102s ago: executing program 3 (id=2982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x24, r1, 0x1, 0x70bd23, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 24.008019412s ago: executing program 3 (id=2986): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(r3) socket$kcm(0x10, 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500"], 0x70}}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) 14.420914634s ago: executing program 9 (id=3031): r0 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000006740)) 14.264797149s ago: executing program 9 (id=3033): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 13.902947322s ago: executing program 9 (id=3036): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r2, 0x0, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg(r4, &(0x7f00000002c0)={0x1, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x44) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') socket$inet_tcp(0x2, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 12.78602124s ago: executing program 9 (id=3038): r0 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x20000004) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000340)) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200623) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf8, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xe4, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x33}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff06}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r9, &(0x7f0000000500)="723a732f70202e2f66696c65303a30da57b4406f4873a0e8809e9d87abecc74eed71d1a93385ff3840c7e8d7ceea9427e881c35781002ec739909f1b3f4260d0eae89008dee9c855afbe435bbc22c380f4538374ab484abc3ddb21d273ddc7ba14e8341ee35f69fdfb628ff6e04787b58cf92995e2b6a2dbff8cf329bf2371566e1b3141fee5e0d1c6eeb90b0db2b28dd2404f3a8293b3734155ebb0d997f06b4b05937c10bca637a84f78daf8704c3185b5abe19a2cb180aab475d68905393ba8960f6d75f836e1b32589a27da0b09899f1a4b09cd2f7edd6712e81fe40171f741c93065a1ea64fd8a5eaf94bcc7620364868dd3d389c0968a33029a7ccf1657ba8a9a994a68e8e32d16c1dd6056cff9d8c2b9786d1f183536771ab", 0x11c) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x9, @meta={0x3854454d, 0x31912aef, 0x33565348, 0x6661, 0x4c319713}}, 0x10000}) 11.324333261s ago: executing program 9 (id=3047): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 10.828141689s ago: executing program 9 (id=3054): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 9.793432549s ago: executing program 2 (id=3061): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sec/tomoyo/query\x00', 0x1, 0x186) 9.755443968s ago: executing program 2 (id=3063): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioperm(0x8, 0x3, 0x163b) syz_usb_connect(0x5, 0x5d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000551b8920b822276003000000030109024b0001000000000904000000", @ANYRESOCT=0x0], 0x0) syz_clone3(0x0, 0x0) 8.987486519s ago: executing program 40 (id=2986): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(r3) socket$kcm(0x10, 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500"], 0x70}}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) 5.72384861s ago: executing program 2 (id=3087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 4.658884852s ago: executing program 2 (id=3089): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c90000001400"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab08a33}, 0x48800) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000001380)={0x0, 0x2, 0x0, 0x3}) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000140), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0x1}, 0x8) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 4.363019177s ago: executing program 8 (id=3091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.600118939s ago: executing program 8 (id=3092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="143dcd7590af17b080b579aa000000000000000500004a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.478209826s ago: executing program 0 (id=3093): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='snd_aloop.0', 0xb) 3.360680988s ago: executing program 0 (id=3094): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.096070637s ago: executing program 0 (id=3095): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000240)=0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x460000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x88840, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) 2.877631268s ago: executing program 2 (id=3096): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000cc0)={0x20, 0x16, 0x4, "b86e7b5b"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00'}, 0x18) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.108465755s ago: executing program 0 (id=3097): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000c4a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.107381527s ago: executing program 8 (id=3098): syz_emit_vhci(0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[], 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0}) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, 0x0, &(0x7f00000001c0), &(0x7f0000000180)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, &(0x7f0000000540)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x4, 0x4, 0x7fffffff, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x77fd]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) 1.692366494s ago: executing program 0 (id=3099): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) 1.542235556s ago: executing program 8 (id=3100): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x20000000) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) 1.476280616s ago: executing program 0 (id=3101): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8cd", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 1.430494317s ago: executing program 8 (id=3102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 886.794664ms ago: executing program 8 (id=3103): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) write(r2, &(0x7f00000002c0)='snd_aloop.0', 0xb) 0s ago: executing program 2 (id=3104): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000440), &(0x7f0000000480)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000001010102"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): 14786] RAX: ffffffffffffffda RBX: 00007ff376625fa0 RCX: 00007ff37639e0d9 [ 624.385464][T14786] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 624.385470][T14786] RBP: 00007ff377238090 R08: 0000000000000000 R09: 0000000000000000 [ 624.385477][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.385483][T14786] R13: 00007ff376626038 R14: 00007ff376625fa0 R15: 00007fff3c1d1788 [ 624.385496][T14786] [ 624.701196][ T187] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 624.709570][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.776440][T14789] syz_tun: entered allmulticast mode [ 624.830124][T14789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2192'. [ 624.975568][T14791] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2192'. [ 625.018808][T14788] syz_tun: left allmulticast mode [ 625.124656][T13048] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 625.164341][T14796] random: crng reseeded on system resumption [ 625.312779][ T187] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 625.366969][T13048] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 625.431943][ T187] usb 3-1: config 0 descriptor?? [ 625.439408][T14793] 9p: Bad value for 'rfdno' [ 625.443888][T13048] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 625.474091][T13048] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.477688][ T187] usb 3-1: can't set config #0, error -71 [ 625.491247][ T187] usb 3-1: USB disconnect, device number 30 [ 625.639855][T13048] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 625.669154][T13048] usb 9-1: Manufacturer: syz [ 625.689648][T13048] usb 9-1: config 0 descriptor?? [ 625.764008][T13048] rc_core: IR keymap rc-hauppauge not found [ 625.801597][T13048] Registered IR keymap rc-empty [ 625.832612][T13048] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 625.845416][T13048] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input46 [ 626.081806][T13048] usb 9-1: USB disconnect, device number 62 [ 626.362902][ T1013] Bluetooth: hci2: Frame reassembly failed (-84) [ 627.136303][T14820] SELinux: invalid class [ 627.162813][T14821] overlay: Unknown parameter 'create ' [ 627.232341][T14820] SELinux: failed to load policy [ 627.275027][ T5696] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 627.736107][T14827] loop9: detected capacity change from 0 to 2640 [ 627.744359][T14827] Buffer I/O error on dev loop9, logical block 0, async page read [ 627.752328][T14827] Buffer I/O error on dev loop9, logical block 0, async page read [ 627.760221][T14827] Buffer I/O error on dev loop9, logical block 0, async page read [ 627.768117][T14827] Buffer I/O error on dev loop9, logical block 0, async page read [ 627.776025][T14827] Buffer I/O error on dev loop9, logical block 0, async page read [ 627.784214][T14827] ldm_validate_partition_table(): Disk read failed. [ 627.791056][T14827] Dev loop9: unable to read RDB block 0 [ 627.797226][T14827] loop9: unable to read partition table [ 627.803531][T14827] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 628.192107][ T187] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 628.299943][ T5696] usb 9-1: Using ep0 maxpacket: 8 [ 628.312092][T14829] syz_tun: entered allmulticast mode [ 628.318966][T14829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2205'. [ 628.374393][T14829] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2205'. [ 628.384033][T14828] syz_tun: left allmulticast mode [ 628.403113][ T5602] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 628.408023][ T5613] Bluetooth: hci2: command 0x1003 tx timeout [ 628.530780][ T5696] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 628.590002][T14835] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 629.573867][ T187] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 629.613291][ T5696] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.721790][ T5696] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.928378][ T29] audit: type=1400 audit(1787162099.497:4550): avc: denied { ioctl } for pid=14841 comm="syz.3.2211" path="socket:[54544]" dev="sockfs" ino=54544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 630.005529][ T187] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 630.014093][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.471965][ T187] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 630.480093][ T187] usb 3-1: Manufacturer: syz [ 630.501111][ T187] usb 3-1: config 0 descriptor?? [ 630.863178][ T187] usb 3-1: can't set config #0, error -71 [ 630.875566][ T187] usb 3-1: USB disconnect, device number 31 [ 630.987042][T14848] xt_hashlimit: size too large, truncated to 1048576 [ 630.994119][T14848] xt_hashlimit: invalid rate [ 631.061411][ T29] audit: type=1326 audit(1787162100.657:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 631.161187][ T29] audit: type=1326 audit(1787162100.657:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 631.187749][ T29] audit: type=1326 audit(1787162100.717:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 631.214174][ T29] audit: type=1326 audit(1787162100.717:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 631.322725][ T29] audit: type=1326 audit(1787162100.717:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 631.387452][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.412208][ T5696] usb 9-1: config 0 descriptor?? [ 631.511145][T14861] xt_connbytes: Forcing CT accounting to be enabled [ 631.517889][T14861] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 631.534917][ T5696] usb 9-1: can't set config #0, error -71 [ 631.546239][ T5696] usb 9-1: USB disconnect, device number 63 [ 631.586689][ T29] audit: type=1326 audit(1787162100.717:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 631.634980][ T187] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 631.828338][ T29] audit: type=1326 audit(1787162100.717:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 632.191118][ T29] audit: type=1326 audit(1787162100.717:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 632.592935][ T187] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.804966][ T29] audit: type=1326 audit(1787162100.717:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.8.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 633.168826][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.607380][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.617214][ T187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 633.630253][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.649233][ T187] usb 3-1: config 0 descriptor?? [ 634.106495][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.120292][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 634.204990][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 634.216205][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 634.225433][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 634.239086][T14890] tipc: Enabled bearer , priority 10 [ 634.318420][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.328603][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 634.342451][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 634.409901][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 634.425829][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 634.612238][ T187] usbhid 3-1:0.0: can't add hid device: -71 [ 634.618702][ T187] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 635.103917][ T187] usb 3-1: USB disconnect, device number 32 [ 635.352432][T13048] tipc: Node number set to 1847304646 [ 636.554566][ T5602] Bluetooth: hci2: command tx timeout [ 636.758577][T14924] nvmet: disable ns before setting buffered_io value. [ 636.841228][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 636.841244][ T29] audit: type=1400 audit(1787162106.408:4588): avc: denied { write } for pid=14923 comm="syz.9.2240" name="ports" dev="configfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 636.884149][ T29] audit: type=1400 audit(1787162106.468:4589): avc: denied { write } for pid=14923 comm="syz.9.2240" name="subsystems" dev="configfs" ino=54735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 636.934922][ T29] audit: type=1400 audit(1787162106.468:4590): avc: denied { write } for pid=14923 comm="syz.9.2240" name="subsystems" dev="configfs" ino=54735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 637.005979][ T351] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:94a0ec7e-789c-43d1-b3ad-593c30bc42da. [ 637.064922][T14886] lo speed is unknown, defaulting to 1000 [ 637.084210][T14924] nvme nvme0: creating 2 I/O queues. [ 637.093835][T14924] nvme nvme0: new ctrl: "testsubsys" [ 637.107368][T14929] kvm: kvm [14926]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffda00000100 [ 637.142552][T14929] kvm: kvm [14926]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 637.707208][T14886] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.714662][T14886] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.721904][T14886] bridge_slave_0: entered allmulticast mode [ 637.804430][T14886] bridge_slave_0: entered promiscuous mode [ 637.812227][T14886] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.821229][T14886] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.967078][T14886] bridge_slave_1: entered allmulticast mode [ 637.974477][T14886] bridge_slave_1: entered promiscuous mode [ 638.025299][T14886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.052052][T14886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.087570][T14886] team0: Port device team_slave_0 added [ 638.132361][T14886] team0: Port device team_slave_1 added [ 638.195824][T14954] Invalid ELF header magic: != ELF [ 638.263528][ T29] audit: type=1400 audit(1787162107.818:4591): avc: denied { module_load } for pid=14950 comm="syz.8.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 638.679897][ T5602] Bluetooth: hci2: command tx timeout [ 638.857263][T14886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.870864][T14886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.931453][T14886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.934471][T14960] futex_wake_op: syz.2.2248 tries to shift op by 144; fix this program [ 638.943834][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2246'. [ 639.004991][T14886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.035638][T14886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.070776][T14886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.301989][T14958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.415518][T14958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.494625][T14886] hsr_slave_0: entered promiscuous mode [ 639.501186][T14886] hsr_slave_1: entered promiscuous mode [ 639.507283][T14886] debugfs: 'hsr0' already exists in 'hsr' [ 639.513032][T14886] Cannot create hsr debugfs directory [ 640.729329][ T5602] Bluetooth: hci2: command tx timeout [ 640.844807][ T29] audit: type=1400 audit(1787162110.449:4592): avc: denied { mounton } for pid=14982 comm="syz.3.2252" path=2F3235332FE91F7189591E9233614B dev="tmpfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 640.978644][T14886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.006644][T14988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 641.227966][T14886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.629386][T14886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.788311][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 642.007422][T14886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.142846][T14886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 642.181947][T14886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.192902][T14886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 642.227359][T14886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.235070][T14886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.291042][T14886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.299688][T14886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 642.327629][T14886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.331620][T13046] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 642.471729][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2268'. [ 642.551173][T15029] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2268'. [ 642.553920][T14886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.572496][T13046] usb 3-1: Using ep0 maxpacket: 32 [ 642.578190][T13046] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 642.584275][T14886] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.599174][T13046] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 642.606763][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.614383][T13046] usb 3-1: config 0 has no interface number 0 [ 642.614432][T13046] usb 3-1: config 0 interface 12 has no altsetting 0 [ 642.616239][T13046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.616262][T13046] usb 3-1: Product: syz [ 642.616278][T13046] usb 3-1: Manufacturer: syz [ 642.616294][T13046] usb 3-1: SerialNumber: syz [ 642.618632][T13046] usb 3-1: config 0 descriptor?? [ 642.668818][ T6802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.717502][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.724637][ T6802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.804046][T15038] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2271'. [ 642.854238][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2271'. [ 642.874190][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2271'. [ 642.887468][ T5602] Bluetooth: hci2: command tx timeout [ 642.951187][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 643.151614][T13047] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 643.394445][T13047] usb 10-1: unable to get BOS descriptor or descriptor too short [ 643.412047][T13047] usb 10-1: New USB device found, idVendor=0499, idProduct=105d, bcdDevice= 0.40 [ 643.439667][T13047] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 77, changing to 7 [ 643.490192][T13047] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.515017][T13047] usb 10-1: Product: syz [ 643.530997][T13047] usb 10-1: Manufacturer: syz [ 643.546309][T13047] usb 10-1: SerialNumber: syz [ 643.579496][T14886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.603418][T13047] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.630403][T13047] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 643.678751][T13047] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.712539][T13047] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 643.739119][T14886] veth0_vlan: entered promiscuous mode [ 643.759211][T13047] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.774611][T14886] veth1_vlan: entered promiscuous mode [ 643.834915][T14886] veth0_macvtap: entered promiscuous mode [ 643.850335][T13047] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 643.862934][T14886] veth1_macvtap: entered promiscuous mode [ 643.883656][T14886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.886112][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.904118][T14886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.960178][ T1013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.078830][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.084086][T10236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.086719][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.215374][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.223221][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.279590][ T1013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.289102][ T1013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.333275][T13002] usb 10-1: USB disconnect, device number 75 [ 644.624913][T13046] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 644.638772][T13046] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 644.654071][T13046] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 644.776396][T13046] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 644.791236][T13046] usb 3-1: USB disconnect, device number 33 [ 646.051054][T13002] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 646.171393][T13046] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 646.183821][T15116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 646.881267][T15120] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2295'. [ 646.992353][T13002] usb 4-1: device descriptor read/64, error -71 [ 647.047829][T13046] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 647.064165][T13046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.086081][T13046] usb 3-1: Product: syz [ 647.097347][ T29] audit: type=1400 audit(1787162116.719:4593): avc: denied { execute } for pid=15122 comm="syz.8.2296" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 647.122709][T13046] usb 3-1: Manufacturer: syz [ 647.127674][T13046] usb 3-1: SerialNumber: syz [ 647.137016][T13046] usb 3-1: config 0 descriptor?? [ 647.149401][T13046] ch341 3-1:0.0: ch341-uart converter detected [ 647.271410][T13002] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 647.441296][T13002] usb 4-1: device descriptor read/64, error -71 [ 648.015717][T13002] usb usb4-port1: attempt power cycle [ 648.242189][T13046] usb 3-1: failed to receive control message: -110 [ 648.300351][T13046] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 649.253531][T13046] usb 3-1: USB disconnect, device number 34 [ 649.338762][ T29] audit: type=1400 audit(1787162118.930:4594): avc: denied { write } for pid=15162 comm="syz.2.2307" name="lun_0" dev="configfs" ino=34530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 649.338811][T13046] ch341 3-1:0.0: device disconnected [ 649.366797][T15163] se_device not configured yet, cannot port link [ 649.474792][ T5696] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 649.492800][ T29] audit: type=1400 audit(1787162118.930:4595): avc: denied { write } for pid=15133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.554564][ T29] audit: type=1400 audit(1787162118.930:4596): avc: denied { write } for pid=15162 comm="syz.2.2307" name="lun_0" dev="configfs" ino=34530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 649.622964][T15166] db_root: cannot be changed because it's in use [ 649.912823][ T29] audit: type=1400 audit(1787162119.490:4597): avc: denied { write } for pid=15167 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.098130][ T5696] usb 9-1: Using ep0 maxpacket: 32 [ 650.317831][ T5696] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 650.774152][ T5696] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 650.782272][ T5696] usb 9-1: config 0 has no interface number 0 [ 650.790034][ T5696] usb 9-1: config 0 interface 12 has no altsetting 0 [ 651.320652][ T5794] IPVS: starting estimator thread 0... [ 651.574263][ T29] audit: type=1400 audit(1787162121.200:4598): avc: denied { write } for pid=15181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.645966][T15199] IPVS: using max 43 ests per chain, 103200 per kthread [ 651.864271][ T29] audit: type=1400 audit(1787162121.330:4599): avc: denied { write } for pid=15205 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.935151][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.943182][ T5696] usb 9-1: Product: syz [ 651.958750][ T5696] usb 9-1: config 0 descriptor?? [ 652.149204][ T29] audit: type=1400 audit(1787162121.730:4600): avc: denied { accept } for pid=15203 comm="syz.0.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 652.218232][T13048] kernel read not supported for file /video9 (pid: 13048 comm: kworker/1:5) [ 652.302401][ T29] audit: type=1400 audit(1787162121.730:4601): avc: denied { write } for pid=15203 comm="syz.0.2316" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 652.548821][ T5696] usb 9-1: can't set config #0, error -71 [ 652.559757][ T5696] usb 9-1: USB disconnect, device number 64 [ 652.800207][T15231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2322'. [ 653.003420][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2324'. [ 653.014220][T15236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.021914][T15236] batadv0: mtu less than device minimum [ 653.028457][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.041951][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.054885][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.066177][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.077422][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.088672][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.099965][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.111243][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.122552][T15236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 653.318062][T15236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.337762][T15236] batman_adv: batadv0: Interface deactivated: dummy0 [ 653.345445][T15236] batman_adv: batadv0: Removing interface: dummy0 [ 653.508593][T15236] batadv0 (unregistering): left promiscuous mode [ 653.710484][T13048] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 653.991504][T13048] usb 4-1: Using ep0 maxpacket: 32 [ 654.042252][T13048] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 654.283680][T13048] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 654.589044][T13048] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 654.779069][T13048] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 654.917270][T13048] usb 4-1: config 1 has no interface number 0 [ 655.054658][T13048] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 655.197673][T13048] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 655.349539][T13048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.386112][ T29] audit: type=1400 audit(1787162124.960:4602): avc: denied { write } for pid=15251 comm="syz.0.2329" name="functions" dev="configfs" ino=17325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 655.453925][T13048] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 655.568653][T15260] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 655.582847][T15260] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 655.599693][T15260] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 655.615366][T15260] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 656.176003][T13048] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 656.338957][ T5794] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 656.420309][ T5794] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 656.449634][T15269] jffs2: notice: (15269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 656.568548][T15275] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 657.189369][T13048] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 657.706940][ T29] audit: type=1400 audit(1787162127.321:4603): avc: denied { write } for pid=15333 comm="syz.9.2347" name="c.1" dev="configfs" ino=20570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 657.732740][ T5794] usb 4-1: USB disconnect, device number 36 [ 657.772728][ T5794] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 658.551927][ T5602] Bluetooth: hci2: command tx timeout [ 658.698682][T15343] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 659.219010][T15352] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 659.227617][T15352] CPU: 0 UID: 0 PID: 15352 Comm: syz.0.2352 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.227643][T15352] Tainted: [L]=SOFTLOCKUP [ 659.227648][T15352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 659.227655][T15352] Call Trace: [ 659.227661][T15352] [ 659.227666][T15352] dump_stack_lvl+0x100/0x190 [ 659.227685][T15352] sysfs_warn_dup.cold+0x1c/0x28 [ 659.227703][T15352] sysfs_create_dir_ns+0x24b/0x2b0 [ 659.227721][T15352] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 659.227736][T15352] ? find_held_lock+0x2b/0x80 [ 659.227750][T15352] ? kobject_add_internal+0x25f/0x930 [ 659.227765][T15352] ? kobject_add_internal+0x25f/0x930 [ 659.227780][T15352] ? class_dir_child_ns_type+0xd/0x60 [ 659.227796][T15352] kobject_add_internal+0x2c8/0x930 [ 659.227812][T15352] kobject_add+0x16a/0x1e0 [ 659.227825][T15352] ? __pfx_kobject_add+0x10/0x10 [ 659.227839][T15352] ? get_device_parent+0x1b3/0x4c0 [ 659.227852][T15352] ? kobject_put+0xb9/0x640 [ 659.227869][T15352] device_add+0x294/0x1970 [ 659.227884][T15352] ? lockdep_init_map_type+0x5c/0x250 [ 659.227899][T15352] ? __pfx_device_add+0x10/0x10 [ 659.227911][T15352] ? lockdep_init_map_type+0x5c/0x250 [ 659.227927][T15352] ? __init_waitqueue_head+0xca/0x150 [ 659.227947][T15352] tty_register_device_attr+0x388/0x7f0 [ 659.227959][T15352] ? lockdep_init_map_type+0x5c/0x250 [ 659.227975][T15352] ? __pfx_tty_register_device_attr+0x10/0x10 [ 659.227989][T15352] ? tty_port_init+0x156/0x1c0 [ 659.228003][T15352] gsm_activate_mux+0x155/0x2a0 [ 659.228015][T15352] gsmld_ioctl+0xbbc/0x15c0 [ 659.228032][T15352] ? __pfx_gsmld_ioctl+0x10/0x10 [ 659.228055][T15352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 659.228070][T15352] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 659.228088][T15352] ? __pfx_gsmld_ioctl+0x10/0x10 [ 659.228100][T15352] tty_ioctl+0x11b4/0x1640 [ 659.228112][T15352] ? __pfx_tty_ioctl+0x10/0x10 [ 659.228122][T15352] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 659.228144][T15352] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 659.228171][T15352] ? selinux_file_ioctl+0x13b/0x290 [ 659.228189][T15352] ? selinux_file_ioctl+0xb6/0x290 [ 659.228209][T15352] ? __pfx_tty_ioctl+0x10/0x10 [ 659.228221][T15352] __x64_sys_ioctl+0x18e/0x210 [ 659.228236][T15352] do_syscall_64+0x123/0x790 [ 659.228249][T15352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.228262][T15352] RIP: 0033:0x7f1fa459e0d9 [ 659.228275][T15352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.228293][T15352] RSP: 002b:00007f1fa53c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.228311][T15352] RAX: ffffffffffffffda RBX: 00007f1fa4826180 RCX: 00007f1fa459e0d9 [ 659.228319][T15352] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 659.228326][T15352] RBP: 00007f1fa4635024 R08: 0000000000000000 R09: 0000000000000000 [ 659.228332][T15352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.228339][T15352] R13: 00007f1fa4826218 R14: 00007f1fa4826180 R15: 00007ffc0f620178 [ 659.228354][T15352] [ 659.228371][T15352] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 659.826283][T15339] random: crng reseeded on system resumption [ 661.109732][T13047] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 661.699734][T13047] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 661.737810][T13047] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.766806][T15372] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 661.796089][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 661.837233][ T29] audit: type=1326 audit(1787162131.381:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 661.838743][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 661.863780][ T29] audit: type=1326 audit(1787162131.431:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 661.909597][ T29] audit: type=1326 audit(1787162131.441:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 662.022839][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 662.042024][ T29] audit: type=1326 audit(1787162131.441:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 662.064544][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 662.108017][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 662.123013][ T29] audit: type=1326 audit(1787162131.441:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 662.149587][ T29] audit: type=1326 audit(1787162131.441:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 662.162209][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 662.176424][ T29] audit: type=1326 audit(1787162131.441:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 662.238913][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 662.256097][ T29] audit: type=1326 audit(1787162131.441:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 662.280335][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 662.282904][ T29] audit: type=1326 audit(1787162131.441:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.9.2359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f248a19e0d9 code=0x7ffc0000 [ 662.308061][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 662.371310][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 662.407217][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 662.437285][T13047] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 662.473025][T13047] usb 9-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 662.500609][T13047] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.616006][T13047] usb 9-1: Product: syz [ 662.760616][T13047] usb 9-1: Manufacturer: syz [ 662.779163][T13047] usb 9-1: SerialNumber: syz [ 662.796647][T15358] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 662.803934][T15358] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 662.885301][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 662.885426][ T29] audit: type=1400 audit(1787162132.491:4639): avc: denied { search } for pid=15390 comm="syz.3.2356" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 662.891824][T15358] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 663.016379][T15358] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 663.024926][T15358] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 663.039999][T15394] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 663.411341][ T29] audit: type=1400 audit(1787162132.491:4640): avc: denied { read write } for pid=15390 comm="syz.3.2356" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 663.434062][ T29] audit: type=1400 audit(1787162132.491:4641): avc: denied { open } for pid=15390 comm="syz.3.2356" path="/274/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 663.535232][ T29] audit: type=1400 audit(1787162133.121:4642): avc: denied { unmount } for pid=10008 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 663.692511][T13047] usb 9-1: can't set config #1, error -71 [ 663.777386][T13047] usb 9-1: USB disconnect, device number 65 [ 665.128646][ T5794] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 665.754116][ T29] audit: type=1400 audit(1787162135.331:4643): avc: denied { write } for pid=15407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.920713][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2376'. [ 665.986915][ T29] audit: type=1400 audit(1787162135.561:4644): avc: denied { setopt } for pid=15437 comm="syz.2.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 666.035448][ T29] audit: type=1400 audit(1787162135.561:4645): avc: denied { write } for pid=15439 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.159692][T13047] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 666.450368][T13047] usb 10-1: Using ep0 maxpacket: 8 [ 666.457154][T13047] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 666.477059][T13047] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.485333][T13047] usb 10-1: Product: syz [ 666.493320][T13047] usb 10-1: Manufacturer: syz [ 666.504807][T13047] usb 10-1: SerialNumber: syz [ 666.506419][ T5794] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 666.957233][T13047] usb 10-1: config 0 descriptor?? [ 667.166339][T15458] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 667.173627][T13047] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 667.445533][ T5794] usb 9-1: unable to read config index 0 descriptor/all [ 667.453696][ T5794] usb 9-1: can't read configurations, error -71 [ 668.977298][T13047] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 669.141575][T13047] usb 10-1: USB disconnect, device number 76 [ 671.998117][T13047] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 672.164260][T15519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 672.364209][T13047] usb 9-1: Using ep0 maxpacket: 8 [ 672.407377][ T5794] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 672.419184][T13047] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 672.432191][T13047] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.440307][T13047] usb 9-1: Product: syz [ 672.449807][ T29] audit: type=1400 audit(1787162142.022:4646): avc: denied { write } for pid=15499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.487896][T13047] usb 9-1: Manufacturer: syz [ 672.502362][T13047] usb 9-1: SerialNumber: syz [ 672.515792][T13047] usb 9-1: config 0 descriptor?? [ 672.604947][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2399'. [ 672.636981][ T29] audit: type=1400 audit(1787162142.252:4647): avc: denied { write } for pid=15522 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.915899][T13047] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 673.032911][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 673.078779][T13046] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 673.215836][T13047] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 673.263134][ T5794] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 673.319576][T13046] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 673.338993][T13047] usb 9-1: USB disconnect, device number 68 [ 673.456387][T13046] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 673.701039][ T5794] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 673.709409][ T5794] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 673.718005][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 673.727146][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 673.736792][ T5794] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 673.736818][T13046] usb 10-1: config 0 interface 0 has no altsetting 0 [ 673.746429][ T5794] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 673.746480][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.302457][T13046] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 674.374841][T13046] usb 10-1: Product: syz [ 674.435356][T13046] usb 10-1: Manufacturer: syz [ 674.508904][T13046] usb 10-1: SerialNumber: syz [ 674.714039][T13046] usb 10-1: config 0 descriptor?? [ 674.994114][ T5794] usb 4-1: config 0 descriptor?? [ 675.013022][T13046] usb 10-1: selecting invalid altsetting 0 [ 675.069038][ T5794] usb 4-1: can't set config #0, error -71 [ 675.094627][ T5794] usb 4-1: USB disconnect, device number 37 [ 675.475700][T13046] usb 10-1: USB disconnect, device number 77 [ 675.600066][T15375] udevd[15375]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.305337][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 676.466986][ T29] audit: type=1400 audit(1787162146.043:4648): avc: denied { write } for pid=15527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.610486][ T29] audit: type=1400 audit(1787162146.223:4649): avc: denied { write } for pid=15559 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.894224][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2408'. [ 677.245899][ T10] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 677.547022][T15592] Bluetooth: hci0: unsupported parameter 255 [ 677.635917][T15592] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 678.032518][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.056820][ T10] usb 3-1: config 0 descriptor?? [ 678.094175][ T29] audit: type=1400 audit(1787162147.703:4650): avc: denied { write } for pid=15568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.117341][ T29] audit: type=1800 audit(1787162147.703:4651): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2417" name="MaxPower" dev="configfs" ino=58078 res=0 errno=0 [ 678.184668][ T29] audit: type=1400 audit(1787162147.783:4652): avc: denied { read } for pid=15596 comm="syz.9.2418" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 678.223669][T15604] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 678.233495][T15604] block device autoloading is deprecated and will be removed. [ 678.244902][ T29] audit: type=1400 audit(1787162147.783:4653): avc: denied { open } for pid=15596 comm="syz.9.2418" path="/414/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 678.288846][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 678.311208][ T29] audit: type=1400 audit(1787162147.833:4654): avc: denied { write } for pid=15596 comm="syz.9.2418" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 678.334096][ T29] audit: type=1400 audit(1787162147.913:4655): avc: denied { write } for pid=15606 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.495430][T15616] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 678.531182][ T10] gspca_cpia1: usb_control_msg 05, error -71 [ 678.615364][ T29] audit: type=1400 audit(1787162148.203:4656): avc: denied { write } for pid=15619 comm="syz.0.2424" name="lun_0" dev="configfs" ino=34530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 678.625212][T15620] se_device not configured yet, cannot port link [ 678.656086][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 678.662090][ T10] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 678.674563][ T10] usb 3-1: USB disconnect, device number 35 [ 678.864425][ T29] audit: type=1400 audit(1787162148.203:4657): avc: denied { write } for pid=15619 comm="syz.0.2424" name="lun_0" dev="configfs" ino=34530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 679.614064][ T29] audit: type=1400 audit(1787162149.203:4658): avc: denied { write } for pid=15615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.306062][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.874845][ T29] audit: type=1400 audit(1787162150.453:4659): avc: denied { write } for pid=15660 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.391165][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 685.391176][ T29] audit: type=1400 audit(1787162154.964:4662): avc: denied { write } for pid=15717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.621116][T15754] comedi comedi4: bad chanlist[0]=0x00020007 chan=7 range length=2 [ 685.692229][ T29] audit: type=1400 audit(1787162155.074:4663): avc: denied { write } for pid=15743 comm="syz.2.2454" path="socket:[59396]" dev="sockfs" ino=59396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 685.866978][ T29] audit: type=1400 audit(1787162155.474:4664): avc: denied { write } for pid=15756 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.564727][ T29] audit: type=1326 audit(1787162155.474:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15760 comm="syz.3.2461" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f215eb9e0d9 code=0x0 [ 690.132959][ T29] audit: type=1400 audit(1787162159.744:4666): avc: denied { write } for pid=15778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.392484][ T29] audit: type=1400 audit(1787162159.974:4667): avc: denied { write } for pid=15826 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.609837][T15824] Bluetooth: ISO socket layer initialized [ 690.754929][T15819] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 692.571876][ T29] audit: type=1400 audit(1787162162.174:4668): avc: denied { write } for pid=15846 comm="syz.8.2481" name="os_desc" dev="configfs" ino=17328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 692.921845][ T29] audit: type=1400 audit(1787162162.174:4669): avc: denied { write } for pid=15846 comm="syz.8.2481" name="os_desc" dev="configfs" ino=17328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.639551][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 693.682281][ T29] audit: type=1400 audit(1787162163.265:4670): avc: denied { write } for pid=15839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.064521][ T29] audit: type=1400 audit(1787162163.665:4671): avc: denied { write } for pid=15888 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.385823][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 694.627298][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 695.420455][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 695.428100][ T10] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 695.483111][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 695.503837][ T10] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.544284][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 695.570453][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.597796][ T10] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 695.620044][ T10] usb 4-1: config 168 interface 0 has no altsetting 0 [ 695.782155][ T29] audit: type=1400 audit(1787162165.365:4672): avc: denied { write } for pid=15891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.143997][ T29] audit: type=1400 audit(1787162165.755:4673): avc: denied { write } for pid=15923 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.184952][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 696.192342][ T10] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 696.203441][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 696.244932][ T10] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.280968][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 696.370316][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 696.438423][ T10] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 697.300889][ T10] usb 4-1: config 168 interface 0 has no altsetting 0 [ 697.617806][T15940] jffs2: notice: (15940) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 697.635999][ T10] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 697.662349][ T10] usb 4-1: can't read configurations, error -71 [ 697.752900][ T29] audit: type=1400 audit(1787162167.295:4674): avc: denied { write } for pid=15937 comm="syz.8.2506" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 698.654250][T15945] kvm: pic: non byte write [ 698.823657][ T29] audit: type=1400 audit(1787162168.435:4675): avc: denied { write } for pid=15935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.060115][ T29] audit: type=1400 audit(1787162168.675:4676): avc: denied { write } for pid=15963 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.097052][ T187] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 701.346825][ T187] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 701.601804][ T29] audit: type=1400 audit(1787162171.196:4677): avc: denied { write } for pid=15971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.755478][ T187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.766355][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.334952][ T187] usb 3-1: can't set config #1, error -71 [ 702.342632][ T187] usb 3-1: USB disconnect, device number 36 [ 702.401763][ T29] audit: type=1400 audit(1787162172.016:4678): avc: denied { write } for pid=16007 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.406133][ T29] audit: type=1400 audit(1787162174.006:4679): avc: denied { write } for pid=16017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.658499][ T29] audit: type=1400 audit(1787162174.256:4680): avc: denied { write } for pid=16047 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.645048][T16075] binder: 16068:16075 ioctl 40046205 0 returned -22 [ 705.652457][T16075] binder: 16068:16075 ioctl c0306201 0 returned -14 [ 705.865297][ T187] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 707.207825][ T187] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 707.664921][ T187] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 707.674706][ T187] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 708.187224][ T29] audit: type=1400 audit(1787162177.806:4681): avc: denied { write } for pid=16064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.303213][ T29] audit: type=1400 audit(1787162177.916:4682): avc: denied { write } for pid=16098 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.727670][T16115] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 708.943383][ T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.951500][ T187] usb 10-1: Product: syz [ 708.959781][ T29] audit: type=1400 audit(1787162178.396:4683): avc: denied { write } for pid=16112 comm="syz.3.2547" name="functions" dev="configfs" ino=17325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 708.984849][ T29] audit: type=1400 audit(1787162178.506:4684): avc: denied { write } for pid=16112 comm="syz.3.2547" name="c.1" dev="configfs" ino=20570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 709.028892][ T29] audit: type=1400 audit(1787162178.506:4685): avc: denied { write } for pid=16112 comm="syz.3.2547" name="c.1" dev="configfs" ino=20570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 709.312490][ T187] usb 10-1: can't set config #1, error -71 [ 709.324365][ T187] usb 10-1: USB disconnect, device number 78 [ 710.389347][T16137] net_ratelimit: 10 callbacks suppressed [ 710.389360][T16137] 0: reclassify loop, rule prio 0, protocol 03 [ 710.610274][ T187] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 711.356992][ T187] usb 10-1: Using ep0 maxpacket: 16 [ 711.575236][ T187] usb 10-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 712.073902][T16156] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 712.152235][ T29] audit: type=1400 audit(1787162181.737:4686): avc: denied { write } for pid=16157 comm="syz.8.2562" name="c.1" dev="configfs" ino=20570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 712.196154][T16164] program syz.2.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.219939][ T187] usb 10-1: string descriptor 0 read error: -71 [ 712.226755][ T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.249255][ T29] audit: type=1400 audit(1787162181.737:4687): avc: denied { write } for pid=16157 comm="syz.8.2562" name="c.1" dev="configfs" ino=20570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 712.266964][ T187] usb 10-1: config 0 descriptor?? [ 712.344804][ T187] usb 10-1: can't set config #0, error -71 [ 712.353280][ T187] usb 10-1: USB disconnect, device number 79 [ 712.354681][T16169] jffs2: notice: (16169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 712.508204][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2568'. [ 713.163390][T13002] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 713.563269][T13002] usb 9-1: Using ep0 maxpacket: 32 [ 713.727287][T13002] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 713.737621][T13002] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 713.746112][T13002] usb 9-1: config 0 has no interface number 0 [ 713.752547][T13002] usb 9-1: config 0 interface 12 has no altsetting 0 [ 713.775286][T13002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.783403][T13002] usb 9-1: Product: syz [ 713.787578][T13002] usb 9-1: Manufacturer: syz [ 713.792173][T13002] usb 9-1: SerialNumber: syz [ 713.799566][T13002] usb 9-1: config 0 descriptor?? [ 714.818392][T16205] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 718.768477][T13002] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 718.777924][T13002] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 718.792614][T13002] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 718.808632][T13002] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 718.857878][T13002] usb 9-1: USB disconnect, device number 69 [ 720.077064][T16254] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 721.316243][ T29] audit: type=1400 audit(1787162190.898:4688): avc: denied { ioctl } for pid=16261 comm="syz.9.2598" path="socket:[61771]" dev="sockfs" ino=61771 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 721.852095][ T187] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 722.526810][ T187] usb 10-1: Using ep0 maxpacket: 16 [ 722.748859][ T187] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 723.218755][ T187] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 723.229684][ T187] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 723.393178][ T187] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.408302][ T187] usb 10-1: config 0 descriptor?? [ 723.852499][T13047] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 723.912303][ T29] audit: type=1400 audit(1787162193.528:4689): avc: denied { listen } for pid=16316 comm="syz.8.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 724.574770][ T187] usbhid 10-1:0.0: can't add hid device: -71 [ 724.580880][ T187] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 724.591951][T13047] usb 3-1: Using ep0 maxpacket: 16 [ 724.597579][T13047] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 724.617220][T13047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 724.632535][ T187] usb 10-1: USB disconnect, device number 80 [ 724.671804][T13047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.681633][T13047] usb 3-1: Product: syz [ 724.685997][T13047] usb 3-1: Manufacturer: syz [ 724.690700][T13047] usb 3-1: SerialNumber: syz [ 724.701297][T13047] usb 3-1: config 0 descriptor?? [ 724.719848][T13047] hub 3-1:0.0: bad descriptor, ignoring hub [ 724.782670][T13047] hub 3-1:0.0: probe with driver hub failed with error -5 [ 724.814592][T13047] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 727.461665][ T187] usb 3-1: USB disconnect, device number 37 [ 728.491846][T16344] syz.0.2630: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 728.509640][T16344] CPU: 0 UID: 0 PID: 16344 Comm: syz.0.2630 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.509670][T16344] Tainted: [L]=SOFTLOCKUP [ 728.509674][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 728.509682][T16344] Call Trace: [ 728.509687][T16344] [ 728.509692][T16344] dump_stack_lvl+0x100/0x190 [ 728.509710][T16344] warn_alloc.cold+0x94/0xa8 [ 728.509724][T16344] ? __pfx_warn_alloc+0x10/0x10 [ 728.509739][T16344] ? __schedule+0x31df/0x6740 [ 728.509760][T16344] ? __schedule+0x126e/0x6740 [ 728.509780][T16344] __vmalloc_node_range_noprof+0x136c/0x1630 [ 728.509808][T16344] ? rcu_is_watching+0x13/0xc0 [ 728.509819][T16344] ? trace_contention_end+0x126/0x160 [ 728.509837][T16344] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 728.509850][T16344] ? __mutex_lock+0x26c/0x1bc0 [ 728.509861][T16344] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 728.509875][T16344] ? irqentry_exit+0x24d/0xa10 [ 728.509885][T16344] ? lockdep_hardirqs_on+0x7d/0x110 [ 728.509905][T16344] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.509930][T16344] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 728.509943][T16344] __vmalloc_node_noprof+0xad/0xf0 [ 728.509960][T16344] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 728.509976][T16344] dvb_dvr_do_ioctl+0x15d/0x270 [ 728.509994][T16344] dvb_usercopy+0x167/0x340 [ 728.510008][T16344] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 728.510023][T16344] ? __pfx_dvb_usercopy+0x10/0x10 [ 728.510043][T16344] ? selinux_file_ioctl+0x13b/0x290 [ 728.510061][T16344] ? selinux_file_ioctl+0xb6/0x290 [ 728.510079][T16344] dvb_dvr_ioctl+0x29/0x40 [ 728.510092][T16344] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 728.510105][T16344] __x64_sys_ioctl+0x18e/0x210 [ 728.510119][T16344] do_syscall_64+0x123/0x790 [ 728.510131][T16344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.510143][T16344] RIP: 0033:0x7f1fa459e0d9 [ 728.510153][T16344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.510164][T16344] RSP: 002b:00007f1fa540a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.510175][T16344] RAX: ffffffffffffffda RBX: 00007f1fa4825fa0 RCX: 00007f1fa459e0d9 [ 728.510182][T16344] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 728.510189][T16344] RBP: 00007f1fa4635024 R08: 0000000000000000 R09: 0000000000000000 [ 728.510196][T16344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.510202][T16344] R13: 00007f1fa4826038 R14: 00007f1fa4825fa0 R15: 00007ffc0f620178 [ 728.510218][T16344] [ 728.510239][T16344] Mem-Info: [ 728.814943][T16344] active_anon:64480 inactive_anon:2806 isolated_anon:0 [ 728.814943][T16344] active_file:4312 inactive_file:58605 isolated_file:0 [ 728.814943][T16344] unevictable:3076 dirty:239 writeback:0 [ 728.814943][T16344] slab_reclaimable:8618 slab_unreclaimable:112317 [ 728.814943][T16344] mapped:36715 shmem:54118 pagetables:2007 [ 728.814943][T16344] sec_pagetables:0 bounce:0 [ 728.814943][T16344] kernel_misc_reclaimable:0 [ 728.814943][T16344] free:1190300 free_pcp:21978 free_cma:0 [ 728.860692][T16344] Node 0 active_anon:257920kB inactive_anon:11224kB active_file:17248kB inactive_file:234200kB unevictable:12296kB isolated(anon):0kB isolated(file):0kB mapped:146832kB dirty:956kB writeback:0kB shmem:216464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14556kB pagetables:7912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.947841][T16344] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.992292][T16344] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.041441][T16344] lowmem_reserve[]: 0 2472 2472 2472 2472 [ 729.047281][T16344] Node 0 DMA32 free:805056kB boost:0kB min:33996kB low:42492kB high:50988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:237120kB inactive_anon:11224kB active_file:17248kB inactive_file:234200kB unevictable:12296kB writepending:956kB zspages:820kB present:3129332kB managed:2531920kB mlocked:0kB bounce:0kB free_pcp:109476kB local_pcp:44332kB free_cma:0kB [ 729.081455][T16344] lowmem_reserve[]: 0 0 0 0 0 [ 729.086575][T16344] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.115887][T16344] lowmem_reserve[]: 0 0 0 0 0 [ 729.120949][T16344] Node 1 Normal free:3940784kB boost:0kB min:55900kB low:69872kB high:83844kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:8kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.405811][T16344] lowmem_reserve[]: 0 0 0 0 0 [ 729.410569][T16344] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 729.423265][T16344] Node 0 DMA32: 1216*4kB (UME) 1110*8kB (UE) 463*16kB (UME) 399*32kB (UE) 133*64kB (UME) 16*128kB (UME) 67*256kB (UME) 42*512kB (UE) 29*1024kB (UE) 6*2048kB (U) 166*4096kB (UM) = 805056kB [ 729.489416][T16344] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 729.548528][T16344] Node 1 Normal: 0*4kB 4*8kB (UM) 7*16kB (UM) 5*32kB (UM) 8*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (M) 3*2048kB (M) 959*4096kB (UM) = 3940784kB [ 729.564882][T16344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.609773][T16344] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 729.619096][T16344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.671427][T16344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 729.704277][T16344] 93800 total pagecache pages [ 729.708970][T16344] 4 pages in swap cache [ 729.713092][T16344] Free swap = 124660kB [ 729.717234][T16344] Total swap = 124996kB [ 729.721358][T16344] 2097051 pages RAM [ 729.725128][T16344] 0 pages HighMem/MovableOnly [ 729.729770][T16344] 432423 pages reserved [ 729.733890][T16344] 0 pages cma reserved [ 730.668108][ T10] IPVS: starting estimator thread 0... [ 731.501357][T16380] IPVS: using max 40 ests per chain, 96000 per kthread [ 732.910311][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2656'. [ 732.948262][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2656'. [ 733.015706][ T29] audit: type=1400 audit(1787162202.639:4690): avc: denied { mounton } for pid=16414 comm="syz.2.2655" path="/proc/634/task" dev="proc" ino=63171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 733.711459][ T29] audit: type=1400 audit(1787162203.339:4691): avc: denied { name_bind } for pid=16433 comm="syz.9.2660" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 735.276958][ T29] audit: type=1400 audit(1787162204.909:4692): avc: denied { write } for pid=16452 comm="syz.8.2671" name="functions" dev="configfs" ino=17325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 736.717318][T16475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.799140][T16475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.909570][T16480] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2677'. [ 736.918639][T16480] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2677'. [ 737.255076][ T29] audit: type=1400 audit(1787162206.850:4693): avc: denied { write } for pid=16485 comm="syz.8.2680" name="core" dev="configfs" ino=3594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 737.338086][ T29] audit: type=1400 audit(1787162206.960:4694): avc: denied { write } for pid=16495 comm="syz.3.2684" name="lun_0" dev="configfs" ino=34530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 737.360726][ T29] audit: type=1400 audit(1787162206.960:4695): avc: denied { write } for pid=16495 comm="syz.3.2684" name="lun_0" dev="configfs" ino=34530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 739.100481][ T29] audit: type=1400 audit(1787162208.690:4696): avc: denied { append } for pid=16511 comm="syz.0.2690" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 739.248110][T16518] netlink: 'syz.2.2691': attribute type 20 has an invalid length. [ 740.222155][ T29] audit: type=1400 audit(1787162209.850:4697): avc: denied { watch watch_reads } for pid=16534 comm="syz.0.2700" path="/" dev="ramfs" ino=63620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 741.659072][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.930284][T13002] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 742.530137][T13002] usb 3-1: Using ep0 maxpacket: 8 [ 742.548693][T13002] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 742.572925][T13002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 742.585760][T13002] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 742.599367][T13002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.611725][T13002] usb 3-1: config 0 descriptor?? [ 742.827603][T13002] usbhid 3-1:0.0: can't add hid device: -71 [ 742.835680][T13002] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 742.846439][ T29] audit: type=1400 audit(1787162212.450:4698): avc: denied { rename } for pid=16591 comm="syz.8.2722" name="file0" dev="tmpfs" ino=2532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 742.879437][T13002] usb 3-1: USB disconnect, device number 38 [ 742.939062][ T29] audit: type=1400 audit(1787162212.560:4699): avc: denied { mounton } for pid=16591 comm="syz.8.2722" path="/469/file7" dev="tmpfs" ino=2532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 742.939176][T16592] 9p: Unknown Cache mode or invalid value 777777777777777777 [ 743.674712][T16614] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 743.987648][T16612] nbd1: detected capacity change from 0 to 63 [ 745.552833][T16611] netlink: 'syz.8.2726': attribute type 11 has an invalid length. [ 745.908640][ T5602] block nbd1: Receive control failed (result -104) [ 746.108417][ T29] audit: type=1400 audit(1787162215.711:4700): avc: denied { write } for pid=16653 comm="syz.9.2737" name="functions" dev="configfs" ino=17325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 746.136444][ T29] audit: type=1800 audit(1787162215.711:4701): pid=16655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2737" name="console" dev="configfs" ino=63945 res=0 errno=0 [ 747.143766][T16657] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 749.011005][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2751'. [ 750.222317][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'. [ 750.265832][T16717] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 750.461348][ T29] audit: type=1400 audit(1787162220.081:4702): avc: denied { append } for pid=16718 comm="syz.2.2761" name="demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 750.484975][T16723] syz.2.2761: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 750.515167][ T10] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 750.526721][T16723] CPU: 1 UID: 0 PID: 16723 Comm: syz.2.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.526755][T16723] Tainted: [L]=SOFTLOCKUP [ 750.526763][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 750.526776][T16723] Call Trace: [ 750.526783][T16723] [ 750.526792][T16723] dump_stack_lvl+0x100/0x190 [ 750.526823][T16723] warn_alloc.cold+0x94/0xa8 [ 750.526845][T16723] ? __pfx_warn_alloc+0x10/0x10 [ 750.526879][T16723] ? find_held_lock+0x2b/0x80 [ 750.526902][T16723] ? avc_has_extended_perms+0x33a/0x1080 [ 750.526934][T16723] __vmalloc_node_range_noprof+0x136c/0x1630 [ 750.526975][T16723] ? rcu_is_watching+0x13/0xc0 [ 750.526995][T16723] ? trace_contention_end+0x126/0x160 [ 750.527024][T16723] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 750.527051][T16723] ? __mutex_lock+0x26c/0x1bc0 [ 750.527073][T16723] ? dvb_demux_do_ioctl+0x929/0x1200 [ 750.527114][T16723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 750.527149][T16723] ? tomoyo_init_request_info+0x101/0x370 [ 750.527179][T16723] ? tomoyo_path_number_perm+0x188/0x580 [ 750.527214][T16723] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 750.527241][T16723] __vmalloc_node_noprof+0xad/0xf0 [ 750.527274][T16723] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 750.527306][T16723] dvb_demux_do_ioctl+0x9e0/0x1200 [ 750.527337][T16723] ? do_vfs_ioctl+0x226/0x13e0 [ 750.527362][T16723] dvb_usercopy+0x167/0x340 [ 750.527385][T16723] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 750.527414][T16723] ? __pfx_dvb_usercopy+0x10/0x10 [ 750.527451][T16723] ? selinux_file_ioctl+0x13b/0x290 [ 750.527481][T16723] ? selinux_file_ioctl+0xb6/0x290 [ 750.527516][T16723] dvb_demux_ioctl+0x29/0x40 [ 750.527538][T16723] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 750.527563][T16723] __x64_sys_ioctl+0x18e/0x210 [ 750.527587][T16723] do_syscall_64+0x123/0x790 [ 750.527609][T16723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.527630][T16723] RIP: 0033:0x7f5e1cf9e0d9 [ 750.527648][T16723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.527667][T16723] RSP: 002b:00007f5e1de83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.527687][T16723] RAX: ffffffffffffffda RBX: 00007f5e1d226180 RCX: 00007f5e1cf9e0d9 [ 750.527701][T16723] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 750.527713][T16723] RBP: 00007f5e1d035024 R08: 0000000000000000 R09: 0000000000000000 [ 750.527725][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.527737][T16723] R13: 00007f5e1d226218 R14: 00007f5e1d226180 R15: 00007ffc994fd108 [ 750.527765][T16723] [ 750.527824][T16723] Mem-Info: [ 750.901835][T16723] active_anon:22549 inactive_anon:2806 isolated_anon:0 [ 750.901835][T16723] active_file:4312 inactive_file:58614 isolated_file:0 [ 750.901835][T16723] unevictable:3076 dirty:360 writeback:0 [ 750.901835][T16723] slab_reclaimable:8665 slab_unreclaimable:112178 [ 750.901835][T16723] mapped:40712 shmem:12033 pagetables:2149 [ 750.901835][T16723] sec_pagetables:0 bounce:0 [ 750.901835][T16723] kernel_misc_reclaimable:0 [ 750.901835][T16723] free:1222953 free_pcp:32121 free_cma:0 [ 750.997871][T16723] Node 0 active_anon:78596kB inactive_anon:11224kB active_file:17248kB inactive_file:234236kB unevictable:12296kB isolated(anon):0kB isolated(file):0kB mapped:151520kB dirty:1440kB writeback:0kB shmem:36824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14912kB pagetables:8480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 751.033090][T16723] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 751.076520][T16723] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.109788][T16723] lowmem_reserve[]: 0 2472 2472 2472 2472 [ 751.127491][T16723] Node 0 DMA32 free:935668kB boost:0kB min:33996kB low:42492kB high:50988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78496kB inactive_anon:11224kB active_file:17248kB inactive_file:234236kB unevictable:12296kB writepending:1440kB zspages:820kB present:3129332kB managed:2531920kB mlocked:0kB bounce:0kB free_pcp:140060kB local_pcp:30412kB free_cma:0kB [ 751.164313][T16723] lowmem_reserve[]: 0 0 0 0 0 [ 751.174204][T16723] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.207882][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 751.213151][T16723] lowmem_reserve[]: 0 0 0 0 0 [ 751.218200][T16723] Node 1 Normal free:3940784kB boost:0kB min:55900kB low:69872kB high:83844kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:8kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.249822][T16723] lowmem_reserve[]: 0 0 0 0 0 [ 751.254814][T16723] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 751.268103][T16723] Node 0 DMA32: 1*4kB (U) 480*8kB (UME) 425*16kB (UME) 309*32kB (UE) 224*64kB (UME) 197*128kB (UME) 148*256kB (UME) 94*512kB (UME) 45*1024kB (UME) 19*2048kB (UM) 172*4096kB (UM) = 935604kB [ 751.416928][T16723] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 751.449160][T16723] Node 1 Normal: [ 752.204229][T16752] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 752.263938][ T10] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 752.564374][T16723] 0*4kB 4*8kB (UM) 7*16kB (UM) 5*32kB (UM) 8*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (M) 3*2048kB (M) 959*4096kB (UM) = 3940784kB [ 752.579428][T16723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.588938][T16723] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 752.598185][T16723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.607690][T16723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.616938][T16723] 93682 total pagecache pages [ 752.621587][T16723] 4 pages in swap cache [ 752.625707][T16723] Free swap = 124660kB [ 752.629826][T16723] Total swap = 124996kB [ 752.633954][T16723] 2097051 pages RAM [ 752.637726][T16723] 0 pages HighMem/MovableOnly [ 752.642374][T16723] 432423 pages reserved [ 752.646500][T16723] 0 pages cma reserved [ 752.834433][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 752.848038][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.859632][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.925178][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 753.025448][ T5696] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 753.190967][T16759] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 753.207832][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.215039][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.255931][ T10] usb 9-1: string descriptor 0 read error: -71 [ 753.262214][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.274856][ T10] usb 9-1: config 0 descriptor?? [ 753.308939][T13002] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 753.364904][ T29] audit: type=1400 audit(1787162222.991:4703): avc: denied { bind } for pid=16760 comm="syz.8.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 753.373983][ T10] usb 9-1: can't set config #0, error -71 [ 753.400904][ T10] usb 9-1: USB disconnect, device number 70 [ 753.497567][T16765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.507270][T16765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.546786][ T29] audit: type=1400 audit(1787162223.161:4704): avc: denied { execute } for pid=16764 comm="syz.0.2771" name="cgroup" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 753.581530][T13002] usb 3-1: Using ep0 maxpacket: 16 [ 753.588349][T13002] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 753.599550][T13002] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 753.610021][T13002] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 753.621724][T13002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 753.632922][T13002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 753.678096][T13002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.686281][T13002] usb 3-1: Product: syz [ 753.691770][T13002] usb 3-1: Manufacturer: syz [ 753.696382][T13002] usb 3-1: SerialNumber: syz [ 753.708965][ T5696] usb 10-1: Using ep0 maxpacket: 16 [ 753.716157][T13002] usb 3-1: config 0 descriptor?? [ 753.936161][ T5696] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 753.948563][T13002] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 753.958240][T13002] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 753.970631][T13002] usb 3-1: USB disconnect, device number 39 [ 754.148383][ T10] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 754.375302][ T5696] usb 10-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 754.385610][ T5696] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 754.397164][ T5696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 754.408191][ T5696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 755.386868][ T5696] usb 10-1: string descriptor 0 read error: -71 [ 755.393739][ T5696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.435903][ T5696] usb 10-1: config 0 descriptor?? [ 755.544690][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.564914][ T5696] usb 10-1: can't set config #0, error -71 [ 755.593487][ T5696] usb 10-1: USB disconnect, device number 81 [ 755.625416][T16791] gadgetfs: bound to dummy_udc driver [ 755.887735][ T29] audit: type=1400 audit(1787162225.472:4705): avc: denied { setopt } for pid=16796 comm="syz.0.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 755.953823][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.964711][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.974425][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 755.987267][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.071062][ T10] usb 9-1: config 0 descriptor?? [ 756.960481][T16811] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 757.472909][ T10] usb 9-1: can't set config #0, error -71 [ 757.485561][ T10] usb 9-1: USB disconnect, device number 71 [ 762.216336][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2796'. [ 762.557168][T16859] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 762.578639][ T29] audit: type=1400 audit(1787162232.162:4706): avc: denied { write } for pid=16861 comm="syz.2.2801" name="functions" dev="configfs" ino=17325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 762.724403][T16870] jffs2: notice: (16870) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 762.856907][ T29] audit: type=1400 audit(1787162232.452:4707): avc: denied { write } for pid=16869 comm="syz.2.2805" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 763.593918][T16885] random: crng reseeded on system resumption [ 763.808614][T16889] netlink: 'syz.2.2810': attribute type 2 has an invalid length. [ 763.837572][T13002] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 764.462302][T13002] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 764.669338][T13002] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 764.685570][T13002] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.697889][T13002] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 764.705969][T13002] usb 9-1: Manufacturer: syz [ 764.728657][T13002] usb 9-1: config 0 descriptor?? [ 764.743579][T13002] igorplugusb 9-1:0.0: incorrect number of endpoints [ 764.968020][ T29] audit: type=1400 audit(1787162234.563:4708): avc: denied { mounton } for pid=16878 comm="syz.8.2799" path="/483/file0" dev="tmpfs" ino=2608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 765.006087][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 765.014949][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 765.029117][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 765.037975][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 765.038347][ T1013] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.055622][ T1013] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.087458][ T1013] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.149381][ T1013] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.167572][T13022] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 765.175229][T13002] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 765.186614][T16922] lo speed is unknown, defaulting to 1000 [ 765.188803][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2827'. [ 765.437587][T13002] usb 3-1: Using ep0 maxpacket: 8 [ 765.448022][T13022] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 765.466688][T13002] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 765.479146][T13022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.487224][T13002] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 765.499746][T13002] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 765.499798][T13022] usb 4-1: config 0 descriptor?? [ 765.515878][T13002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 765.532180][T13002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 765.542374][T13002] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 765.556019][T13002] usb 3-1: config 168 interface 0 has no altsetting 0 [ 765.564160][T13022] cp210x 4-1:0.0: cp210x converter detected [ 765.590824][T13002] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 765.604905][T13002] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 765.645055][T13002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 765.656370][T13002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 765.674955][T13002] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 765.695774][T13002] usb 3-1: config 168 interface 0 has no altsetting 0 [ 765.703980][T13002] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 765.714385][T13002] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 765.725576][T13002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 765.736715][T13002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 765.758087][T13002] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 765.771424][T13002] usb 3-1: config 168 interface 0 has no altsetting 0 [ 765.780073][T13002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.788360][T13002] usb 3-1: Product: syz [ 765.792540][T13002] usb 3-1: Manufacturer: syz [ 765.800913][T13002] usb 3-1: SerialNumber: syz [ 765.810288][T13022] usb 4-1: cp210x converter now attached to ttyUSB0 [ 766.017019][T13002] adutux 3-1:168.0: interrupt endpoints not found [ 766.035603][ T10] usb 4-1: USB disconnect, device number 40 [ 766.058417][T13002] usb 3-1: USB disconnect, device number 40 [ 766.060443][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 766.079979][ T10] cp210x 4-1:0.0: device disconnected [ 766.237772][ T29] audit: type=1800 audit(1787162235.863:4709): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2831" name="dbroot" dev="configfs" ino=65430 res=0 errno=0 [ 766.506737][ T10] usb 9-1: USB disconnect, device number 72 [ 766.634250][ T29] audit: type=1800 audit(1787162236.263:4710): pid=16945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2836" name="console" dev="configfs" ino=65452 res=0 errno=0 [ 766.746311][T16949] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 767.181577][T13022] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 767.447216][T13022] usb 3-1: Using ep0 maxpacket: 32 [ 767.457830][T13022] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 767.487850][T13022] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 767.495951][T13022] usb 3-1: config 0 has no interface number 0 [ 767.502958][T13022] usb 3-1: config 0 interface 12 has no altsetting 0 [ 767.519014][T13022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.537102][T13022] usb 3-1: Product: syz [ 767.541260][T13022] usb 3-1: Manufacturer: syz [ 767.545821][T13022] usb 3-1: SerialNumber: syz [ 767.553317][T13022] usb 3-1: config 0 descriptor?? [ 767.950624][ T29] audit: type=1800 audit(1787162237.553:4711): pid=16972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2848" name="console" dev="configfs" ino=65528 res=0 errno=0 [ 768.213889][T16968] nbd2: detected capacity change from 0 to 63 [ 768.360423][ T5602] block nbd2: Receive control failed (result -104) [ 769.330314][T16991] cgroup: Unknown subsys name 'rlimit' [ 769.967479][T13022] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 770.033424][T13022] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 770.101071][T13022] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 770.186612][T13022] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 770.265651][T13022] usb 3-1: USB disconnect, device number 41 [ 771.801759][ T29] audit: type=1800 audit(1787162241.383:4712): pid=17010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2860" name="console" dev="configfs" ino=66650 res=0 errno=0 [ 771.868730][T17007] nbd3: detected capacity change from 0 to 63 [ 772.470126][ T5602] block nbd3: Receive control failed (result -104) [ 774.603149][T13088] block nbd1: Possible stuck request ffff888027ff7000: control (read@0,1024B). Runtime 30 seconds [ 774.724365][T13088] block nbd1: Possible stuck request ffff888027ff71c0: control (read@1024,3072B). Runtime 30 seconds [ 774.938214][T17043] se_dev->se_dev_ptr already set for storage object [ 776.151487][T17054] bond0: invalid ARP target specified [ 776.635339][ T29] audit: type=1800 audit(1787162246.264:4713): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2875" name="console" dev="configfs" ino=66006 res=0 errno=0 [ 776.712743][T17063] nbd4: detected capacity change from 0 to 63 [ 777.198860][T17064] syz.8.2868: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 777.213749][T17064] CPU: 1 UID: 0 PID: 17064 Comm: syz.8.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.213771][T17064] Tainted: [L]=SOFTLOCKUP [ 777.213775][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 777.213782][T17064] Call Trace: [ 777.213787][T17064] [ 777.213792][T17064] dump_stack_lvl+0x100/0x190 [ 777.213810][T17064] warn_alloc.cold+0x94/0xa8 [ 777.213822][T17064] ? __pfx_warn_alloc+0x10/0x10 [ 777.213841][T17064] ? avc_has_extended_perms+0x33a/0x1080 [ 777.213860][T17064] __vmalloc_node_range_noprof+0x136c/0x1630 [ 777.213881][T17064] ? rcu_is_watching+0x13/0xc0 [ 777.213892][T17064] ? trace_contention_end+0x126/0x160 [ 777.213910][T17064] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 777.213923][T17064] ? __mutex_lock+0x26c/0x1bc0 [ 777.213933][T17064] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 777.213950][T17064] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 777.213969][T17064] ? tomoyo_path_number_perm+0x188/0x580 [ 777.213990][T17064] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 777.214003][T17064] __vmalloc_node_noprof+0xad/0xf0 [ 777.214021][T17064] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 777.214036][T17064] dvb_dvr_do_ioctl+0x15d/0x270 [ 777.214052][T17064] dvb_usercopy+0x167/0x340 [ 777.214065][T17064] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 777.214081][T17064] ? __pfx_dvb_usercopy+0x10/0x10 [ 777.214102][T17064] ? selinux_file_ioctl+0x13b/0x290 [ 777.214119][T17064] ? selinux_file_ioctl+0xb6/0x290 [ 777.214138][T17064] dvb_dvr_ioctl+0x29/0x40 [ 777.214151][T17064] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 777.214164][T17064] __x64_sys_ioctl+0x18e/0x210 [ 777.214185][T17064] do_syscall_64+0x123/0x790 [ 777.214197][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.214209][T17064] RIP: 0033:0x7ff37639e0d9 [ 777.214220][T17064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.214233][T17064] RSP: 002b:00007ff377217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.214245][T17064] RAX: ffffffffffffffda RBX: 00007ff376626090 RCX: 00007ff37639e0d9 [ 777.214254][T17064] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 777.214262][T17064] RBP: 00007ff376435024 R08: 0000000000000000 R09: 0000000000000000 [ 777.214269][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.214276][T17064] R13: 00007ff376626128 R14: 00007ff376626090 R15: 00007fff3c1d1788 [ 777.214292][T17064] [ 777.214297][T17064] Mem-Info: [ 777.458157][T17064] active_anon:21281 inactive_anon:2804 isolated_anon:0 [ 777.458157][T17064] active_file:4312 inactive_file:58626 isolated_file:0 [ 777.458157][T17064] unevictable:3078 dirty:441 writeback:0 [ 777.458157][T17064] slab_reclaimable:8493 slab_unreclaimable:114215 [ 777.458157][T17064] mapped:36789 shmem:10205 pagetables:2092 [ 777.458157][T17064] sec_pagetables:0 bounce:0 [ 777.458157][T17064] kernel_misc_reclaimable:0 [ 777.458157][T17064] free:1227306 free_pcp:24231 free_cma:0 [ 777.503830][T17064] Node 0 active_anon:85124kB inactive_anon:11216kB active_file:17248kB inactive_file:234284kB unevictable:12304kB isolated(anon):0kB isolated(file):0kB mapped:147128kB dirty:1764kB writeback:0kB shmem:40812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14928kB pagetables:8252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 777.538877][T17064] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 777.570987][T17064] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 777.600775][T17064] lowmem_reserve[]: 0 2472 2472 2472 2472 [ 777.606539][T17064] Node 0 DMA32 free:954712kB boost:0kB min:33996kB low:42492kB high:50988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85124kB inactive_anon:11216kB active_file:17248kB inactive_file:234284kB unevictable:12304kB writepending:1764kB zspages:820kB present:3129332kB managed:2531920kB mlocked:8kB bounce:0kB free_pcp:95368kB local_pcp:19212kB free_cma:0kB [ 777.640450][T17064] lowmem_reserve[]: 0 0 0 0 0 [ 777.645135][T17064] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 777.675277][T17064] lowmem_reserve[]: 0 0 0 0 0 [ 777.680019][T17064] Node 1 Normal free:3939152kB boost:0kB min:55900kB low:69872kB high:83844kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:8kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1548kB local_pcp:1548kB free_cma:0kB [ 777.711863][T17064] lowmem_reserve[]: 0 0 0 0 0 [ 777.716586][T17064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 777.729176][T17064] Node 0 DMA32: 3102*4kB (UM) 824*8kB (UME) 368*16kB (UME) 305*32kB (UME) 149*64kB (UME) 182*128kB (UME) 178*256kB (UME) 108*512kB (UME) 44*1024kB (UME) 14*2048kB (UM) 174*4096kB (UM) = 954776kB [ 777.748528][T17064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 777.759993][T17064] Node 1 Normal: 2*4kB (U) 5*8kB (UM) 9*16kB (UM) 9*32kB (UM) 9*64kB (UM) 5*128kB (UM) 3*256kB (M) 3*512kB (M) 3*1024kB (UM) 4*2048kB (UM) 958*4096kB (M) = 3939232kB [ 777.776692][T17064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 777.786214][T17064] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 777.795460][T17064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 777.804977][T17064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 777.814232][T17064] 73143 total pagecache pages [ 777.818885][T17064] 4 pages in swap cache [ 777.823004][T17064] Free swap = 124660kB [ 777.827326][T17064] Total swap = 124996kB [ 777.831451][T17064] 2097051 pages RAM [ 777.835223][T17064] 0 pages HighMem/MovableOnly [ 777.839886][T17064] 432423 pages reserved [ 777.844006][T17064] 0 pages cma reserved [ 779.042847][ T5602] block nbd4: Receive control failed (result -104) [ 780.183859][T17084] se_dev->se_dev_ptr already set for storage object [ 780.353834][ T29] audit: type=1804 audit(1787162249.974:4714): pid=17098 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2891" name="/newroot/150/file0" dev="tmpfs" ino=809 res=1 errno=0 [ 780.975433][ T29] audit: type=1400 audit(1787162250.584:4715): avc: denied { write } for pid=17110 comm="syz.9.2896" name="usb_gadget" dev="configfs" ino=3664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 781.055788][ T29] audit: type=1400 audit(1787162250.644:4716): avc: denied { write } for pid=17110 comm="syz.9.2896" name="functions" dev="configfs" ino=66193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 781.089069][ T29] audit: type=1400 audit(1787162250.714:4717): avc: denied { write } for pid=17110 comm="syz.9.2896" name="configs" dev="configfs" ino=66194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 781.671047][T17123] netlink: 'syz.2.2901': attribute type 1 has an invalid length. [ 781.887436][T17123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 781.899055][T17133] macvlan2: entered promiscuous mode [ 781.904408][T17133] macvlan2: entered allmulticast mode [ 781.993766][T17137] bond2: (slave ip6gretap1): making interface the new active one [ 782.002524][T17137] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 782.122443][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2908'. [ 782.674351][ T29] audit: type=1400 audit(1787162252.265:4718): avc: denied { watch_sb } for pid=17150 comm="syz.8.2910" path="/501" dev="tmpfs" ino=2697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 784.706994][T17014] Bluetooth: hci2: command 0x0406 tx timeout [ 785.604545][T17180] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 786.991642][ T29] audit: type=1400 audit(1787162256.605:4719): avc: denied { create } for pid=17191 comm="syz.3.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 787.026710][ T29] audit: type=1400 audit(1787162256.645:4720): avc: denied { sys_admin } for pid=17191 comm="syz.3.2928" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 787.088489][T17197] lo speed is unknown, defaulting to 1000 [ 787.774333][T17196] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 789.269281][T17213] syzkaller0: entered promiscuous mode [ 789.338864][T17213] syzkaller0: entered allmulticast mode [ 793.223878][T17255] futex_wake_op: syz.8.2945 tries to shift op by 144; fix this program [ 796.366911][T17294] binder: 17286:17294 ioctl 40046205 0 returned -22 [ 796.378750][T17294] binder: 17286:17294 ioctl c0306201 0 returned -14 [ 797.063907][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2959'. [ 797.279733][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2962'. [ 797.307624][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2962'. [ 797.502647][T17310] syzkaller0: entered promiscuous mode [ 797.518331][T17310] syzkaller0: entered allmulticast mode [ 798.734121][T17318] usb usb7: usbfs: process 17318 (syz.9.2963) did not claim interface 0 before use [ 798.775113][T13088] block nbd2: Possible stuck request ffff888028067000: control (read@0,1024B). Runtime 30 seconds [ 798.793478][T13088] block nbd2: Possible stuck request ffff8880280671c0: control (read@1024,1024B). Runtime 30 seconds [ 798.813851][T13088] block nbd2: Possible stuck request ffff888028067380: control (read@2048,1024B). Runtime 30 seconds [ 798.825112][T13088] block nbd2: Possible stuck request ffff888028067540: control (read@3072,1024B). Runtime 30 seconds [ 799.286385][T17333] netlink: 'syz.2.2972': attribute type 13 has an invalid length. [ 799.330187][T17333] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2972'. [ 799.371507][T17333] erspan0: refused to change device tx_queue_len [ 799.717157][T13046] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 800.772950][T13046] usb 10-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 800.826535][T13046] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 800.950662][T13046] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 800.967482][T13046] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.987215][T13046] dln2 10-1:1.0: USB write failed: -90 [ 801.022367][T13046] dln2 10-1:1.0: failed to initialize hardware [ 801.046000][T13046] dln2 10-1:1.0: probe with driver dln2 failed with error -90 [ 801.215462][T13046] usb 10-1: USB disconnect, device number 82 [ 801.358918][ T29] audit: type=1326 audit(1787162270.987:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17367 comm="syz.2.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e1cf9e0d9 code=0x0 [ 801.865888][T17395] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2986'. [ 802.179729][T17399] se_dev->se_dev_ptr already set for storage object [ 802.949494][T15766] block nbd3: Possible stuck request ffff8880280de000: control (read@0,4096B). Runtime 30 seconds [ 803.011825][T17410] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 803.118735][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.662935][T17423] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3001'. [ 804.962756][T13088] block nbd1: Possible stuck request ffff888027ff7000: control (read@0,1024B). Runtime 60 seconds [ 804.978047][T13088] block nbd1: Possible stuck request ffff888027ff71c0: control (read@1024,3072B). Runtime 60 seconds [ 805.512288][T17453] syzkaller1: entered promiscuous mode [ 805.517817][T17453] syzkaller1: entered allmulticast mode [ 805.711380][T17465] overlayfs: missing 'lowerdir' [ 805.778334][T17466] netlink: 'syz.2.3016': attribute type 11 has an invalid length. [ 805.788295][T17466] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3016'. [ 806.571591][T17468] lo speed is unknown, defaulting to 1000 [ 807.493146][T13088] block nbd4: Possible stuck request ffff88802810e000: control (read@0,4096B). Runtime 30 seconds [ 809.961291][T17505] can0: slcan on ptm0. [ 810.393990][T17507] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 810.405492][T17507] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 810.413982][T17507] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 811.104120][T17504] can0 (unregistered): slcan off ptm0. [ 811.276040][T17518] syzkaller0: entered promiscuous mode [ 811.282081][T17520] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3028'. [ 811.302199][T17518] syzkaller0: entered allmulticast mode [ 811.643491][T17525] lo speed is unknown, defaulting to 1000 [ 811.841534][ T29] audit: type=1400 audit(1787162281.318:4722): avc: denied { write } for pid=17526 comm="syz.9.3036" name="subsystems" dev="configfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 812.901006][ T29] audit: type=1400 audit(1787162282.488:4723): avc: denied { shutdown } for pid=17532 comm="syz.0.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 813.870430][T17545] Line length is too long: Should be less than 4094 [ 814.355899][T17559] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 814.842100][ T29] audit: type=1326 audit(1787162284.448:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.8.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 814.868814][ T29] audit: type=1326 audit(1787162284.448:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.8.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 814.895463][ T29] audit: type=1326 audit(1787162284.448:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.8.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 815.095117][ T29] audit: type=1326 audit(1787162284.448:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.8.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 815.121785][ T29] audit: type=1326 audit(1787162284.448:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.8.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 815.148681][ T29] audit: type=1326 audit(1787162284.448:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.8.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 815.194336][ T29] audit: type=1326 audit(1787162284.448:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.8.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 815.221137][ T29] audit: type=1326 audit(1787162284.448:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.8.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37639e0d9 code=0x7ffc0000 [ 816.551228][ T5696] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 816.677255][T17014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 816.697539][T17014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 816.709892][T17014] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 816.718565][T17014] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 816.727120][T17014] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 817.241924][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 817.466524][ T5696] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice= 0.03 [ 817.915263][ T5696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.995569][T17626] lo speed is unknown, defaulting to 1000 [ 818.342847][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.349986][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.357181][T17626] bridge_slave_0: entered allmulticast mode [ 818.365842][T17626] bridge_slave_0: entered promiscuous mode [ 818.377250][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.386032][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 818.390150][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.394022][ T5696] usb 3-1: SerialNumber: syz [ 818.406835][ T5696] usb 3-1: config 0 descriptor?? [ 818.409805][T17626] bridge_slave_1: entered allmulticast mode [ 818.418933][T17626] bridge_slave_1: entered promiscuous mode [ 818.442900][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.453801][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.475359][T17626] team0: Port device team_slave_0 added [ 818.483142][T17626] team0: Port device team_slave_1 added [ 818.504046][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.510993][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.536880][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.548283][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.555233][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.581581][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.631788][T17626] hsr_slave_0: entered promiscuous mode [ 818.637875][T17626] hsr_slave_1: entered promiscuous mode [ 818.643891][T17626] debugfs: 'hsr0' already exists in 'hsr' [ 818.649601][T17626] Cannot create hsr debugfs directory [ 818.858766][T17014] Bluetooth: hci6: command tx timeout [ 818.942187][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3080'. [ 819.250318][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 819.250337][ T29] audit: type=1400 audit(1787162288.879:4741): avc: denied { write } for pid=17666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.390832][ T29] audit: type=1400 audit(1787162288.999:4742): avc: denied { write } for pid=17681 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.483200][ T29] audit: type=1400 audit(1787162289.129:4743): avc: denied { write } for pid=17687 comm="syz.0.3084" name="functions" dev="configfs" ino=17325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 819.512134][ T29] audit: type=1400 audit(1787162289.129:4744): avc: denied { write } for pid=17687 comm="syz.0.3084" name="c.1" dev="configfs" ino=20570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 819.555177][ T29] audit: type=1400 audit(1787162289.129:4745): avc: denied { write } for pid=17687 comm="syz.0.3084" name="c.1" dev="configfs" ino=20570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 819.579166][ T29] audit: type=1400 audit(1787162289.189:4746): avc: denied { write } for pid=17687 comm="syz.0.3084" name="os_desc" dev="configfs" ino=17328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 819.614387][ T29] audit: type=1400 audit(1787162289.189:4747): avc: denied { write } for pid=17687 comm="syz.0.3084" name="os_desc" dev="configfs" ino=17328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 820.754657][ T5696] usb 3-1: USB disconnect, device number 42 [ 820.878750][ T29] audit: type=1400 audit(1787162290.479:4748): avc: denied { write } for pid=17689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.924145][T17014] Bluetooth: hci6: command tx timeout [ 821.068913][ T29] audit: type=1400 audit(1787162290.679:4749): avc: denied { write } for pid=17711 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.547319][ T29] audit: type=1400 audit(1787162291.149:4750): avc: denied { write } for pid=17718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.389327][T17739] ip6gretap0: entered promiscuous mode [ 822.394830][T17739] ip6gretap0: entered allmulticast mode [ 822.441114][T17748] syzkaller0: entered promiscuous mode [ 822.476799][T17748] syzkaller0: entered allmulticast mode [ 823.001079][T17014] Bluetooth: hci6: command tx timeout [ 823.182912][T13002] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 823.229350][T17626] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 823.249660][T17626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.263667][T17626] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 823.286635][T17626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.312114][T17626] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 823.397144][T17626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.433899][T17626] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 823.567031][T13002] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 823.589109][T13002] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.722630][T13002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.772070][T13002] usb 3-1: config 0 descriptor?? [ 823.793810][T13002] pwc: Askey VC010 type 2 USB webcam detected. [ 823.847986][T17626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.872135][T17777] comedi comedi1: Minor 4 specified more than once! [ 824.039397][T17626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.113859][T17626] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.126363][T16631] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.133528][T16631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.192146][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.199332][T16631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.224832][T13002] pwc: recv_control_msg error -32 req 02 val 2b00 [ 824.235190][T13002] pwc: recv_control_msg error -32 req 02 val 2700 [ 824.258697][T13002] pwc: recv_control_msg error -32 req 02 val 2c00 [ 824.287435][T13002] pwc: recv_control_msg error -32 req 04 val 1000 [ 824.307657][T13002] pwc: recv_control_msg error -32 req 04 val 1300 [ 824.338663][T13002] pwc: recv_control_msg error -32 req 04 val 1400 [ 824.552688][T13002] pwc: recv_control_msg error -32 req 02 val 2100 [ 824.579725][T13002] pwc: recv_control_msg error -32 req 04 val 1500 [ 824.596957][T13002] pwc: recv_control_msg error -32 req 02 val 2500 [ 824.605691][T13002] pwc: recv_control_msg error -32 req 02 val 2400 [ 824.621264][T13002] pwc: recv_control_msg error -32 req 02 val 2600 [ 824.661444][T13002] pwc: recv_control_msg error -32 req 02 val 2900 [ 824.679357][T13002] pwc: recv_control_msg error -32 req 02 val 2800 [ 824.698005][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 824.698019][ T29] audit: type=1400 audit(1787162294.329:4756): avc: denied { write } for pid=17802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.897083][T13002] pwc: recv_control_msg error -71 req 04 val 1200 [ 824.913115][ T29] audit: type=1400 audit(1787162294.559:4757): avc: denied { write } for pid=17825 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.946931][T13002] pwc: Registered as video103. [ 824.956361][T17626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.979968][T13002] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48 [ 825.044492][T13002] usb 3-1: USB disconnect, device number 43 [ 825.093118][T17014] Bluetooth: hci6: command tx timeout [ 825.416150][T17626] veth0_vlan: entered promiscuous mode [ 825.454760][T17626] veth1_vlan: entered promiscuous mode [ 825.484972][T17814] ================================================================== [ 825.493069][T17814] BUG: KASAN: slab-out-of-bounds in release_card_device+0x17d/0x1a0 [ 825.501060][T17814] Read of size 1 at addr ffff8880334a0909 by task syz.8.3103/17814 [ 825.508943][T17814] [ 825.511267][T17814] CPU: 0 UID: 0 PID: 17814 Comm: syz.8.3103 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.511293][T17814] Tainted: [L]=SOFTLOCKUP [ 825.511300][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 825.511310][T17814] Call Trace: [ 825.511316][T17814] [ 825.511322][T17814] dump_stack_lvl+0x100/0x190 [ 825.511347][T17814] print_report+0x13d/0x4b0 [ 825.511372][T17814] ? __virt_addr_valid+0x239/0x430 [ 825.511396][T17814] ? release_card_device+0x17d/0x1a0 [ 825.511420][T17814] kasan_report+0xdf/0x1c0 [ 825.511446][T17814] ? release_card_device+0x17d/0x1a0 [ 825.511474][T17814] release_card_device+0x17d/0x1a0 [ 825.511497][T17814] ? __pfx_release_card_device+0x10/0x10 [ 825.511520][T17814] device_release+0xd2/0x270 [ 825.511544][T17814] kobject_put+0x1f7/0x640 [ 825.511566][T17814] put_device+0x1f/0x30 [ 825.511589][T17814] snd_card_file_remove+0x38f/0x560 [ 825.511615][T17814] snd_pcm_release+0x1ac/0x230 [ 825.511642][T17814] ? __pfx_snd_disconnect_release+0x10/0x10 [ 825.511667][T17814] __fput+0x3ff/0xb50 [ 825.511693][T17814] task_work_run+0x150/0x240 [ 825.511714][T17814] ? __pfx_task_work_run+0x10/0x10 [ 825.511737][T17814] exit_to_user_mode_loop+0x1d8/0x700 [ 825.511761][T17814] ? rcu_is_watching+0x13/0xc0 [ 825.511778][T17814] do_syscall_64+0x661/0x790 [ 825.511795][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.511814][T17814] RIP: 0033:0x7ff37639e0d9 [ 825.511829][T17814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.511846][T17814] RSP: 002b:00007fff3c1d18e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 825.511864][T17814] RAX: 0000000000000000 RBX: 00007ff376627da0 RCX: 00007ff37639e0d9 [ 825.511876][T17814] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 825.511886][T17814] RBP: 00007ff376627da0 R08: 0000000000000006 R09: 0000000000000000 [ 825.511897][T17814] R10: 00007ff376627cb0 R11: 0000000000000246 R12: 00000000000c984a [ 825.511909][T17814] R13: 00007ff376625fac R14: 00000000000c95ca R15: 00007fff3c1d19f0 [ 825.511926][T17814] [ 825.511933][T17814] [ 825.526908][T17626] veth0_macvtap: entered promiscuous mode [ 825.527142][T17814] The buggy address belongs to the object at ffff8880334a0680 [ 825.527142][T17814] which belongs to the cache skbuff_small_head of size 704 [ 825.563334][T17626] veth1_macvtap: entered promiscuous mode [ 825.567162][T17814] The buggy address is located 649 bytes inside of [ 825.567162][T17814] allocated 704-byte region [ffff8880334a0680, ffff8880334a0940) [ 825.567181][T17814] [ 825.567186][T17814] The buggy address belongs to the physical page: [ 825.567195][T17814] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x334a0 [ 825.606460][T17626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.611943][T17814] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 825.611959][T17814] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 825.633440][T17626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.635615][T17814] page_type: f5(slab) [ 825.635632][T17814] raw: 00fff00000000040 ffff8881404fb780 dead000000000122 0000000000000000 [ 825.823559][T17814] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 825.832122][T17814] head: 00fff00000000040 ffff8881404fb780 dead000000000122 0000000000000000 [ 825.840788][T17814] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 825.849441][T17814] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 825.858091][T17814] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 825.866751][T17814] page dumped because: kasan: bad access detected [ 825.873136][T17814] page_owner tracks the page as allocated [ 825.878826][T17814] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1f2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_MEMALLOC|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11520, tgid 11520 (syz-executor), ts 825480476821, free_ts 825456209835 [ 825.902594][T17814] post_alloc_hook+0xfd/0x120 [ 825.907256][T17814] get_page_from_freelist+0xf46/0x3500 [ 825.912697][T17814] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 825.918571][T17814] new_slab+0xa2/0x660 [ 825.922615][T17814] refill_objects+0xe3/0x410 [ 825.927182][T17814] __pcs_replace_empty_main+0x372/0x680 [ 825.932704][T17814] kmem_cache_alloc_node_noprof+0x52a/0x6b0 [ 825.938578][T17814] kmalloc_reserve+0x148/0x350 [ 825.943322][T17814] __alloc_skb+0x185/0x710 [ 825.947715][T17814] napi_alloc_skb+0x466/0x840 [ 825.952367][T17814] page_to_skb+0x187/0x1390 [ 825.956847][T17814] receive_buf+0x917/0x47b0 [ 825.961324][T17814] virtnet_poll+0x1788/0x3a90 [ 825.965976][T17814] __napi_poll.constprop.0+0xaf/0x450 [ 825.971335][T17814] net_rx_action+0xa40/0xf20 [ 825.975909][T17814] handle_softirqs+0x1e6/0x9d0 [ 825.980653][T17814] page last free pid 17815 tgid 17814 stack trace: [ 825.987127][T17814] __free_frozen_pages+0x79f/0x1090 [ 825.992300][T17814] release_nodes+0xc3/0x120 [ 825.996782][T17814] devres_release_all+0x112/0x180 [ 826.001786][T17814] device_unbind_cleanup+0x81/0x270 [ 826.006958][T17814] device_release_driver_internal+0x4c4/0x620 [ 826.013003][T17814] unbind_store+0xf8/0x110 [ 826.017405][T17814] drv_attr_store+0x74/0xb0 [ 826.021886][T17814] sysfs_kf_write+0xf2/0x150 [ 826.026457][T17814] kernfs_fop_write_iter+0x3e0/0x5f0 [ 826.031720][T17814] vfs_write+0x6af/0x1050 [ 826.036028][T17814] ksys_write+0x12a/0x250 [ 826.040331][T17814] do_syscall_64+0x123/0x790 [ 826.044898][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.050770][T17814] [ 826.053074][T17814] Memory state around the buggy address: [ 826.058675][T17814] ffff8880334a0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 826.066710][T17814] ffff8880334a0880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 826.074747][T17814] >ffff8880334a0900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 826.082781][T17814] ^ [ 826.087079][T17814] ffff8880334a0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 826.095114][T17814] ffff8880334a0a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 826.103149][T17814] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 826.233316][ T29] audit: type=1400 audit(1787162295.809:4758): avc: denied { write } for pid=5583 comm="syz-executor" path="pipe:[5136]" dev="pipefs" ino=5136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 826.328060][T17814] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 826.335283][T17814] CPU: 0 UID: 0 PID: 17814 Comm: syz.8.3103 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.346198][T17814] Tainted: [L]=SOFTLOCKUP [ 826.350496][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 826.360531][T17814] Call Trace: [ 826.363790][T17814] [ 826.366699][T17814] dump_stack_lvl+0x100/0x190 [ 826.371360][T17814] vpanic+0x553/0x970 [ 826.375319][T17814] ? __pfx_vpanic+0x10/0x10 [ 826.379806][T17814] ? release_card_device+0x17d/0x1a0 [ 826.385075][T17814] panic+0xd1/0xe0 [ 826.388773][T17814] ? __pfx_panic+0x10/0x10 [ 826.393166][T17814] ? release_card_device+0x17d/0x1a0 [ 826.398434][T17814] ? preempt_schedule_common+0x3c/0xb0 [ 826.403880][T17814] check_panic_on_warn.cold+0x19/0x34 [ 826.409229][T17814] end_report.part.0+0x3a/0x90 [ 826.413980][T17814] kasan_report.cold+0xe/0x18 [ 826.418640][T17814] ? release_card_device+0x17d/0x1a0 [ 826.423909][T17814] release_card_device+0x17d/0x1a0 [ 826.429002][T17814] ? __pfx_release_card_device+0x10/0x10 [ 826.434617][T17814] device_release+0xd2/0x270 [ 826.439192][T17814] kobject_put+0x1f7/0x640 [ 826.443601][T17814] put_device+0x1f/0x30 [ 826.447740][T17814] snd_card_file_remove+0x38f/0x560 [ 826.452923][T17814] snd_pcm_release+0x1ac/0x230 [ 826.457673][T17814] ? __pfx_snd_disconnect_release+0x10/0x10 [ 826.463550][T17814] __fput+0x3ff/0xb50 [ 826.467517][T17814] task_work_run+0x150/0x240 [ 826.472100][T17814] ? __pfx_task_work_run+0x10/0x10 [ 826.477193][T17814] exit_to_user_mode_loop+0x1d8/0x700 [ 826.482547][T17814] ? rcu_is_watching+0x13/0xc0 [ 826.487292][T17814] do_syscall_64+0x661/0x790 [ 826.491860][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.497743][T17814] RIP: 0033:0x7ff37639e0d9 [ 826.502134][T17814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.521722][T17814] RSP: 002b:00007fff3c1d18e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 826.530116][T17814] RAX: 0000000000000000 RBX: 00007ff376627da0 RCX: 00007ff37639e0d9 [ 826.538066][T17814] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 826.546013][T17814] RBP: 00007ff376627da0 R08: 0000000000000006 R09: 0000000000000000 [ 826.553960][T17814] R10: 00007ff376627cb0 R11: 0000000000000246 R12: 00000000000c984a [ 826.561919][T17814] R13: 00007ff376625fac R14: 00000000000c95ca R15: 00007fff3c1d19f0 [ 826.569872][T17814] [ 826.573062][T17814] Kernel Offset: disabled [ 826.577361][T17814] Rebooting in 86400 seconds..