last executing test programs: 4m11.378272115s ago: executing program 4 (id=4975): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xd, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x2, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x3, 0x9, 0x3}, {0x1, 0x4, 0xc, 0x9}, {0x0, 0x5, 0x2}, {0x1, 0x1, 0x6, 0x9}, {0x1, 0x1, 0x5, 0x6}, {0x4, 0x4, 0xf, 0xb}, {0x2, 0x1, 0x9}, {0x0, 0x5, 0x0, 0x5}, {0x1, 0x3, 0x7, 0x3}], 0x10, 0x2}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffffff, 0xffffff00, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r8, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) close(0xffffffffffffffff) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, r1, 0x0, 0x0, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 4m10.201459293s ago: executing program 4 (id=4980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000008002000050000007f00000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/167, &(0x7f0000000040), &(0x7f0000000280), 0x1, r0}, 0x38) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = memfd_secret(0x80000) sendmsg$kcm(r2, &(0x7f0000000680)={&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @private0, 0x7e}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="0398332ab001442595943e81423c1274530de5d814ec6453475310540d1f830cd7e6abe8d474d18a6a8ecec758a1741a39cbc5302cb52058ddbbea62720e802c53cbc18f0b96e0f067939c07dbf6b2bb32f80d92e882b90c6ea47d6cbe1a593a3ca0d1a7a72f19624476d108a1efb5b62dd7ccbae772a2acbf690b9f7ff52a766dd0978b3de246c5568fe751c9c4a3c8773aa9e61cbec44645eaba092b1c72e03d3425c333cd09b9152d25ef", 0xac}, {&(0x7f0000000380)="27ee5fb75ca4d300931a3d2f1bf4e72c7f4025549f5333d83448295ae82e17f6fa3b0d218a935cb2dcbb574c9a6a1c8bbb9ed7347d15d743144b3b2540b4cd3f4bbca0c9fdf3867d9828acd3c5e1829c9257840adbd247081549c6d6b584bdf01eb8cfc2f7cec142ea75f4cb6420823ce466f3fd69913e4eafe72961eb351c8b88565e888e9a3e8778a395bac5b850e0680a043bec9e716d0a3ef0d0a2604efaa764c8f90817b0bad574a4cb", 0xac}, {&(0x7f0000000440)}], 0x3, &(0x7f0000000580)}, 0x24000840) readahead(r2, 0x7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_vhci(0x0, 0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)=',P,..\x00', 0x404081, &(0x7f0000000040)={@_ha_fsid={[0xffff7fff, 0x1]}, {0x1ff, 0x5, 0xe, 0x6}}, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x49f0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0xfc, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0xc8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xb8, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}, @IFLA_VLAN_INGRESS_QOS={0x7c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xaaa2, 0x5}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x9a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x4}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="1226a803c014"}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0xfc}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 4m9.050658579s ago: executing program 4 (id=4986): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x28, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x80, 0xe, "", [{{0x9, 0x4, 0x0, 0x96, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x9, 0x5, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x80, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x5, 0x7}}}}}]}}]}}, 0x0) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x128) write$P9_RVERSION(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="b292edaa5c8f09"], 0x13) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000070000000000000009000000180100002020732500000000002020207b1af8ff00000000bfa10000000005ec9f1a52119f29e47a00000601"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2edb7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf5}, 0x94) syz_usb_connect(0x5, 0x9a4, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x4a, 0x4, 0x95, 0x20, 0x16d5, 0x6502, 0x5811, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x992, 0x3, 0xf, 0x5, 0x10, 0x8, "", [{{0x9, 0x4, 0xff, 0x4, 0xa, 0xd6, 0xa9, 0xf8, 0x0, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "07ed2cca94f9"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd9c, 0x2, 0x81}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x7}, @mdlm_detail={0xb2, 0x24, 0x13, 0x1, "14f87e26944dfdd4531d3c3fe5e9ecbd030ad6c66405832fd0028cd110f74a9b72b980a59ce705e7760953da790f52d25f4669e194522c3e17526031ca41493b0fe34a033b7ec744c659535dfa44159eb72ccc1415cd33d61ae698014b1e69c9513f9a13d95256de93954ce472e642c5466ddc8968cd75a04ceff655a73ca2e22cfcf18f7ee51d0d05e84aa3abbe8f0a59d86e2f7d9c81d80cdfe3e7d20d07cecd19072f016c90190969282136b1"}, @country_functional={0xe, 0x24, 0x7, 0x8, 0x1, [0x8, 0x2, 0x8, 0x1]}, @acm={0x4, 0x24, 0x2, 0xc}]}], [{{0x9, 0x5, 0xd, 0x1, 0x10, 0x2, 0xef, 0x9, [@generic={0xc0, 0x23, "529987df019aa29349673827c80382b850adae8070f271086ae151a266859c4ca79ec50885c968d7224abeb05c7a1c03732bdd3cb35ca373040af90338f2f5e0067ccb5f5a28c6718d62c239fe5c427780cf8bc33c43ff817cacb7ca9a5a1f381ecd75ab3f9625823c1f98f30413b5a2f92ec17e8ccca904ec4ea8002c2254379bfd9eef79ecac8cfca77c6d532a4f91b0b0c27e6403eb89e53dba9a60533cfd37278966c0db0704e7f2623fe6196b95cc33a50e2c9903da9c2a4ff1f1ad"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0xb8, 0x5, [@generic={0xfb, 0x5, "5cdb808b517d8ff9ab556fc9c9b1f0d7949cdf45fdef4c149fe7fa54c5c95d626cf9b5cdf0f9e68a7d699db9fb7ab18b5f9dda9d1bd4fceb195a12fa0ec9d5e0de8803b4bf28c77ab45a056814c713ae8cf1d319c2830c90b61ef791c51109b57b771d37a5b8e22328860a236fea74a69308d112195258d20c1524f35b8bd3a87895cb513c7ea711f9b59fed785b7804b6616943a0fc48a0241b23d51642730a250b19ff862aa98935ade7a22ca712140cf1c1d932166d90f9a8ab6b7cafc27af10cba73e6358d21bc82de26ad8f5a326b9f057808d419fdc096150100049618520fd77dd89eed767da6d084439c8d184382922e8f90b0e6f2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1000}]}}, {{0x9, 0x5, 0x1, 0x7, 0x20, 0x3, 0x7, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x4}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0xc1, 0x10, 0x4, [@generic={0xc, 0xa, "5eef2f9f7e5c73812568"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x566}]}}, {{0x9, 0x5, 0x9, 0xf, 0x40, 0x2, 0x0, 0x1}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x2, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x68, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x48, 0x5, 0x1, [@generic={0xde, 0x31, "eb85e5638d617b3e071e9d7c01b94022342acccbd223c8eddd4bb30f4c7c46991175e03fd111356f87fb2f6e3f73dd52ac634a2a61fc7945a745859f58fb18255dd705b30e41cbf4d85af881121a6c38e0d8e13fb177890fb9b2791cc605b2a3c764bdc9051fb0d5ba07645f99e7ac23b88d01eb55294e16620af1ba7aa3d9e055354de29a6032be48a24fd3eb0ccf2670828c160b2c9c476520211352b9c84e034dcf862fe155ed552753fd2548135c51e23fe9c764100d7555ae5c29969110c7f8d9b8e6467934daa3928544eeec607ab7a4f7e3097f8c389c74da"}, @generic={0x91, 0x5, "3047eed62643e517cd1499c00e17035863b0de63ab2b4e23435f4df4cdcff3a61dc996a155281c32d5ffb2b775ad00d77047d56174943f59ffe0dfedb28e5c386ad79cd0c1f64973a6627e469da88e324fa98e0e0e7571ac140ff721ef397c8eacf32b09d6572b78b0ce55ed5afde6022b61c003539ac1516df8515edd2243442c9750ecd066be1049f4815b506027"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xfc, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1ff}, @generic={0xf5, 0xd, "68bfc7d692b7fc2dce3c3437b60ef208ac113d15da4055833742fbd03eb36aedcc3475b166b47c0e7114d14af55f4c89ba1f9793348d5a5c96990cb23acde06c47d8349795283a35c77e765416dd505b1909996d4a36986354724a7c674a32cc6d51eedfcfdb91e43cd027f1ad670d3751e161ce57e62bdaee96b4f4fb3e05c101cac555d92cb0dcde3eb9105e39e3a0029715b4a83a38502e2240d00025112c2a10d3fb0ae857dd34b4ff8965834b1b32e6950f847fbeeb93407340617464a6a0c721f017c30aad1b8688aaee1668f4842e3884750b8d8f8d92d131a0f9b39ae0530a094794596ded98ce5ccd8312bc2c515a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x8, 0x7, 0x3, [@generic={0xb0, 0x4, "f259bdaed195a1f100bb2da2de6619a275742802a7f0cffdbc93dcb9032f3f676be05755eec64a1f2d8fc07e4802c1e666209a2a83071b98c945f97db3adf955abe8e10284cbcb45da46bea5496e31ec6a6f7eabc0a65489662fae43d9e3a79c3cf87222f404c901a994ad876b2b85f4539bd4183a684d59ecde48854e39663a30d4b7f43338178a248f81d17729dbfbcb754ed2103c39432864d6f08fd53c221f4e48a4d10183f22f824de2bc87"}, @generic={0x9, 0x23, "ee7417d1bb3908"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x4, 0x0, 0x1, [@generic={0x71, 0x7, "b65ba3518edcd24aea7a763ec503a88674b5b330f2e20f082c124140406879be8ce9e7a300df51038abea14a8aa98730513b4d3e0922f6c993652cf9b2b83f6e89050f146db993f212fe7b87cf7995cb4657420c9e12fa1c5d9fb0c7218bfd9e1e9ce9e912e75a741bde0e613d7b83"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1ff}]}}]}}, {{0x9, 0x4, 0xa2, 0x3, 0x4, 0x48, 0xae, 0x72, 0x0, [], [{{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xc0, 0x4, 0x4, [@generic={0xd2, 0x7, "7f73a98c2d6774eb9ada1096263164d9a3445ab8a18d5a3044417db50bfdb0328474f9f3315a3dba9ec41d5565986d336e0657fde9b31d92bd04cd6a368dfbf3812854de731ec5f9ef9cdbfacdbb306b9b2d16fb3b84751ccc527cead3650d38d8068e6637ce3696a8245a122d0632a147716522717c91b8e207625990829696022989894019f3b32679c22dfd3bdecbdbd1db5396c246000c4dbcc28702e272fdac3b15617525baa8d82a769ab1225bca1ec03ce0fcddddc5a61fc7798c6f3eeb18d12dec7e157be783afbd76e4ca56"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x9, 0xfb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x1ff}, @generic={0x88, 0x5, "72ccdfe4cd2049fe3d58d77de3436d8d4a3fef6674261a34080cfd0096b010994998e31ed13c9d0a27e819f1046fd326883efa9dc608c426ca4a11a9016d866dd654b0e9c8fba2e0f66a089a0a44f026b93fde02039f96701977d6c6420a027cd76759239f5b66aba28f9f0922adb10ada8a8195ba1c19522f330c558686a344505fd93a4337"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x9, 0x0, 0xe, [@generic={0xe6, 0x30, "153878e3a63401da7e8600dceb6380ab81b1ea5064534dad2ec869f33e1e1d2e20de546274133fca6ad5b8ab206006910ae00eb232085f093aa93e696a7c21e5113fb2fe8f6b2e543ab0cb31a1a05a9a4082fc5730b4ac08a49e431cfde997f3670708c3c404eb63cc40fbc2db828779c1e4e425f8f3ac464dc14433c390d2bb8d182bc08a67fe54c02a1fefeeb71559bbf66aa90b530aedd8fc5b93e4706b298a049357f9d837b5f1dcd7b5138c0163c8656a0514c463d0466d4677ee397181af9e072a1cad46d69008e77ecf9fa729579a9cb954312604cdbbdbd374bbde708599a5c3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3}]}}]}}, {{0x9, 0x4, 0xe1, 0x9, 0x3, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x3, 0x1c, 0x200, 0x0, 0x50, 0x6, [@generic={0x12, 0x31, "9c25f1ec49798510db341fb3fad26c45"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x7, 0xd2, 0x3}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x4, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x2}]}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x110, 0x2, 0x1, 0x37, 0x10, 0xc}, 0x26, &(0x7f0000001240)={0x5, 0xf, 0x26, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "cafe4d361188fab7ec3996fca59590c1"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x8, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0xef, &(0x7f0000001280)=@string={0xef, 0x3, "248d09e37cc66c1789422c57856b2a477c36bf43f6a3d7b2790de420c5d81e13e6751557d10e1371df17207ce8c9726796f1697911546cf5fa36fb2c987201a70135ae78d83f17f1af940f43088b417a87924965df724554101645e9fbb7dae872372fb96943c4d573e1978527ecb179496cd924f2d9d4a8a34f0b1314c66309a12a16714766a03f41dc1c73a2b31cd917459099847a868b8b3d1f6a41a11ee95b6404e0a4fc64decf96a970be1e3809b609d99ec8db32328186adf3aa5f976892605afe675503c5102c158594eb80dcbcda25ec2414fb1ab49f0001b959f391a755aa28a4663883c0aa3158cb"}}, {0x8a, &(0x7f0000001380)=@string={0x8a, 0x3, "f8a3b6b93c762c0461a8607c5e2a2780eca9e62d2e3549548dd7ee326ad34a6e1961b97196fa792493ccf22c14b0f62fc2efd5ed372b19e60d3aa50af0d5152e3543f902e93956c8b5a698680301a74d46a0eba5dc47b4a9ee181e4537b477a17aa923f965977960f4fa3c7fc909cd3280f4c3264c0e12183233670992154643a3b423e00ca27c0c"}}]}) syz_usb_connect$midi(0x3, 0xde, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000040820514014000010203010902cc0001018100100904000008010320e8072401040007000724010e0007000905041000040615f11125010d43bec99cfc13a36f3e427ce36e090501000800240c00142501109a984ef2c22d5c87a0fcf3e963751d7a0905091008000209001025010cf6b226a157b2069451a514672f0905040810000909061325010f5809c4206ed249a20484eee0622ead0905060040000807050c250108ae8ed032e7999ff009050d0008000b060506250102c7da09050707ff030f03060625010257f70905e515b2c510ee0f004000"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x7, 0x40, 0xec, 0x8, 0x3}, 0x43, &(0x7f0000000380)={0x5, 0xf, 0x43, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x51, 0x6, 0x9, 0x400}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x5, 0x3, 0x9, 0x6a}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0xfe, 0xfffb}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0xe, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "4436b224300f36c12ee418e265a2bc35"}]}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x426}}, {0xeb, &(0x7f0000000440)=@string={0xeb, 0x3, "71d027723407484b30ef6c52ea5c641d2db8499a45ed06df877eb3f03757e52dd76db5a44f7629ebf1d3312d5aa19bba42b8f4abba982b69d3d136e9acd45a966043ea23d2e387ee5bb42af491eb0c6177ab0842418e89f1ba2c0d942070ef34e0af6890784c7cb6146969796fbfc2d8d1c975d4a4f33fea5e2fdb58db51e11fb097c351645258c7e869f372632b0d1887c8f8896285239bddaad41773f74c57f7ed32719f0c2bbc1108004a89546651ec0e6afd29f1e54bd6f31146f9e0a4ac3004602e6e5af8fbf9c4729962b38f1b93db72c57a18b1fb8187ca0f5283dd36dfdf871296bf336e63"}}, {0x77, &(0x7f0000000540)=@string={0x77, 0x3, "27d9cb76a405b0ba7c93a9e6458ecaf20486b4ae44c1b96dd72760085ce94c2b1c7a352ff74fdce6bb024bfcab0f8432c24a989389ed4fbe3c1f91350c83231ff0841d369f3c341e9537371b5b84b5923aaa32c0d6b0777086ec0b85661609ef9b35c0d76fa37643da696b1c45203863ab539648a2"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4m7.018780054s ago: executing program 4 (id=4996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)={0x14, r1, 0x309, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x110) 4m7.016525722s ago: executing program 4 (id=4997): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) (async) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) dup2(r5, r5) (async) r7 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) (async) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f0000002780)={0x2020}, 0x2020) io_submit(r3, 0x2, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x80, r4, &(0x7f0000000280)="3b0291b614ebc1c19150b86b5ed6a7386d8a3e0607883f009c1b116026a5af71b8a5dee62fdff5d2ecd09382a622a6f509718adc946ddc4dcd3db9433fc72f0ecd06bd79dcb20fa57591a0a54b3b60b7df5f7b10f960756f37a0bca83c3854118d8e04b6bb6c22851905e19dfd523b5ca69e5a4d0cd53efbdf95c2153b1a99eaedc2b2e21d130211b065346aebc19cdecf0aff4e3f01036e22881776a5566b1f2da9d9536f8245e108db4f05c249e2c68227c6def82161d59ea0b144a872cf67d1a68240e5a76d91947c035977ae64c40717f1cde12d8829f2ecd868310f793efa44577fb9", 0xe5, 0xfffffffffffffffb, 0x0, 0x3, r7}]) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 4m6.737112995s ago: executing program 4 (id=4998): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100)=0x80, 0xfef2) r1 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) close(0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8202, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x20, {0x4b564d04, 0x401}}], 0x20}) r8 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 4m3.179525156s ago: executing program 2 (id=5005): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) (fail_nth: 1) 4m3.047171658s ago: executing program 2 (id=5006): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') (async) r0 = userfaultfd(0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x9, @void}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0xfff, 0xc3, &(0x7f0000000140)=""/195, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x10, 0xd1, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0xe, 0x1}], 0x10, 0xfffffff2}, 0x94) (async) r3 = signalfd4(r0, &(0x7f00000003c0)={[0xa]}, 0x8, 0xc0000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r1, r2, 0x4, r3}, 0x10) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x7fff, 0x10000, 0x401, 0x8, 0x5, 0x9, 0x5, 0x6, 0x80, 0x1, 0x1, 0x4, 0x82b5, 0x1, 0x51, 0x8], 0xdddd0000, 0x3300}) (async) timer_create(0x4, &(0x7f0000000700)={0x0, 0x29, 0x2, @thr={&(0x7f0000000540)="cc8a5d3d783987c95a87ab1604f3c134baf690742ed5fdd4f99313c43d83a74f816e05f66ac8b10db6e38d02d13ad49dfaacc946dca4c4979fdba7343955f0cba5e9535ef59ec32190030d9d1bc8ec258afd76e1c4d25629d80d77e3a6e59863e661d3952288abe01a81055cfd3482b51cf53e9898b5ea5a706d586a5f6d3e69d34fafc80b150ad7ca890dd6a14c9f0391dc81e299ca690e8627b86f7548fff56dc057eebb910692c22649b8ba50eef34ccfb35ee1fff07de026fcd7888e590cc1c07fd41cd9239c14648c51d61ad891473f8837332d5c5e04fe639126019dd0ff707e72", &(0x7f0000000640)="f31053246ed959e0f82faf34f7846c6cc256f4a4d9aa98fbc2911316de823c02d3cb020529c92bf3aafce5f57d5a96dbbfa3e26e85e9c40b35a386c85334b79b9ab0294bccd769379d3ac239109fd9f86099c9109ceed8bd3f32ab7d7daee4c40ace2ee15f530383fd28dd269aceefdb9277ee811b29ec140355d9b167e0488a760c1c0be64873ac4c915e22bb21a1e6a259f868f306"}}, &(0x7f0000000740)=0x0) timer_gettime(r5, &(0x7f0000000780)) (async) r6 = mmap$IORING_OFF_PBUF_RING(0x0, 0x6, 0x3000001, 0x100010, r4, 0x810aeb12) syz_io_uring_submit(0x0, r6, 0x0, &(0x7f0000000a80)=@IORING_OP_WRITEV_FIXED={0x3d, 0x1e, 0x4004, @fd=r3, 0x10000, &(0x7f0000000980)=[{&(0x7f00000007c0)="9204946b66149bdcd95282d4e5434278891ba8732e612083cc4f2677888ef2648f7e3103f0e3ec90e3d61bd8e94c27ab070d23696c2e60b75133c0a60dffb3dbd4374071f98ae80b1cda22cd2b7f7e94792156e9f7ac58d105845c68cab33b63120776a5edff9a971f1cad49bd4c6a2596b6455e6fa030cf24cb1afcceff641825e952f4593d866ac440f9605737ddfbf7bbc0b230b069aefe8e45c760f82554906854236c1e7a1584b8bcefd8c022", 0xaf}, {&(0x7f0000000880)="0ab7381002a0ac5bc2c717a8286025286a227f14dd3090c0cf8cab24d8a28247925678048b54bf6f243c3652f30f056384668247c87d6108ffb75d7ce36740cd6e94e7a847c8edb9d6f6f7f4827be91756736fcf0fe1bd7390aa28cac4319192f4124b8c10726468ab8f95a6c21795623e458793ee715ae728b8bec7172a98bddb8f07ee467db6e473ecd75aca99159e0133bd919c3910322bf05642f7384841fa96669d6392a4179db4e0425e00d17bf521ecfcd622fdf92f594dbf3095faeec61a875b85835c2b5250d085a09fdd3150f687bb6d07395c6955be081004f21e4aecbd6ad9744282802c0cd4b48cdfbbc68ee0120f", 0xf5}], 0x2, 0x6, 0x1, {0x0, 0x0, 0x6a, '\x00', &(0x7f0000000a40)={0x6400, 0x3ff, 0x5a, &(0x7f00000009c0)="a06040ef9e9dd76718f2c9c4a8bb2b330d2cedbd9f073f9fd4fbafb84e2a55c3632c17061cce2d721ea3aebdf351ea1d4bc2f7223a2c7ce94b42619b2e9402bf4433b456d98d998b4536ec125736caaed3dba00f91241afcff2e", 0xa}, 0x7}}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000b00)={0x1, {0x12, 0x3, 0x1, 0x400, 0x5}}) timer_settime(r5, 0x1, &(0x7f0000000b40)={{0x0, 0x3938700}}, 0x0) write$P9_RFSYNC(r3, &(0x7f0000000b80)={0x7, 0x33, 0x1}, 0x7) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000bc0)='ns/pid\x00') ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) (async) socket$netlink(0x10, 0x3, 0x14) (async) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000c40)) read$FUSE(r8, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002cc0)={0x18, 0xfffffffffffffffe, r10, {0x800}}, 0x18) (async) read$alg(r8, &(0x7f0000002d00)=""/4096, 0x1000) (async) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x800c5012, &(0x7f0000003d00)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004fc0)={r3, 0x0, 0x9e, 0xc1, &(0x7f0000003d40)="6be3118fd18aac827c730100c6eaa672168b9d43c8acb3b2d2c50f44feaaafe79db20504652954712bad659c9ae073693f6aba7809c752326b7236f2c65b831b30eff8edbb73dea490b68128ba3b504a5bbe75b6727eda8a9adb2f7fff6abc7defbcf9a644f1a34dcd64da9767904646ad35584fc12183f166ea5ab94baa2b2635c9f5e1da381a0eeb1830ee0a8c3aa9a35891b9105ce10e706838155176", &(0x7f0000003e00)=""/193, 0x6, 0x0, 0x84, 0x1000, &(0x7f0000003f00)="1300b3fffed28df00a34cf96250b4d797f83147e638f44a77e41be8fdb15954ea57ac149450a3cf371ec301a283d534ade5b2813bd26c3e921c03d9af8f312cc2d1de3b8ac8ad561663e58ab7a6a58b3c0093f3b28bc252815686ae4040dc7467a58c20e240c73d375d3fb0359953368adaf802ded848aadb2b65f98f381fade0895283b", &(0x7f0000003fc0)="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", 0x2, 0x0, 0x5aa2}, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000005040)={{0x3, 0x8}, 'port1\x00', 0x30, 0x1, 0x12a, 0x401, 0x5, 0x80, 0x4, 0x0, 0x4, 0x3}) 4m1.816803029s ago: executing program 2 (id=5010): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='/,\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x3ff, 0x80000001]}, {0x5, 0x9, 0xb3, 0x6}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x45ac}, {[0x9, 0x800, 0x1, 0x6]}, 0x4, 0xee, &(0x7f0000000100)=""/238}) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000000280)={0xffffcf93, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) r5 = gettid() r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 4m0.915487632s ago: executing program 2 (id=5016): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000002480)='.\x00', 0x0, 0x8b7848, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x5, 0x4) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000002a80)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x80}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100000000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x4, 0xc8}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4m0.000122584s ago: executing program 2 (id=5020): bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000007700)={0x2020}, 0x2020) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x8, r3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) close(0x4) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) 3m59.486380154s ago: executing program 2 (id=5022): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) syz_pidfd_open(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) bind$inet6(r1, 0x0, 0x0) mlockall(0x1) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 3m59.136482006s ago: executing program 32 (id=5022): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) syz_pidfd_open(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) bind$inet6(r1, 0x0, 0x0) mlockall(0x1) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.679832254s ago: executing program 33 (id=4998): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100)=0x80, 0xfef2) r1 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) close(0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8202, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x20, {0x4b564d04, 0x401}}], 0x20}) r8 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 9.224896968s ago: executing program 3 (id=6120): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='/,\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x3ff, 0x80000001]}, {0x5, 0x9, 0xb3, 0x6}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x45ac}, {[0x9, 0x800, 0x1, 0x6]}, 0x4, 0xee, &(0x7f0000000100)=""/238}) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000000280)={0xffffcf93, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) setresuid(0xee00, 0xee00, 0x0) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) r5 = gettid() r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 7.346105196s ago: executing program 3 (id=6124): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5d5dfca8) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000140)='./bus\x00', 0x0, 0x3801000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$UHID_INPUT(r2, &(0x7f0000004040)={0x8, {"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", 0x1000}}, 0x1006) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) dup3(r3, r0, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.310409813s ago: executing program 6 (id=6125): r0 = socket(0x10, 0x803, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x8000) 6.58240477s ago: executing program 1 (id=6127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @timestamp, @window={0x3, 0x9, 0x9}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 6.029496s ago: executing program 3 (id=6130): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x4, 0x5, 0x1, 0x4, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x208800, 0x8) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x1ddc, &(0x7f0000000080)=0x7}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000003480), 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000000400", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={0xffffffffffffffff, r4, 0x4}, 0x5) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x8c, 0xc}, 0x18) 6.00123477s ago: executing program 1 (id=6131): r0 = socket$inet6(0xa, 0x80000, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) r4 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e20, 0x800, @loopback, 0x3}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) 5.64732915s ago: executing program 3 (id=6132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x27cb, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180), 0x1, 0x1, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf251000000008003b000300000008000600", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x20280, 0x0) mmap$xdp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000004, 0x12, 0xffffffffffffffff, 0x180000000) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000380)=0x6, 0x1ff) lseek(r8, 0x9, 0x1) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r10, 0x4c03, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000100)) r11 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40088a01, 0x0) r12 = socket$kcm(0x2, 0x3, 0x2) close(r12) memfd_create(&(0x7f00000003c0)=':*\'\'H[)))&.)!]\x00\xe2\xac8\x9b\xa2\x94\xfd/\xa5\x9d\xff\x84\xfbK\x00\xc1\x04\xff\xb5Th\xfc2\xff\x97\xf3\x97\x9bu\xdc^J\xf7\x8ech\xb6\x0f\x02\xc6\xbcW\xc0Nc\xdb\x8f\xf1\xc3CM$\x800\x9a\xd1\xf8\xb4\xe3_\xdeu\xb5\xf7\xa3\xbb\x9bwuh\xa5]\x80\xeb\xd6\x98\xe2S\x7f\xf5\xb1\xadkm\xdc)\xa5:\x97\x1d\xee|\xf6\x8c\xb0\x10+\xfc\xcb\xdb', 0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r12, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x0}, 0x0) syz_usb_ep_write(r9, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r9, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r9, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 5.641859659s ago: executing program 6 (id=6133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x145241, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="240000004e0025000307f4f9f7ffffffffffffff00f4008bf68deaeff2dbba1786c9f221", 0x24) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x20}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x2004c840) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001180)=[{{&(0x7f0000000540)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000006c0)="0dd7d3490a937232c64cbb8bc40cb59a3edb708b7de35734555a6634bba4a917cd5eb6e5cd270207f03e5c3954beb3919631c6a1dcd83d08f2f0dba0d1110a582c2861e33daeb71cea8fc5e81894f97e2dae26920c450c2d69b761a2dad4e4fd32dcc30e1fea140673339d6636fed7259a2ceab7f5b4d33a8226555d29eb7c22c899b74c81d0e42ed4da86d353145183ef58c018a81ee06308cbab6b8673434733d3cc1ae9617d68ce", 0xa9}, {&(0x7f0000000780)="be9c11f4d4b96a707be3e8d95477e8ee", 0x10}, {&(0x7f00000007c0)="b3a87cb48b30de3cb01ed79832372010ad356687c509", 0x16}, {&(0x7f0000000800)="cb4b4f74f20930b693b7f5f0e5bd00cf5e5915e3c39ba4bf6f3a76205397d00600dd43788a48a1e465eaf15ccf52c8a2aa0f9629", 0x34}, {&(0x7f0000000840)}, {&(0x7f00000013c0)="5eb7ba017dc6debaf39bb3479367358903f944fd86729cb2f0c319d667819c3b3de6d4596bb52c0ca5ec040392b412235da98416ff86ce3bca558c4ad0a1bb1b3d393740c987a52da5521cd69147885dd50d392ecdbe2348704284a28927e63107188b637d5c2596645fa942206f836b29f6923c1198df7cfa2e2f11689bdc9ab6751ac99318f518a50733d101afb776c8112b12d6ca0632043bc0373a816c22ab9e7de4174f23943cc44e17909a7b41ba73654a95a0b30475fce5a5228b46", 0xbf}, {&(0x7f0000000940)="7c08370e7be27bb25dbcc23fef50cf797aff2a2e7fde0411189e902db5e36c1cb45105bab16e", 0x26}, {&(0x7f0000001200)="e77deb5b993ac7b334f72527ef658a2b5a7172c6b4cba76aa1a8f4e9a0640a7eea6aee9994dbb4f3eb6ef224e52c652a0a73b89f07114cef686146535380302a94c6183c9e391ac5f9972ef52779d90851b54bc2eaf6a7b3178831387f548fa8868da5c3ee42692774e0e72c9cc5805d1798502b8140e2c474bc3294f76945d1d01562b1ab1de9bb78b33b65c79fbc6bb75c29b902650078c2f5183769c7f2e378", 0xa1}, {&(0x7f00000012c0)="561998006be0968bc9b71b97fedc0093d90dc17fa914e614bbda6031d4ae62a4aa9643561bbd17f7a8f463a1854f16720531524c799baccd0d3341f32d836e42e246c40be7c98bc1488260d6c181ac7948e107b6fee2943ad6301527dd3d3acf6a72bf0f601c980d639432b752d24efeacc23a93b36215f807f5352fc3758e8a484ffaf7a57a9e9810cf9ae99a17474af3bb66115b6a9c4d33bb385f2b8d2b498b845ce6c30082fe557e31b9d472477ea2636ddc52a4c60ab6aa9c0d4c9c0fded084420d1aee7a3ffb86a651c6cc81d29b2a8f989f542159e4c32020393d735a1fa35bc0076f94f8f60aef37bfa0683744cbce533553", 0xf6}], 0x9, &(0x7f0000000bc0)=[{0xc0, 0x10b, 0x6, "351b35b446c6f97cb93240e243eef81a87432a3e4d45ca34e276b8cf9c4720a128b53218df58b961d3ce879e25be81fec4f256fafecc026019cd92f4027608c4075f9cf955522332c7c2684ec4ce2d1665c60207c5f9884be77bee26ff961e734f3e5cb7a17404fed44a25ae7d540dfbe6f59223b198c6128edde837aea7eee3a9171f8c0b8a4307ce0e406fbcba5ab895d43f3114b2d963b2deb3bc4f7dc5bc15c9d133ad78469203"}, {0x38, 0x116, 0x10000, "7b399681dc68af0bcdbaf40757935f396f003f3cc051110cc375a6ce54f2e6a1bb"}], 0xf8}}, {{&(0x7f0000000cc0)=@generic={0x11, "ce88ef249bd4e4ee4f9f17428573be338876ebdcb1ac4710aae92d8430922b49baafcf8d7a72c0aabb278771c3cc5f941bfbcf005cb167a270a3d3a4edc2d9620821d706f341313927065be569c651945ac7bd4465cfc11aa8262107cf4f52471700908f15c3c69a8e0ef40bce0bc7bd0fc94a92a00869ac6313dd5fa4dd"}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d40)="8ed07c152049c37c82000d579e1d632570737cd536d382acca5913976316a40d8acca5fc6797def35b3cdffa3b5c45c3ec993fcc3734517d8252027e669f5f5f01799713af24348b2c0531857cbbf75d0c0ade8e6d6f41a02dfcd9ca", 0x5c}, {&(0x7f0000000dc0)="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", 0xfa}, {&(0x7f0000000ec0)="d4ba17affe800edc62b895f01d8209d5b1c8b21d9c8cd5c83cced18cd90f4ab1b165c6f77816aa36733d43200b97b51453418c79073ed0d408cb0b89647101acac331a6dd2b59ee911aa786f316c91c9adf8dd3419656bc660dd4dcd3c79e188075f2fbeaf4944654b8e48684229b6eedcc1a1f117ca009f0e87128459d6990520faf182dd06cfa5b1f28aa7ff29c240ab8886a60e61827f69e107cdbfeb77e4d8554df8", 0xa4}], 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="e0000000000000000f01000006000000f9a745da42c03df5c6b249e4e327ff011048b279ec06d4d8fef2e7fddf1bb508471194e2d48a4686cf2561f021db222a5ce6fdb4ce1d6895232935a0019902b3cbe48bdf21a869d6a6d6fd441fb8ae9a2b893036a00f222dbea7965b981ac2c238df88237b5644afe4645f4931196cec55d53cea42883d601ac22dc8b909860df628b391b8e2e26bc5bac5730e151bb4b3a08df39e517ff93d56388e96f77d67a4902777b0430b59524ba56b0b3664e9a7e3d142cf135cafb409b4290a812f3072cdb825deee7368fcdd24c39ee7243ad00000000000000011010000ff010000496c034e5a1f2eda341314bf8ebdec7509f86737348170d73e4084638712b3f454eb7f7f36ca273c53d0a9686b24204c526fdc33db6fb742bc9a7aa632ec598afc3499005e527a9d304e58473d78a8ec0a022d51d2a4c6cf51938320cf5f7eac8c3f81a09510361a7c28e39b2f6bbe4590b697daf84975e47aa5cc497a9df74be117a71f47b03305d25106b92f52bf607c46991611b5e4524f59ff49090636e7234475c25af4e093b8499d7289edb9ff0d5d0b20063541f24e2a76dc0965fc16"], 0x1b0}}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd28, 0x25dfdbfc, {0x80, 0x20, 0x14, 0x10, 0xfd, 0x2, 0x0, 0x4, 0x1000}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x4000460) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000052000100fcffffffffffffff0a00000008000100", @ANYRES32, @ANYBLOB="9007362d090b3500a3d4ee9ecff6fb6ae1fa39bafc86fdb40033ea99d0f271ce467b9255f8f422c7ffe2b363e3aaff84bd9d13c2e8aaa7b50e7faad23c50282ddec7ab513be2acbbbb6c79dc74edb8f1025ed6f16d7f62a15f6692bc1f5c7505000000352cf55b3d447f89bb1d56baf2e1c21a0477d0dd3c153ce28d241fdc497600e287850000"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000074) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x9, 0xb, 0x8314, 0xfff}, 0x18, 0x1000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6a040000) syz_emit_ethernet(0xbe, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08e478d2af4aadb6d878b2285200450000b0000000000011907864010101ffffffff4e234e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b591d58f96c04594cdd4fbe40a27424d00000000000000000000bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a33fbc1f39cb39c38f736fd35c14301b9b7452f23025493f2e03080d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r3], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd83}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r7, @ANYRES32=r6, @ANYRES16=r0, @ANYRES32=r1, @ANYRES16=r0, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRES64=r0], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 5.208778825s ago: executing program 6 (id=6135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000001380)='r', 0x1}], 0x1) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x42, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x4, 0x3, 0x5}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.008527021s ago: executing program 0 (id=6137): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x4b4b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 3.249871955s ago: executing program 0 (id=6138): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x17, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) 3.081677937s ago: executing program 5 (id=6139): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x34, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, 0x0, 0x5, 0xc9, &(0x7f0000000080)=""/201}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r9, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.080160605s ago: executing program 0 (id=6140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_helper', 0xa82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@gettfilter={0x64, 0x2e, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0xfff3, 0xffff}, {0xffff, 0xfff3}}, [{0xffffffffffffff87, 0xb, 0x1000}, {0x8, 0xb, 0x67}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xbe}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000006) 2.519260896s ago: executing program 5 (id=6141): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 2.286692745s ago: executing program 5 (id=6142): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x4, 0x5, 0x1, 0x4, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x208800, 0x8) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x1ddc, &(0x7f0000000080)=0x7}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000003480), 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000000400", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r5, r4, 0x4}, 0x5) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x8c, 0xc}, 0x18) 1.914709452s ago: executing program 0 (id=6143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) dup(0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27", 0xc7, 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) sysfs$1(0x1, &(0x7f0000000380)='!]\\\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x2, 0x9d, 0x18, 0xb, 0x14, 0x6}}]}}]}, 0x44}}, 0x4008010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 1.79711694s ago: executing program 5 (id=6144): socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x34, r2, 0x1, 0x400000, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27", 0xc7, 0xffffffffffffffff) 1.771022415s ago: executing program 6 (id=6145): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) close(0x3) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1c11a077609475b78411e88509d0050000000000f2170e65e3f5037fe422000000000086350000000200000000001900", 0x3c}, 0x60) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008380)={0x1c, 0x12, 0x1, 0x0, 0x8000, "", [@nested={0x4, 0x0, 0x0, 0x0}, @nested={0x8, 0x1d, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000ff020000000010000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 1.654483646s ago: executing program 6 (id=6146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f0000000100)=@ethtool_cmd={0x1, 0x9b03, 0xfffffffe, 0x2, 0x7, 0x13, 0x1, 0x6, 0xfa, 0x55, 0x1, 0x40, 0x1, 0x80, 0x7, 0x80, [0x6, 0x8e]}}) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x108, r5}, 0x38) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0xef, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x7, 0x0, 0x3, 0x6}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @void, @void}, 0x41) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) 1.589097558s ago: executing program 1 (id=6147): r0 = syz_open_dev$cec(0x0, 0x0, 0x193800) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000006b00ed000000000000400000850000000e000000850000002a0000009500"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x3, &(0x7f00000004c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/nfsfs\x00') lseek(r8, 0x800000040004009, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507060000", @ANYRES32=r9, @ANYBLOB="0c0001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008840) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="8001e200", @ANYRES16=r10, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x9, 0x4, 0x1, 0x0, 0x1, 0x2, 0x8, 'syz1\x00'}) 1.575314538s ago: executing program 1 (id=6148): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000500)="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", 0x36e) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f7001020301090212000100000000090401"], 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x700, 0x80, 0xb83, 0x80000001, {{0xb, 0x4, 0x2, 0x3d, 0x2c, 0x65, 0x0, 0x7e, 0x4, 0x0, @private=0xa010100, @multicast1, {[@rr={0x7, 0xb, 0x40, [@rand_addr=0x64010101, @remote]}, @rr={0x7, 0xb, 0x2f, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000)) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000012c0)=0x428f, 0x4) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000040), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES32=r2, @ANYRES64=r1, @ANYBLOB="d45366e07ee705359b02bb1c475a16609e7fc5b1e9340d668ba0589646d7cc8abddca5b8a0e2ef91ca6b54ecfe1213128b75fd2745b2a05e3e8f60afa433cb9978c0beaefdf93375db9159971aadc470c1c088fff74f77fae94bfb39b5e36c72f71abe266d2a73b835831ecec03c95fa7c4f7914bd7135090003869b278febb440"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) 1.21405734s ago: executing program 3 (id=6149): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x4, 0x5, 0x1, 0x4, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x204, 0x0, 0x3}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000003480), 0x8) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000000400000900000005000000535c", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x108) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[], [], 0x2c}) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x8c, 0xc}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x578410eb) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x19, 0x6, 0x100, 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) 902.105755ms ago: executing program 5 (id=6150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) dup(0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27", 0xc7, 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) sysfs$1(0x1, &(0x7f0000000380)='!]\\\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x2, 0x9d, 0x18, 0xb, 0x14, 0x6}}]}}]}, 0x44}}, 0x4008010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 317.328824ms ago: executing program 3 (id=6151): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe9a860cb7e283254, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000022120000", @ANYRES32=r2, @ANYBLOB="00100600008500008101bf2a00b70000000000000004000000d663715a24464d08000000000000005526bf34c8b304521cea6f29a8938aa9bbe4605f20a07bc7e0625ff6ecd714fde416369de6ec5b54ac9ab50bb97089eaa7046c09c52ada"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3, r2}, 0x1) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000380)={0xb0000001}) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) r8 = msgget$private(0x0, 0x9) msgctl$IPC_SET(r8, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5, 0xffffffffe95bf9a6, 0xffffffffff, 0x3, 0xfffffffffffffffc, 0x2, 0x9, 0x100}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000002c0)=0x7e) 287.068337ms ago: executing program 1 (id=6152): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x108) mount$overlay(0x3a000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 200.883938ms ago: executing program 1 (id=6153): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000180)="b1bda6bb0b56ac50", 0x8, 0x44884, 0x0, 0x2a) 171.553076ms ago: executing program 6 (id=6154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000000580)) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f0000000100)=@ethtool_cmd={0x1, 0x9b03, 0xfffffffe, 0x2, 0x7, 0x13, 0x1, 0x6, 0xfa, 0x55, 0x1, 0x40, 0x1, 0x80, 0x7, 0x80, [0x6, 0x8e]}}) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x108, r4}, 0x38) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0xef, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x7, 0x0, 0x3, 0x6}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @void, @void}, 0x41) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) 138.875886ms ago: executing program 0 (id=6155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r6}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00012bbd7000ffdbdf250f00000008000100", @ANYRES32=r10, @ANYBLOB="f0ea62904db9ba0126c547156e6a1f5406c33dcf2867a238f0b64b8fd3347a49fd9cd92fa6cdf48fe4f9f228ac11bd769aa00bf34e7157277b75e2433e"], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r14) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r10], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r17 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r17, 0x0, &(0x7f00000000c0)=0x0) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r19) sendmsg$NFC_CMD_DEV_UP(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1cd2476902f84b68cd0a7cdaa6652c771dfc38cba79d77cd959e18919a419d159cf621541a6465fb99387301370f0dfcb53ba56569e1bd98bf49433c8f50ca43de46ca8cdd09cc581dc7a288bf29aaf5ae1f73da3bb41d2a1581b0a5228f4746acff9e7da74627286744a822d337e12096321a75bb52b1d75b45177742ac12da2d6cbf605ae872ac15f44521b733928fce2e196ac896dd1d1948c270f1d5b0a4f901c5d322620bc5b5a373d50254c551a9fc2495731ed424d0be5460bf2036ee5de8f1e6423ef87cab28b3f6967401d0d0b2bb61c5461a9588009c", @ANYRES16=r20, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r18, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c001}, 0xc880) 55.46479ms ago: executing program 0 (id=6156): creat(&(0x7f0000000080)='./file0\x00', 0xc7) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x5}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=6157): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x8a, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x200000, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00dd2389367b24ed75b204be1960583adbbd7d1fe8d49c3a431b934b0534c082a2c3b7a81880d3b60d0559c6496a44de37dca6785d65df2cedc6fdc35577c54d5c2015b5b9263ff76fb397d8f88c8c9b167ab4b4f5449cc96231b1675607d8f5080d46b57c3a08c9ae202f900cc263a12877889b20"]) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): ] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.089817][ T5817] usb 4-1: Product: syz [ 1517.099964][ T5817] usb 4-1: Manufacturer: syz [ 1517.107547][ T5817] usb 4-1: SerialNumber: syz [ 1517.118101][T28138] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1517.182251][ T30] audit: type=1400 audit(2000000178.049:1602): avc: denied { setopt } for pid=28164 comm="syz.5.5504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1517.341663][T28135] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1517.355017][ T5817] usb 4-1: No status endpoint found [ 1517.796836][ T5698] usb 4-1: USB disconnect, device number 81 [ 1517.904876][T28181] 9pnet_fd: Insufficient options for proto=fd [ 1518.061355][T28183] netlink: 'syz.5.5508': attribute type 10 has an invalid length. [ 1518.069361][T28183] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5508'. [ 1518.374419][T28190] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1518.844361][ T30] audit: type=1400 audit(2000000179.720:1603): avc: denied { connect } for pid=28212 comm="syz.6.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1519.136490][T28226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5518'. [ 1519.345851][ T30] audit: type=1400 audit(2000000180.210:1604): avc: denied { write } for pid=28205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1519.476817][T28246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1519.500762][T28246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1519.598792][ T30] audit: type=1400 audit(2000000180.470:1605): avc: denied { write } for pid=28249 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1520.087733][T28256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.096898][T28256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.261085][ T30] audit: type=1400 audit(2000000181.130:1606): avc: denied { write } for pid=28260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1520.354649][ T5817] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1520.367988][ T30] audit: type=1400 audit(2000000181.240:1607): avc: denied { write } for pid=28273 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1520.645159][ T5817] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1520.655911][T28282] 9p: Bad value for 'rfdno' [ 1520.660474][ T5817] usb 4-1: config 1 has no interface number 0 [ 1520.668521][ T5817] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1520.688137][ T5817] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1520.701990][ T5817] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1520.714042][ T5817] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1520.728894][ T5817] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1520.740665][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.752088][ T5817] usb 4-1: Product: syz [ 1520.756998][ T5817] usb 4-1: Manufacturer: syz [ 1520.762030][ T5817] usb 4-1: SerialNumber: syz [ 1520.774180][T28258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1521.280613][T28255] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1521.324200][ T5817] usb 4-1: No status endpoint found [ 1521.528695][ T5698] usb 4-1: USB disconnect, device number 82 [ 1523.293366][T16251] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1523.348342][ T30] audit: type=1400 audit(2000000184.220:1608): avc: denied { read } for pid=28330 comm="syz.0.5550" name="file0" dev="tmpfs" ino=7635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1523.459848][T28344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.470731][T28344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.478769][T16251] usb 6-1: Using ep0 maxpacket: 8 [ 1523.488112][T16251] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.499254][T16251] usb 6-1: config 0 has no interface number 0 [ 1523.506943][T28348] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 1523.516097][T16251] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1523.525445][T16251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.533571][T16251] usb 6-1: Product: syz [ 1523.537804][T16251] usb 6-1: Manufacturer: syz [ 1523.542428][T16251] usb 6-1: SerialNumber: syz [ 1523.643710][T16251] usb 6-1: config 0 descriptor?? [ 1523.660221][T16251] usb 6-1: selecting invalid altsetting 2 [ 1523.674147][T16251] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1523.923562][T24865] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1524.084306][T24865] usb 4-1: Using ep0 maxpacket: 16 [ 1524.091485][T24865] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 1524.104147][T24865] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1524.112929][T24865] usb 4-1: config 0 has no interface number 0 [ 1524.119979][T24865] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1524.130982][T24865] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1524.148157][T24865] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1524.159149][T24865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.168678][T24865] usb 4-1: Product: syz [ 1524.173805][T24865] usb 4-1: Manufacturer: syz [ 1524.178959][T24865] usb 4-1: SerialNumber: syz [ 1524.226230][T24865] usb 4-1: config 0 descriptor?? [ 1524.234660][T28354] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1524.241979][T28354] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1524.471110][T28354] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1524.495072][T28354] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1524.657006][T28370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1524.686351][T28370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1525.111977][T24865] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1525.132136][T24865] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1525.150234][T24865] asix 4-1:0.251: probe with driver asix failed with error -71 [ 1525.169642][T24865] usb 4-1: USB disconnect, device number 83 [ 1525.310757][T28379] xt_policy: output policy not valid in PREROUTING and INPUT [ 1525.585427][T28392] 9pnet_fd: Insufficient options for proto=fd [ 1525.610799][T28392] netlink: 'syz.0.5569': attribute type 10 has an invalid length. [ 1525.619187][T28392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1525.628753][T28392] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1525.725528][T28396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1525.745682][T28398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1525.871235][T16696] usb 6-1: USB disconnect, device number 8 [ 1526.124124][ T5817] bridge0: entered promiscuous mode [ 1526.171804][T28412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1526.190441][T28412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1526.207528][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5574'. [ 1526.281884][T28416] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5574'. [ 1526.933141][T28434] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20264 [ 1527.073309][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1527.330963][T28438] overlayfs: failed to clone upperpath [ 1527.408128][T28442] qrtr: Invalid version 0 [ 1527.554793][T28454] binder: 28445:28454 ioctl c018937b 0 returned -22 [ 1527.645383][T28456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5588'. [ 1528.709016][T28469] qrtr: Invalid version 0 [ 1528.984442][T16251] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1529.027915][T28474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1529.174923][T16251] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.186227][T16251] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1529.266429][T16251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.297167][T16251] usb 4-1: config 0 descriptor?? [ 1529.443822][T28486] netlink: 'syz.1.5599': attribute type 10 has an invalid length. [ 1529.889214][ T30] audit: type=1400 audit(2000000190.310:1609): avc: denied { shutdown } for pid=28479 comm="syz.1.5599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1529.932389][T16251] usbhid 4-1:0.0: can't add hid device: -71 [ 1529.940214][T16251] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1529.954959][T16251] usb 4-1: USB disconnect, device number 84 [ 1529.978006][T28486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.006319][T28486] bond0: (slave team0): Enslaving as an active interface with an up link [ 1530.117392][T28492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5602'. [ 1530.145376][T28492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5602'. [ 1530.829085][ T5817] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1530.949339][T28528] overlayfs: failed to clone upperpath [ 1530.959270][ T30] audit: type=1326 audit(2000000191.830:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1530.962700][T16251] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1530.997942][ T30] audit: type=1326 audit(2000000191.830:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1531.025401][ T30] audit: type=1326 audit(2000000191.830:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1531.115777][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.126865][ T5817] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1531.136076][ T30] audit: type=1326 audit(2000000191.830:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1531.163145][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.417387][ T5817] usb 4-1: config 0 descriptor?? [ 1531.423323][ T30] audit: type=1326 audit(2000000191.830:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1531.449945][T16251] usb 6-1: Using ep0 maxpacket: 16 [ 1531.461080][ T30] audit: type=1326 audit(2000000191.830:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1531.497537][ T5817] usb 4-1: can't set config #0, error -71 [ 1531.509068][ T5817] usb 4-1: USB disconnect, device number 85 [ 1531.516425][T16251] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1531.537228][T16251] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.548999][T16251] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 1531.559739][ T30] audit: type=1326 audit(2000000191.830:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1531.586571][T16251] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1531.600251][ T30] audit: type=1326 audit(2000000191.830:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1531.646410][T16251] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1531.655611][T16251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.656274][T28537] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1531.672859][T16251] usb 6-1: Product: syz [ 1531.675144][T28537] SELinux: failed to load policy [ 1531.678389][ T30] audit: type=1326 audit(2000000191.830:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.0.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1531.715713][T16251] usb 6-1: Manufacturer: syz [ 1531.723524][T16251] usb 6-1: SerialNumber: syz [ 1531.752167][T28509] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1531.922413][T28541] overlayfs: failed to clone upperpath [ 1532.411137][T28509] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5608'. [ 1532.427785][T16251] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1532.763899][T16251] usb 6-1: USB disconnect, device number 9 [ 1532.797183][T22243] udevd[22243]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1533.695606][T28567] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5626'. [ 1535.064635][T28582] 9pnet_fd: Insufficient options for proto=fd [ 1535.102505][T16251] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1535.305357][T16251] usb 4-1: Using ep0 maxpacket: 16 [ 1535.320076][T16251] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1535.329716][T16251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.343034][T28588] netlink: 'syz.5.5631': attribute type 10 has an invalid length. [ 1535.351354][T28588] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5631'. [ 1535.406468][T16251] usb 4-1: config 0 descriptor?? [ 1535.413623][T16251] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1535.645939][T16251] gspca_sonixj: reg_w1 err -71 [ 1535.659626][T16251] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1535.680126][T16251] usb 4-1: USB disconnect, device number 86 [ 1536.110016][T28602] netlink: 'syz.5.5636': attribute type 4 has an invalid length. [ 1536.336521][T28606] netlink: 'syz.5.5636': attribute type 4 has an invalid length. [ 1537.472462][T26157] Bluetooth: hci4: command 0x0406 tx timeout [ 1538.113285][T28635] SELinux: unknown common  [ 1538.118893][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 1538.118905][ T30] audit: type=1326 audit(2000000198.981:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1538.153765][T28635] SELinux: invalid class [ 1538.158697][T28635] SELinux: failed to load policy [ 1538.207739][ T30] audit: type=1326 audit(2000000198.981:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1538.368837][ T30] audit: type=1326 audit(2000000199.101:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1538.782866][T16696] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1538.801305][ T30] audit: type=1326 audit(2000000199.101:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1538.860503][ T30] audit: type=1326 audit(2000000199.731:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1538.887626][ T30] audit: type=1326 audit(2000000199.741:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1538.925051][ T30] audit: type=1326 audit(2000000199.741:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1538.951652][T16696] usb 4-1: Using ep0 maxpacket: 8 [ 1538.955288][T16696] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1538.980186][T16696] usb 4-1: config 0 has no interface number 0 [ 1539.000732][T16696] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1539.016041][T16696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.035913][T16696] usb 4-1: Product: syz [ 1539.044415][ T30] audit: type=1326 audit(2000000199.741:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1539.079634][T16696] usb 4-1: Manufacturer: syz [ 1539.086766][T16696] usb 4-1: SerialNumber: syz [ 1539.105732][T16696] usb 4-1: config 0 descriptor?? [ 1539.111871][ T30] audit: type=1326 audit(2000000199.741:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1539.139173][ T30] audit: type=1326 audit(2000000199.741:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1539.187298][T16696] usb 4-1: selecting invalid altsetting 2 [ 1539.195576][T16696] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1540.336071][T28666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1540.355796][T28666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1540.515310][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1541.034766][T28676] 9p: Bad value for 'wfdno' [ 1541.046220][T28676] netlink: 'syz.0.5656': attribute type 10 has an invalid length. [ 1541.054617][T28676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1541.064257][T28676] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1541.090145][T28678] sg_write: data in/out 762587812/4056 bytes for SCSI command 0x3d-- guessing data in; [ 1541.090145][T28678] program syz.5.5657 not setting count and/or reply_len properly [ 1541.669837][T16251] usb 4-1: USB disconnect, device number 87 [ 1541.943242][T28690] xt_policy: output policy not valid in PREROUTING and INPUT [ 1542.258203][ T803] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1542.592528][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1542.702253][ T5817] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1542.932106][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 1543.028333][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.496856][ T5817] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1543.529008][ T5817] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1543.557604][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.582223][ T5817] usb 4-1: Product: syz [ 1543.587998][ T5817] usb 4-1: Manufacturer: syz [ 1543.597349][ T5817] usb 4-1: SerialNumber: syz [ 1543.611406][ T5817] usb 4-1: config 0 descriptor?? [ 1543.644311][ T803] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1543.657039][ T803] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1543.669931][ T803] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1543.784428][ T803] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1543.811069][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1543.830840][ T803] usb 6-1: Product: syz [ 1543.840473][ T803] usb 6-1: Manufacturer: syz [ 1543.867306][ T803] usb 6-1: SerialNumber: syz [ 1544.211080][ T803] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1544.254712][ T803] usb 6-1: USB disconnect, device number 10 [ 1544.265230][ T803] usblp0: removed [ 1544.345424][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1544.345441][ T30] audit: type=1400 audit(2000000205.221:1742): avc: denied { execute } for pid=28711 comm="syz.6.5668" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1544.345881][T28714] sctp: [Deprecated]: syz.1.5669 (pid 28714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1544.345881][T28714] Use struct sctp_sack_info instead [ 1544.395610][T28712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1544.424451][T28712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1544.535893][T28719] fuse: fd is not a fuse device [ 1545.355311][T28732] xt_policy: output policy not valid in PREROUTING and INPUT [ 1545.896492][ T803] usb 4-1: USB disconnect, device number 88 [ 1545.940580][T28742] tmpfs: Bad value for 'mpol' [ 1546.061008][T28746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.266172][T28758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.285133][T28758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.472679][ T803] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1546.652703][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 1546.665046][ T803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.683043][ T803] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1546.701548][ T803] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1546.715664][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.731291][ T803] usb 6-1: Product: syz [ 1546.743391][ T803] usb 6-1: Manufacturer: syz [ 1546.751249][ T803] usb 6-1: SerialNumber: syz [ 1546.767689][ T803] usb 6-1: config 0 descriptor?? [ 1546.905711][ T30] audit: type=1326 audit(2000000207.781:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.5687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x0 [ 1547.525540][T28782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1547.572466][T28782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1548.131806][T28797] xt_policy: output policy not valid in PREROUTING and INPUT [ 1549.406751][T28812] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5696'. [ 1549.744195][T28821] 9pnet_fd: p9_fd_create_unix (28821): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1549.749662][T28821] 9pnet_fd: p9_fd_create_unix (28821): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1549.917361][T28821] 9pnet_fd: p9_fd_create_unix (28821): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1550.414048][ T5817] usb 6-1: USB disconnect, device number 11 [ 1550.540497][ T30] audit: type=1400 audit(2000000211.411:1744): avc: denied { map } for pid=28842 comm="syz.5.5704" path="socket:[112838]" dev="sockfs" ino=112838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1550.782132][T28845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.811265][T28845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.070457][T28852] qrtr: Invalid version 0 [ 1551.521565][ T5817] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1551.559388][T28863] 9p: Bad value for 'wfdno' [ 1551.576354][ T30] audit: type=1326 audit(2000000212.451:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1551.633482][T28863] netlink: 'syz.0.5710': attribute type 10 has an invalid length. [ 1551.641324][T28863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5710'. [ 1551.650853][T28863] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1551.675302][T28867] 9pnet_fd: Insufficient options for proto=fd [ 1551.682393][ T30] audit: type=1326 audit(2000000212.481:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1551.742384][ T30] audit: type=1326 audit(2000000212.481:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1551.743398][ T5817] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1551.879582][T28871] No such timeout policy "syz1" [ 1551.960383][T28875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1551.977672][T28875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.068791][ T5817] usb 6-1: config 1 has no interface number 0 [ 1552.093527][ T5817] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1552.120915][ T30] audit: type=1326 audit(2000000212.991:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1552.155202][ T5817] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1552.183198][ T30] audit: type=1326 audit(2000000213.031:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1552.244906][ T30] audit: type=1326 audit(2000000213.031:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1552.304341][ T30] audit: type=1326 audit(2000000213.031:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1552.331300][ T5817] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1552.331335][ T5817] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1552.392505][ T5817] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1552.402428][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.412067][ T5817] usb 6-1: Product: syz [ 1552.417372][ T5817] usb 6-1: Manufacturer: syz [ 1552.424393][ T5817] usb 6-1: SerialNumber: syz [ 1552.430155][ T30] audit: type=1326 audit(2000000213.031:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1552.432037][T28855] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1552.525562][T28878] overlayfs: failed to clone upperpath [ 1552.538236][ T30] audit: type=1326 audit(2000000213.031:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.1.5702" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1552.934839][T28853] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1552.943951][ T5817] usb 6-1: No status endpoint found [ 1552.972082][T28884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5717'. [ 1552.997685][T28884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5717'. [ 1553.183256][ T5817] usb 6-1: USB disconnect, device number 12 [ 1553.273478][T28890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5718'. [ 1553.380202][T28892] UBIFS error (pid: 28892): cannot open "c:::", error -22 [ 1553.599083][T28894] 9p: Bad value for 'wfdno' [ 1553.686950][T28895] netlink: 'syz.6.5720': attribute type 10 has an invalid length. [ 1553.695056][T28895] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5720'. [ 1555.174940][T26157] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1555.184784][T26157] CPU: 0 UID: 0 PID: 26157 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1555.184816][T26157] Tainted: [L]=SOFTLOCKUP [ 1555.184822][T26157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1555.184842][T26157] Workqueue: hci4 hci_rx_work [ 1555.184859][T26157] Call Trace: [ 1555.184864][T26157] [ 1555.184869][T26157] dump_stack_lvl+0x100/0x190 [ 1555.184885][T26157] sysfs_warn_dup.cold+0x1c/0x28 [ 1555.184905][T26157] sysfs_create_dir_ns+0x24b/0x2b0 [ 1555.184922][T26157] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1555.184937][T26157] ? kobject_add_internal+0x25f/0x930 [ 1555.184960][T26157] ? lock_release+0x24d/0x310 [ 1555.184974][T26157] ? do_raw_spin_unlock+0x145/0x1e0 [ 1555.184990][T26157] kobject_add_internal+0x2c8/0x930 [ 1555.185007][T26157] kobject_add+0x16a/0x1e0 [ 1555.185023][T26157] ? __pfx_kobject_add+0x10/0x10 [ 1555.185039][T26157] ? kobject_put+0xb9/0x640 [ 1555.185052][T26157] ? _raw_spin_unlock+0x28/0x50 [ 1555.185070][T26157] device_add+0x294/0x1970 [ 1555.185087][T26157] ? __pfx_dev_set_name+0x10/0x10 [ 1555.185104][T26157] ? __pfx_device_add+0x10/0x10 [ 1555.185119][T26157] ? mgmt_send_event_skb+0x2fb/0x460 [ 1555.185133][T26157] hci_conn_add_sysfs+0x1a3/0x260 [ 1555.185147][T26157] le_conn_complete_evt+0x11eb/0x1f60 [ 1555.185160][T26157] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1555.185171][T26157] ? rcu_is_watching+0x12/0xc0 [ 1555.185187][T26157] ? hci_event_packet+0x186/0xcd0 [ 1555.185198][T26157] ? lock_release+0x24d/0x310 [ 1555.185211][T26157] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1555.185223][T26157] ? skb_pull_data+0x15f/0x1e0 [ 1555.185241][T26157] hci_le_meta_evt+0x34a/0x5f0 [ 1555.185259][T26157] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1555.185274][T26157] hci_event_packet+0x51c/0xcd0 [ 1555.185286][T26157] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1555.185300][T26157] ? __pfx_hci_event_packet+0x10/0x10 [ 1555.185312][T26157] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 1555.185329][T26157] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1555.185346][T26157] hci_rx_work+0x451/0xfc0 [ 1555.185359][T26157] process_one_work+0xa23/0x1940 [ 1555.185373][T26157] ? __pfx_process_one_work+0x10/0x10 [ 1555.185386][T26157] ? __pfx_hci_rx_work+0x10/0x10 [ 1555.185398][T26157] worker_thread+0x5ef/0xe50 [ 1555.185410][T26157] ? __pfx_worker_thread+0x10/0x10 [ 1555.185421][T26157] ? kthread+0x13a/0x450 [ 1555.185437][T26157] ? __pfx_worker_thread+0x10/0x10 [ 1555.185447][T26157] kthread+0x370/0x450 [ 1555.185466][T26157] ? __pfx_kthread+0x10/0x10 [ 1555.185482][T26157] ret_from_fork+0x72b/0xd50 [ 1555.185497][T26157] ? __pfx_ret_from_fork+0x10/0x10 [ 1555.185512][T26157] ? __switch_to+0x800/0x10f0 [ 1555.185529][T26157] ? __pfx_kthread+0x10/0x10 [ 1555.185546][T26157] ret_from_fork_asm+0x1a/0x30 [ 1555.185565][T26157] [ 1555.185849][T26157] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1555.507204][T26157] Bluetooth: hci4: failed to register connection device [ 1555.518281][T28919] xt_policy: output policy not valid in PREROUTING and INPUT [ 1556.215106][T28938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1556.341356][T28944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1556.391568][T28944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1556.591424][ T5817] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1556.761426][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 1556.767798][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.779383][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1556.793112][ T5817] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1556.802430][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.815135][ T5817] usb 4-1: config 0 descriptor?? [ 1557.552711][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 1557.982566][T28963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.010989][T28963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.994270][ T5817] usbhid 4-1:0.0: can't add hid device: -71 [ 1559.006180][ T5817] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1559.026076][T28980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1559.043437][T28980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.053648][ T5817] usb 4-1: USB disconnect, device number 89 [ 1559.442135][ T5698] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1559.605314][ T5698] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1559.631172][T26157] Bluetooth: hci4: command 0x0406 tx timeout [ 1559.634368][ T5698] usb 6-1: config 1 has no interface number 0 [ 1559.757246][ T5698] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1559.856028][ T5698] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1559.952348][ T5698] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1560.063270][ T5698] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1560.213072][ T5698] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1560.299306][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.418879][ T5698] usb 6-1: Product: syz [ 1560.428996][ T5698] usb 6-1: Manufacturer: syz [ 1560.754498][ T5698] usb 6-1: SerialNumber: syz [ 1560.764273][T28973] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1561.025999][T28973] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1561.035237][ T5698] usb 6-1: No status endpoint found [ 1561.174383][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1561.174401][ T30] audit: type=1400 audit(2000000222.022:1793): avc: denied { write } for pid=28992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.304913][ T30] audit: type=1400 audit(2000000222.182:1794): avc: denied { write } for pid=29018 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.335008][T16256] usb 6-1: USB disconnect, device number 13 [ 1561.623731][ T5817] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1562.254321][ T5817] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1562.274848][ T5817] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1562.317556][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1562.356605][ T5817] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1562.396364][ T5817] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1562.438743][ T5817] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1562.483782][T29028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.499514][ T5817] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1562.502502][T29028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.516391][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1562.543474][ T5817] usb 4-1: Product: syz [ 1562.557034][ T5817] usb 4-1: Manufacturer: syz [ 1562.581132][T29017] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1562.604275][ T5817] cdc_wdm 4-1:1.0: skipping garbage [ 1562.618211][ T5817] cdc_wdm 4-1:1.0: skipping garbage [ 1562.644357][ T5817] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1562.672410][ T5817] cdc_wdm 4-1:1.0: Unknown control protocol [ 1562.679484][T29038] 9p: Bad value for 'wfdno' [ 1562.852967][T29044] netlink: 'syz.5.5761': attribute type 10 has an invalid length. [ 1562.861078][T29044] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5761'. [ 1562.886823][ T30] audit: type=1400 audit(2000000223.762:1795): avc: denied { read write } for pid=29012 comm="syz.3.5758" name="cdc-wdm0" dev="devtmpfs" ino=4365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1562.911916][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1562.918533][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1562.924786][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1562.931378][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1562.937642][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1562.944250][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1562.950625][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1562.957252][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1562.963685][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1562.970271][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1562.976539][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1562.983143][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1562.989426][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1562.996032][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1563.002519][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1563.009130][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1563.015419][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1563.022020][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1563.028272][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1563.034872][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1563.238033][ T30] audit: type=1400 audit(2000000223.792:1796): avc: denied { open } for pid=29012 comm="syz.3.5758" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1563.324882][T16256] usb 4-1: USB disconnect, device number 90 [ 1563.330926][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1563.441746][ T30] audit: type=1400 audit(2000000223.952:1797): avc: denied { write } for pid=29027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1563.563462][ T30] audit: type=1400 audit(2000000224.362:1798): avc: denied { write } for pid=29050 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1563.908915][T29053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.935612][T29053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.949301][ T30] audit: type=1326 audit(2000000224.822:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.0.5756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1564.460341][ T30] audit: type=1326 audit(2000000224.852:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.0.5756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1564.501856][ T30] audit: type=1326 audit(2000000224.852:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.0.5756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1564.551715][T26157] Bluetooth: hci5: unexpected event for opcode 0x040d [ 1564.552280][ T30] audit: type=1326 audit(2000000224.852:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.0.5756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1564.921196][T21785] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1565.132294][T21785] usb 6-1: Using ep0 maxpacket: 32 [ 1565.138850][T21785] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1565.160333][T21785] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1565.175981][T21785] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1565.185389][T21785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.193935][T21785] usb 6-1: Product: syz [ 1565.198298][T21785] usb 6-1: Manufacturer: syz [ 1565.203335][T21785] usb 6-1: SerialNumber: syz [ 1565.362553][T29077] loop3: detected capacity change from 0 to 7 [ 1565.372359][T29077] Dev loop3: unable to read RDB block 7 [ 1565.378198][T29077] loop3: unable to read partition table [ 1565.384503][T29077] loop3: partition table beyond EOD, truncated [ 1565.390885][T29077] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1565.634332][T21785] usb 6-1: palm_os_4_probe - error -110 getting connection info [ 1565.726250][T21785] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1565.839623][T21785] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1565.879611][T21785] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1566.206118][T21785] usb 6-1: USB disconnect, device number 14 [ 1566.349851][T21785] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1566.637573][T21785] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1566.841231][T21785] visor 6-1:1.0: device disconnected [ 1567.316771][T29084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5770'. [ 1567.372914][T29091] netlink: 'syz.1.5772': attribute type 10 has an invalid length. [ 1567.381238][T29091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5772'. [ 1567.454477][T29087] 9p: Could not find request transport: fd0x0000000000000007 [ 1567.663499][T29111] 9p: Bad value for 'wfdno' [ 1567.865021][T29116] netlink: 'syz.5.5775': attribute type 10 has an invalid length. [ 1567.873131][T29116] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5775'. [ 1568.034236][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1568.034256][ T30] audit: type=1400 audit(2000000228.912:1824): avc: denied { write } for pid=29080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.196268][ T30] audit: type=1400 audit(2000000229.072:1825): avc: denied { write } for pid=29119 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.560484][T21785] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1568.961786][T21785] usb 6-1: config 127 has an invalid interface number: 130 but max is 0 [ 1568.970313][T21785] usb 6-1: config 127 has no interface number 0 [ 1568.990035][T21785] usb 6-1: config 127 interface 130 has no altsetting 0 [ 1569.077218][T21785] usb 6-1: string descriptor 0 read error: -22 [ 1569.087145][T21785] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb2, bcdDevice= 0.31 [ 1569.113143][T21785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.138677][ T30] audit: type=1400 audit(2000000230.002:1826): avc: denied { write } for pid=29126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1569.665388][ T30] audit: type=1400 audit(2000000230.542:1827): avc: denied { write } for pid=29153 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1569.779780][T21785] dvb-usb: found a 'DiBcom NIM7090 reference design' in warm state. [ 1569.799857][T21785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1569.862544][T21785] dvbdev: DVB: registering new adapter (DiBcom NIM7090 reference design) [ 1569.881732][T21785] usb 6-1: media controller created [ 1569.895777][T21785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1569.920544][T16251] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1569.994030][T29123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.014755][T21785] DVB: Unable to find symbol dib7000p_attach() [ 1570.036883][T21785] dvb-usb: no frontend was attached by 'DiBcom NIM7090 reference design' [ 1570.067278][T29123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1570.103560][T16251] usb 4-1: Using ep0 maxpacket: 32 [ 1570.123277][T16251] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.150576][T21785] rc_core: IR keymap rc-dib0700-rc5 not found [ 1570.156729][T16251] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1570.168891][T21785] Registered IR keymap rc-empty [ 1570.181000][T21785] dvb-usb: could not initialize remote control. [ 1570.190785][T16251] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1570.200124][T21785] dvb-usb: DiBcom NIM7090 reference design successfully initialized and connected. [ 1570.219993][T16251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.232941][T21785] usb 6-1: USB disconnect, device number 15 [ 1570.238962][T16251] usb 4-1: Product: syz [ 1570.254868][T16251] usb 4-1: Manufacturer: syz [ 1570.264545][T16251] usb 4-1: SerialNumber: syz [ 1570.283908][T21785] dvb-usb: DiBcom NIM7090 reference design successfully deinitialized and disconnected. [ 1570.296608][T16251] usb 4-1: config 0 descriptor?? [ 1570.581935][ T30] audit: type=1326 audit(2000000231.462:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.1.5779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1570.653615][ T30] audit: type=1326 audit(2000000231.462:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.1.5779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1570.715580][ T30] audit: type=1326 audit(2000000231.462:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.1.5779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1570.795231][ T30] audit: type=1326 audit(2000000231.462:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.1.5779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1570.853579][ T30] audit: type=1326 audit(2000000231.462:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.1.5779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1570.970204][ T30] audit: type=1326 audit(2000000231.462:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.1.5779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98dff9ce59 code=0x7ffc0000 [ 1571.160670][T21785] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 1571.300494][T21785] usb 6-1: device descriptor read/64, error -71 [ 1571.841857][T21785] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1571.990476][T21785] usb 6-1: device descriptor read/64, error -71 [ 1572.113699][T21785] usb usb6-port1: attempt power cycle [ 1572.245947][T29188] overlayfs: failed to clone upperpath [ 1572.361134][T29193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.405978][T29193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.600447][T21785] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1572.620854][T21785] usb 6-1: device descriptor read/8, error -71 [ 1572.816829][ T5817] usb 4-1: USB disconnect, device number 91 [ 1572.880558][T21785] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1572.964563][T21785] usb 6-1: device descriptor read/8, error -71 [ 1572.993964][T29198] sg_write: data in/out 762587812/4056 bytes for SCSI command 0x3d-- guessing data in; [ 1572.993964][T29198] program syz.3.5794 not setting count and/or reply_len properly [ 1573.090574][T21785] usb usb6-port1: unable to enumerate USB device [ 1573.497161][T21785] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1573.667763][T21785] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1573.766992][T21785] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1573.866967][T21785] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1573.969902][T29205] FAULT_INJECTION: forcing a failure. [ 1573.969902][T29205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.994945][T21785] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1574.043108][T21785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1574.063843][T29205] CPU: 0 UID: 0 PID: 29205 Comm: syz.6.5796 Tainted: G L syzkaller #0 PREEMPT(full) [ 1574.063879][T29205] Tainted: [L]=SOFTLOCKUP [ 1574.063887][T29205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1574.063900][T29205] Call Trace: [ 1574.063908][T29205] [ 1574.063917][T29205] dump_stack_lvl+0x100/0x190 [ 1574.063946][T29205] should_fail_ex.cold+0x5/0xa [ 1574.063975][T29205] _copy_from_iter+0x1f4/0x1690 [ 1574.064004][T29205] ? __asan_memset+0x23/0x50 [ 1574.064032][T29205] ? __pfx__copy_from_iter+0x10/0x10 [ 1574.064058][T29205] ? __pfx___alloc_skb+0x10/0x10 [ 1574.064081][T29205] ? netlink_autobind.isra.0+0x160/0x370 [ 1574.064118][T29205] netlink_sendmsg+0x808/0xda0 [ 1574.064146][T29205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1574.064171][T29205] ____sys_sendmsg+0xa4d/0xbe0 [ 1574.064200][T29205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1574.064221][T29205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1574.064253][T29205] ? rcu_is_watching+0x12/0xc0 [ 1574.064280][T29205] ? do_raw_spin_unlock+0x145/0x1e0 [ 1574.064307][T29205] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1574.064337][T29205] ? debug_object_assert_init+0x1c4/0x300 [ 1574.064363][T29205] ___sys_sendmsg+0x190/0x1e0 [ 1574.064383][T29205] ? __pfx____sys_sendmsg+0x10/0x10 [ 1574.064408][T29205] ? rcu_is_watching+0x12/0xc0 [ 1574.064444][T29205] __sys_sendmsg+0x160/0x210 [ 1574.064469][T29205] ? __pfx___sys_sendmsg+0x10/0x10 [ 1574.064496][T29205] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1574.064523][T29205] ? rcu_is_watching+0x12/0xc0 [ 1574.064550][T29205] do_syscall_64+0x115/0x870 [ 1574.064571][T29205] ? clear_bhb_loop+0x40/0x90 [ 1574.064594][T29205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.064615][T29205] RIP: 0033:0x7f4c2599ce59 [ 1574.064635][T29205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.064655][T29205] RSP: 002b:00007f4c26810028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.064676][T29205] RAX: ffffffffffffffda RBX: 00007f4c25c15fa0 RCX: 00007f4c2599ce59 [ 1574.064690][T29205] RDX: 0000000020041040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1574.064703][T29205] RBP: 00007f4c26810090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.064716][T29205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.064728][T29205] R13: 00007f4c25c16038 R14: 00007f4c25c15fa0 R15: 00007ffeb21219c8 [ 1574.064749][T29205] [ 1574.473486][T21785] usb 4-1: Product: syz [ 1574.478759][T29207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1574.491216][T21785] usb 4-1: Manufacturer: syz [ 1574.496315][T21785] usb 4-1: SerialNumber: syz [ 1574.498721][T29207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1574.534223][T29204] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5795'. [ 1574.564006][T29210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5797'. [ 1574.670692][T29214] overlayfs: failed to clone upperpath [ 1574.749390][T21785] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1574.820730][ T803] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1574.971194][ T803] usb 6-1: Using ep0 maxpacket: 16 [ 1574.977951][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.991604][ T803] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1575.005428][ T803] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1575.015126][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.025034][ T803] usb 6-1: config 0 descriptor?? [ 1575.186432][T29220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.196246][T29220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.963400][T29229] overlayfs: failed to clone upperpath [ 1576.002061][T16696] usb 4-1: USB disconnect, device number 92 [ 1576.021488][T16696] usblp0: removed [ 1576.177687][T29237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.188462][T29237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.553070][T22020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.662316][T22020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.537490][ T803] usbhid 6-1:0.0: can't add hid device: -71 [ 1577.554943][ T803] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1577.585986][ T803] usb 6-1: USB disconnect, device number 20 [ 1578.666131][T29281] 9p: Bad value for 'wfdno' [ 1578.846993][T29283] netlink: 'syz.3.5820': attribute type 10 has an invalid length. [ 1578.854973][T29283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5820'. [ 1580.140474][T29317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5828'. [ 1581.189962][T29336] SELinux: failed to load policy [ 1583.005801][T29390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.015881][T29390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.595283][T29398] 9p: Bad value for 'wfdno' [ 1583.605734][T29398] netlink: 'syz.1.5849': attribute type 10 has an invalid length. [ 1583.614611][T29398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1583.879300][T29405] xt_policy: output policy not valid in PREROUTING and INPUT [ 1584.584879][T29411] fuse: fd is not a fuse device [ 1585.114172][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1585.114195][ T30] audit: type=1400 audit(2000000245.993:1909): avc: denied { getopt } for pid=29415 comm="syz.1.5855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1585.911935][T29385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1586.123301][ T30] audit: type=1400 audit(2000000247.003:1910): avc: denied { write } for pid=29431 comm="syz.0.5863" lport=54240 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1586.347949][T29437] xt_policy: output policy not valid in PREROUTING and INPUT [ 1587.128663][T29450] fuse: fd is not a fuse device [ 1587.289634][ T5817] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1587.384088][T29467] 9p: Bad value for 'wfdno' [ 1587.394410][T29467] netlink: 'syz.1.5873': attribute type 10 has an invalid length. [ 1587.699326][T29467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5873'. [ 1587.713706][T22012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.733140][T22012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.790798][T29471] 9p: Bad value for 'wfdno' [ 1587.802039][ T5817] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1587.821272][ T5817] usb 4-1: config 1 has no interface number 0 [ 1587.827559][ T5817] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1587.840806][T29471] netlink: 'syz.1.5874': attribute type 10 has an invalid length. [ 1587.848715][T29471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5874'. [ 1587.867388][ T5817] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1587.877978][ T5817] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1587.899618][ T5817] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1587.924086][ T5817] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1587.933906][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.942528][ T5817] usb 4-1: Product: syz [ 1587.946836][ T5817] usb 4-1: Manufacturer: syz [ 1587.951552][ T5817] usb 4-1: SerialNumber: syz [ 1587.958113][T29442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1587.977641][T29475] overlayfs: failed to clone upperpath [ 1588.174952][T29442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1588.281774][ T5817] usb 4-1: No status endpoint found [ 1588.454142][ T30] audit: type=1326 audit(2000000249.333:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.0.5872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1588.508731][ T803] usb 4-1: USB disconnect, device number 93 [ 1588.537389][ T30] audit: type=1326 audit(2000000249.333:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.0.5872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1588.636885][ T30] audit: type=1326 audit(2000000249.513:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.0.5872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1588.716769][ T30] audit: type=1326 audit(2000000249.513:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.0.5872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1588.783873][ T30] audit: type=1326 audit(2000000249.523:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.0.5872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1588.889337][ T30] audit: type=1326 audit(2000000249.523:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.0.5872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1588.958913][ T30] audit: type=1326 audit(2000000249.523:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.0.5872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1589.055818][ T30] audit: type=1326 audit(2000000249.523:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.0.5872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1590.441907][ T5817] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1590.453979][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1590.453996][ T30] audit: type=1326 audit(2000000251.334:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29481 comm="syz.5.5878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd46659ce59 code=0x7ffc0000 [ 1591.081225][ T5817] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1591.096084][ T5817] usb 4-1: config 1 has no interface number 0 [ 1591.122430][ T5817] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1591.135144][T29532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5892'. [ 1591.153691][ T5817] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1591.163806][T29532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.175223][T29532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.183462][ T5817] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1591.204050][ T5817] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1591.303158][ T5817] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1591.321186][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.329528][ T5817] usb 4-1: Product: syz [ 1591.337487][ T5817] usb 4-1: Manufacturer: syz [ 1591.342459][ T5817] usb 4-1: SerialNumber: syz [ 1591.411629][T29521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1591.817669][T29519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1591.827444][ T5817] usb 4-1: No status endpoint found [ 1591.939336][ T3105] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1592.032463][ T5817] usb 4-1: USB disconnect, device number 94 [ 1592.100716][ T3105] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1592.113721][ T3105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.126774][ T3105] usb 6-1: config 0 descriptor?? [ 1592.142830][ T3105] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1592.196213][ T30] audit: type=1326 audit(2000000253.074:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.335573][ T30] audit: type=1326 audit(2000000253.104:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.367727][ T30] audit: type=1326 audit(2000000253.104:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.395923][ T30] audit: type=1326 audit(2000000253.104:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.423392][ T30] audit: type=1326 audit(2000000253.104:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.453762][ T30] audit: type=1326 audit(2000000253.104:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.482322][ T30] audit: type=1326 audit(2000000253.114:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.510447][ T30] audit: type=1326 audit(2000000253.114:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.540647][ T3105] gspca_spca508: reg_read err -71 [ 1592.547504][ T3105] gspca_spca508: reg_read err -71 [ 1592.552820][ T30] audit: type=1326 audit(2000000253.114:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.0.5889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1592.554639][ T3105] gspca_spca508: reg_read err -71 [ 1592.696695][ T3105] gspca_spca508: reg_read err -71 [ 1592.709296][ T3105] gspca_spca508: reg_read err -71 [ 1592.728507][ T3105] gspca_spca508: reg write: error -71 [ 1592.734893][ T3105] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1592.751300][ T3105] usb 6-1: USB disconnect, device number 21 [ 1592.816604][T29559] xt_policy: output policy not valid in PREROUTING and INPUT [ 1593.071266][T29558] 9p: Bad value for 'wfdno' [ 1593.209200][T29560] netlink: 'syz.3.5899': attribute type 10 has an invalid length. [ 1593.217133][T29560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5899'. [ 1594.759424][T16256] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1594.939620][T16256] usb 4-1: no configurations [ 1594.945033][T16256] usb 4-1: can't read configurations, error -22 [ 1595.110711][T16256] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1595.361231][T16256] usb 4-1: no configurations [ 1595.370497][T16256] usb 4-1: can't read configurations, error -22 [ 1595.436501][T16256] usb usb4-port1: attempt power cycle [ 1595.871016][T29587] 9p: Bad value for 'rfdno' [ 1595.999251][T16256] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1596.032525][T16256] usb 4-1: no configurations [ 1596.044042][T29606] sg_write: data in/out 762587812/4056 bytes for SCSI command 0x3d-- guessing data in; [ 1596.044042][T29606] program syz.6.5909 not setting count and/or reply_len properly [ 1596.061695][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1596.061712][ T30] audit: type=1400 audit(2000000256.944:2002): avc: denied { write } for pid=29574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.097093][T16256] usb 4-1: can't read configurations, error -22 [ 1596.188267][ T30] audit: type=1400 audit(2000000257.064:2003): avc: denied { write } for pid=29616 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.241481][T16256] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1596.279986][T16256] usb 4-1: no configurations [ 1596.284736][T16256] usb 4-1: can't read configurations, error -22 [ 1596.345377][T16256] usb usb4-port1: unable to enumerate USB device [ 1596.457139][T29630] overlayfs: failed to clone upperpath [ 1596.554426][T29633] xt_policy: output policy not valid in PREROUTING and INPUT [ 1596.838447][T29639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.848405][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1596.873811][T29639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.891355][ T30] audit: type=1400 audit(2000000257.774:2004): avc: denied { write } for pid=29621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.950691][ T30] audit: type=1400 audit(2000000257.834:2005): avc: denied { write } for pid=29644 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1597.186421][ T30] audit: type=1400 audit(2000000258.064:2006): avc: denied { accept } for pid=29646 comm="syz.3.5915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1597.650291][T29656] sg_write: data in/out 762587812/4056 bytes for SCSI command 0x3d-- guessing data in; [ 1597.650291][T29656] program syz.3.5918 not setting count and/or reply_len properly [ 1597.743215][T22012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.754975][T22012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.799032][ T3105] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1597.928983][ T3105] usb 6-1: device descriptor read/64, error -71 [ 1598.939235][ T3105] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1599.110540][ T3105] usb 6-1: device descriptor read/64, error -71 [ 1599.254024][ T3105] usb usb6-port1: attempt power cycle [ 1599.331561][T29677] nfs4: Unknown parameter 'no' [ 1599.618903][ T3105] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1599.762099][ T3105] usb 6-1: device descriptor read/8, error -71 [ 1599.811900][T29689] fuse: fd is not a fuse device [ 1599.885379][T29690] xt_policy: output policy not valid in PREROUTING and INPUT [ 1600.278941][ T3105] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1600.366316][T29697] xt_policy: output policy not valid in PREROUTING and INPUT [ 1600.563587][ T3105] usb 6-1: device not accepting address 25, error -71 [ 1600.617906][ T3105] usb usb6-port1: unable to enumerate USB device [ 1600.708598][T29701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.768616][T29701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1601.105120][T29704] 9p: Bad value for 'wfdno' [ 1601.210433][T29704] netlink: 'syz.0.5936': attribute type 10 has an invalid length. [ 1601.218258][T29704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1601.227812][T29704] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1601.762904][T29714] 9p: Bad value for 'wfdno' [ 1601.840145][ T30] audit: type=1400 audit(2000000262.714:2007): avc: denied { setopt } for pid=29712 comm="syz.0.5937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1601.878353][T29713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5937'. [ 1601.878791][T29721] netlink: 'syz.6.5938': attribute type 10 has an invalid length. [ 1601.895231][T29721] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5938'. [ 1601.995319][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.051236][T29725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1602.272980][T29725] netlink: 'syz.0.5940': attribute type 15 has an invalid length. [ 1602.309843][T29725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1602.332646][T22009] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1602.332711][T29725] netlink: 'syz.0.5940': attribute type 15 has an invalid length. [ 1602.344431][T22009] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1602.356265][T29725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1602.378036][T22009] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1602.479497][T22009] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1602.953220][T29743] fuse: fd is not a fuse device [ 1603.521826][T29760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1604.825744][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1605.132701][T29787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5955'. [ 1606.615221][ T30] audit: type=1326 audit(2000000267.494:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1606.758105][ T30] audit: type=1326 audit(2000000267.494:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1606.895973][ T30] audit: type=1326 audit(2000000267.494:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1607.100711][ T30] audit: type=1326 audit(2000000267.494:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1607.387490][T29818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5962'. [ 1607.621181][T29812] sg_write: data in/out 762587812/4056 bytes for SCSI command 0x3d-- guessing data in; [ 1607.621181][T29812] program syz.5.5961 not setting count and/or reply_len properly [ 1607.652749][ T30] audit: type=1326 audit(2000000267.494:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1607.679468][ T30] audit: type=1326 audit(2000000267.494:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1607.718661][ T30] audit: type=1326 audit(2000000267.494:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1607.745514][ T30] audit: type=1326 audit(2000000267.494:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1607.772821][ T30] audit: type=1326 audit(2000000267.494:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1607.799432][ T30] audit: type=1326 audit(2000000267.494:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1607.826144][ T30] audit: type=1326 audit(2000000267.494:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1608.049169][ T30] audit: type=1326 audit(2000000267.494:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29773 comm="syz.6.5953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1609.067356][T29838] qrtr: Invalid version 0 [ 1609.208968][T16696] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1609.386487][T29850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.454360][T29843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.510051][T16696] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1609.533292][T16696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1609.557864][T16696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1609.569588][T16696] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1609.584860][T16696] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1609.597026][T16696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.724383][T16696] usb 4-1: config 0 descriptor?? [ 1610.108366][T26157] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 1611.451519][T29872] xt_policy: output policy not valid in PREROUTING and INPUT [ 1611.703538][T16696] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1612.819129][T29891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1612.897914][T21785] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1613.070194][T21785] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1613.076353][ T803] usb 4-1: USB disconnect, device number 99 [ 1613.088372][T21785] usb 6-1: not running at top speed; connect to a high speed hub [ 1613.119081][T21785] usb 6-1: config 80 has an invalid interface number: 237 but max is 0 [ 1613.148705][T21785] usb 6-1: config 80 has no interface number 0 [ 1613.159111][T21785] usb 6-1: config 80 interface 237 has no altsetting 0 [ 1613.178327][T21785] usb 6-1: New USB device found, idVendor=05e0, idProduct=2008, bcdDevice=df.b1 [ 1613.196782][T21785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.212630][T21785] usb 6-1: Product: syz [ 1613.221794][T21785] usb 6-1: Manufacturer: syz [ 1613.231062][T21785] usb 6-1: SerialNumber: syz [ 1613.280693][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5985'. [ 1613.435384][T29905] overlayfs: failed to clone upperpath [ 1613.443734][T29905] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1613.466710][T29905] overlayfs: failed to clone lowerpath [ 1613.506302][T29889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5984'. [ 1613.517181][T29889] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1613.785729][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5990'. [ 1614.179667][T22009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.187584][T22009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.428993][T16696] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1614.608845][T16696] usb 4-1: Using ep0 maxpacket: 16 [ 1614.615799][T16696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.630665][T16696] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1614.644734][T16696] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1614.655229][T16696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.665777][T16696] usb 4-1: config 0 descriptor?? [ 1615.037084][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1615.037102][ T30] audit: type=1326 audit(2000000275.915:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.082916][ T30] audit: type=1326 audit(2000000275.955:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.139212][ T30] audit: type=1326 audit(2000000275.955:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.189642][T21785] usb 6-1: USB disconnect, device number 26 [ 1615.345300][ T30] audit: type=1326 audit(2000000275.955:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.380524][ T30] audit: type=1326 audit(2000000275.955:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.690456][ T30] audit: type=1326 audit(2000000275.955:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.717332][ T30] audit: type=1326 audit(2000000275.955:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.765671][ T30] audit: type=1326 audit(2000000275.965:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.821728][ T30] audit: type=1326 audit(2000000275.965:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1615.876104][ T30] audit: type=1326 audit(2000000275.965:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.6.5992" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1616.687726][T29949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.697887][T29949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.950617][T16696] usbhid 4-1:0.0: can't add hid device: -71 [ 1616.957245][T16696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1616.995738][T16696] usb 4-1: USB disconnect, device number 100 [ 1617.398746][T16696] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1617.563930][T16696] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1617.590076][T16696] usb 4-1: config 1 has no interface number 0 [ 1617.630374][T29961] 9p: Bad value for 'wfdno' [ 1617.634940][T16696] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1617.681012][T16696] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1617.714057][T16696] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1617.744397][T16696] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1617.835942][T29962] netlink: 'syz.6.6004': attribute type 10 has an invalid length. [ 1617.843948][T29962] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6004'. [ 1617.957574][T16696] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1618.150834][T16696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.186956][T16696] usb 4-1: Product: syz [ 1618.196319][T16696] usb 4-1: Manufacturer: syz [ 1618.206735][T16696] usb 4-1: SerialNumber: syz [ 1618.224517][T29956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1618.400762][T29969] 9p: Bad value for 'wfdno' [ 1618.508125][T29969] netlink: 'syz.1.6007': attribute type 10 has an invalid length. [ 1618.518734][T29956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1618.530691][T29969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1618.542545][T16696] usb 4-1: No status endpoint found [ 1618.656975][T29973] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6008'. [ 1618.870311][ T24] usb 4-1: USB disconnect, device number 101 [ 1619.422021][T29985] fuse: fd is not a fuse device [ 1619.430886][T29985] ip6t_srh: unknown srh match flags 4000 [ 1619.611497][T29994] fuse: fd is not a fuse device [ 1620.361300][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1620.678223][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1620.686019][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.697329][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1620.708184][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.719905][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.732679][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1620.743259][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.754161][ T24] usb 6-1: Product: syz [ 1620.758987][ T24] usb 6-1: Manufacturer: syz [ 1620.763730][ T24] usb 6-1: SerialNumber: syz [ 1620.832839][T30019] 9p: Bad value for 'wfdno' [ 1620.936701][T30020] netlink: 'syz.6.6022': attribute type 10 has an invalid length. [ 1620.944773][T30020] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6022'. [ 1621.038151][ T24] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1621.129278][ T24] cdc_ncm 6-1:1.0: bind() failure [ 1621.660486][T30026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.689570][T30026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.961706][T30032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.980974][T30032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1622.237120][T30037] FAULT_INJECTION: forcing a failure. [ 1622.237120][T30037] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.277157][T30037] CPU: 0 UID: 0 PID: 30037 Comm: syz.6.6027 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.277178][T30037] Tainted: [L]=SOFTLOCKUP [ 1622.277183][T30037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1622.277190][T30037] Call Trace: [ 1622.277194][T30037] [ 1622.277200][T30037] dump_stack_lvl+0x100/0x190 [ 1622.277217][T30037] should_fail_ex.cold+0x5/0xa [ 1622.277231][T30037] ? __kmalloc_cache_node_noprof+0x57/0x760 [ 1622.277245][T30037] should_failslab+0xc2/0x120 [ 1622.277257][T30037] __kmalloc_cache_node_noprof+0x7d/0x760 [ 1622.277268][T30037] ? __get_vm_area_node+0x101/0x330 [ 1622.277282][T30037] __get_vm_area_node+0x101/0x330 [ 1622.277295][T30037] __vmalloc_node_range_noprof+0x228/0x1630 [ 1622.277309][T30037] ? sel_write_load+0x206/0x560 [ 1622.277324][T30037] ? _kstrtoull+0x13c/0x1f0 [ 1622.277335][T30037] ? __pfx__kstrtoull+0x10/0x10 [ 1622.277345][T30037] ? putname+0xb1/0x110 [ 1622.277356][T30037] ? sel_write_load+0x206/0x560 [ 1622.277369][T30037] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1622.277382][T30037] ? rcu_is_watching+0x12/0xc0 [ 1622.277397][T30037] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1622.277409][T30037] ? lock_release+0x24d/0x310 [ 1622.277422][T30037] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1622.277436][T30037] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1622.277450][T30037] ? __pfx_avc_has_perm+0x10/0x10 [ 1622.277462][T30037] ? sel_write_load+0x206/0x560 [ 1622.277476][T30037] __vmalloc_node_noprof+0xad/0xf0 [ 1622.277491][T30037] ? sel_write_load+0x206/0x560 [ 1622.277516][T30037] sel_write_load+0x206/0x560 [ 1622.277539][T30037] ? __pfx_sel_write_load+0x10/0x10 [ 1622.277558][T30037] ? lock_acquire+0x301/0x370 [ 1622.277569][T30037] ? __pfx___might_resched+0x10/0x10 [ 1622.277582][T30037] vfs_write+0x2aa/0x1050 [ 1622.277596][T30037] ? __pfx_sel_write_load+0x10/0x10 [ 1622.277610][T30037] ? __pfx_vfs_write+0x10/0x10 [ 1622.277624][T30037] ? rcu_is_watching+0x12/0xc0 [ 1622.277639][T30037] ? __fget_files+0x21f/0x3d0 [ 1622.277656][T30037] ksys_write+0x12a/0x250 [ 1622.277669][T30037] ? __pfx_ksys_write+0x10/0x10 [ 1622.277683][T30037] ? rcu_is_watching+0x12/0xc0 [ 1622.277697][T30037] do_syscall_64+0x115/0x870 [ 1622.277709][T30037] ? clear_bhb_loop+0x40/0x90 [ 1622.277721][T30037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.277733][T30037] RIP: 0033:0x7f4c2599ce59 [ 1622.277743][T30037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.277754][T30037] RSP: 002b:00007f4c26810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1622.277765][T30037] RAX: ffffffffffffffda RBX: 00007f4c25c15fa0 RCX: 00007f4c2599ce59 [ 1622.277773][T30037] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000003 [ 1622.277780][T30037] RBP: 00007f4c26810090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.277786][T30037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.277793][T30037] R13: 00007f4c25c16038 R14: 00007f4c25c15fa0 R15: 00007ffeb21219c8 [ 1622.277804][T30037] [ 1622.340021][T30039] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1622.487843][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 1622.487861][ T30] audit: type=1326 audit(2000000283.225:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1622.626401][T30037] syz.6.6027: vmalloc error: size 65455, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1622.640606][ T30] audit: type=1326 audit(2000000283.225:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1622.640657][ T30] audit: type=1326 audit(2000000283.225:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1622.640697][ T30] audit: type=1326 audit(2000000283.225:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1622.640736][ T30] audit: type=1326 audit(2000000283.235:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1622.640777][ T30] audit: type=1326 audit(2000000283.235:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1622.647672][T30039] SELinux: failed to load policy [ 1622.804743][ T30] audit: type=1326 audit(2000000283.665:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1622.831708][T30037] CPU: 1 UID: 0 PID: 30037 Comm: syz.6.6027 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.831739][T30037] Tainted: [L]=SOFTLOCKUP [ 1622.831747][T30037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1622.831759][T30037] Call Trace: [ 1622.831765][T30037] [ 1622.831773][T30037] dump_stack_lvl+0x100/0x190 [ 1622.831801][T30037] warn_alloc.cold+0x94/0xa8 [ 1622.831824][T30037] ? __pfx_warn_alloc+0x10/0x10 [ 1622.831853][T30037] ? lock_release+0x24d/0x310 [ 1622.831879][T30037] ? __kasan_kmalloc+0x8a/0xb0 [ 1622.831900][T30037] ? __get_vm_area_node+0x208/0x330 [ 1622.831927][T30037] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1622.831954][T30037] ? _kstrtoull+0x13c/0x1f0 [ 1622.831971][T30037] ? __pfx__kstrtoull+0x10/0x10 [ 1622.831988][T30037] ? putname+0xb1/0x110 [ 1622.832008][T30037] ? sel_write_load+0x206/0x560 [ 1622.832036][T30037] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1622.832061][T30037] ? rcu_is_watching+0x12/0xc0 [ 1622.832087][T30037] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1622.832112][T30037] ? lock_release+0x24d/0x310 [ 1622.832135][T30037] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1622.832161][T30037] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1622.832189][T30037] ? __pfx_avc_has_perm+0x10/0x10 [ 1622.832213][T30037] ? sel_write_load+0x206/0x560 [ 1622.832239][T30037] __vmalloc_node_noprof+0xad/0xf0 [ 1622.832264][T30037] ? sel_write_load+0x206/0x560 [ 1622.832291][T30037] sel_write_load+0x206/0x560 [ 1622.832318][T30037] ? __pfx_sel_write_load+0x10/0x10 [ 1622.832344][T30037] ? lock_acquire+0x301/0x370 [ 1622.832365][T30037] ? __pfx___might_resched+0x10/0x10 [ 1622.832390][T30037] vfs_write+0x2aa/0x1050 [ 1622.832416][T30037] ? __pfx_sel_write_load+0x10/0x10 [ 1622.832443][T30037] ? __pfx_vfs_write+0x10/0x10 [ 1622.832476][T30037] ? rcu_is_watching+0x12/0xc0 [ 1622.832505][T30037] ? __fget_files+0x21f/0x3d0 [ 1622.832537][T30037] ksys_write+0x12a/0x250 [ 1622.832563][T30037] ? __pfx_ksys_write+0x10/0x10 [ 1622.832590][T30037] ? rcu_is_watching+0x12/0xc0 [ 1622.832617][T30037] do_syscall_64+0x115/0x870 [ 1622.832636][T30037] ? clear_bhb_loop+0x40/0x90 [ 1622.832659][T30037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.832681][T30037] RIP: 0033:0x7f4c2599ce59 [ 1622.832697][T30037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.832718][T30037] RSP: 002b:00007f4c26810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1622.832739][T30037] RAX: ffffffffffffffda RBX: 00007f4c25c15fa0 RCX: 00007f4c2599ce59 [ 1622.832755][T30037] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000003 [ 1622.832770][T30037] RBP: 00007f4c26810090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.832784][T30037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.832798][T30037] R13: 00007f4c25c16038 R14: 00007f4c25c15fa0 R15: 00007ffeb21219c8 [ 1622.832820][T30037] [ 1622.834817][T30037] Mem-Info: [ 1622.843318][ T30] audit: type=1326 audit(2000000283.665:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1623.190937][T30037] active_anon:42151 inactive_anon:128851 isolated_anon:0 [ 1623.190937][T30037] active_file:869 inactive_file:56154 isolated_file:0 [ 1623.190937][T30037] unevictable:768 dirty:165 writeback:0 [ 1623.190937][T30037] slab_reclaimable:9085 slab_unreclaimable:130246 [ 1623.190937][T30037] mapped:42491 shmem:158168 pagetables:4311 [ 1623.190937][T30037] sec_pagetables:3 bounce:0 [ 1623.190937][T30037] kernel_misc_reclaimable:0 [ 1623.190937][T30037] free:1083844 free_pcp:7683 free_cma:0 [ 1623.265377][T21785] usb 6-1: USB disconnect, device number 27 [ 1623.272196][T30037] Node 0 active_anon:168492kB inactive_anon:515404kB active_file:3476kB inactive_file:224412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169964kB dirty:660kB writeback:0kB shmem:631136kB shmem_thp:6144kB shmem_pmdmapped:6144kB anon_thp:0kB kernel_stack:15124kB pagetables:17016kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1623.325099][T30037] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1623.397584][T30037] Node 0 DMA free:13304kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1623.524187][T30037] lowmem_reserve[]: 0 2476 2477 2477 2477 [ 1623.538342][T30037] Node 0 DMA32 free:372248kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:188392kB inactive_anon:515404kB active_file:3476kB inactive_file:224412kB unevictable:1536kB writepending:660kB zspages:0kB present:3129332kB managed:2535940kB mlocked:0kB bounce:0kB free_pcp:18520kB local_pcp:17288kB free_cma:0kB [ 1623.688368][T30037] lowmem_reserve[]: 0 0 1 1 1 [ 1623.742030][ T30] audit: type=1326 audit(2000000283.665:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1624.045196][T30037] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1624.143042][T30037] lowmem_reserve[]: 0 0 0 0 0 [ 1624.155829][T30037] Node 1 Normal free:3942044kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1624.191179][T21785] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1624.203462][ T30] audit: type=1326 audit(2000000283.665:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30010 comm="syz.0.6020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x7ffc0000 [ 1624.230720][T30037] lowmem_reserve[]: 0 0 0 0 0 [ 1624.235549][T30037] Node 0 DMA: 2*4kB (U) 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 2*2048kB (M) 1*4096kB (U) = 13304kB [ 1624.291203][T30037] Node 0 DMA32: 1281*4kB (UE) 1249*8kB (UE) 1153*16kB (UME) 42*32kB (UME) 475*64kB (UME) 362*128kB (UME) 304*256kB (UME) 175*512kB (UM) 72*1024kB (UM) 1*2048kB (M) 2*4096kB (U) = 363036kB [ 1624.348550][T21785] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1624.356696][T21785] usb 6-1: config 1 has no interface number 0 [ 1624.367040][T30037] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1624.380748][T21785] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1624.475110][T21785] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1624.485066][T30037] Node 1 Normal: 145*4kB (UM) 111*8kB (UM) 100*16kB (UME) 103*32kB (UME) 105*64kB (UME) 77*128kB (UME) 57*256kB (UME) 50*512kB (UME) 24*1024kB (UME) 6*2048kB (UME) 938*4096kB (UM) = 3942044kB [ 1624.504417][T21785] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1624.516591][T21785] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1624.531801][T30037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1624.565757][T21785] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1624.575955][T30037] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1624.585928][T21785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.600627][T21785] usb 6-1: Product: syz [ 1624.606387][T30037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1624.626942][T21785] usb 6-1: Manufacturer: syz [ 1624.637800][T21785] usb 6-1: SerialNumber: syz [ 1624.643987][T30037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1624.659097][T30041] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1624.668980][T30037] 215185 total pagecache pages [ 1624.675617][T30037] 0 pages in swap cache [ 1624.692717][T30037] Free swap = 124996kB [ 1624.702822][T30037] Total swap = 124996kB [ 1624.733576][T30037] 2097051 pages RAM [ 1624.741862][T30037] 0 pages HighMem/MovableOnly [ 1624.746614][T30037] 431189 pages reserved [ 1624.753626][T30037] 0 pages cma reserved [ 1624.788276][T16696] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1624.958291][T16696] usb 4-1: Using ep0 maxpacket: 8 [ 1624.965035][T16696] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1624.974620][T16696] usb 4-1: config 0 has no interface number 0 [ 1624.984822][T16696] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1624.997042][T30041] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1625.004328][T16696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.014415][T16696] usb 4-1: Product: syz [ 1625.021356][T16696] usb 4-1: Manufacturer: syz [ 1625.026277][T16696] usb 4-1: SerialNumber: syz [ 1625.064357][T16696] usb 4-1: config 0 descriptor?? [ 1625.082861][T30072] xt_policy: output policy not valid in PREROUTING and INPUT [ 1625.553893][T21785] usb 6-1: No status endpoint found [ 1625.620315][T16696] usb 4-1: selecting invalid altsetting 2 [ 1625.628346][T16696] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1625.643178][T30069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.667007][T30069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.766597][T21785] usb 6-1: USB disconnect, device number 28 [ 1625.802889][T30076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.908910][T30076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1627.816787][T21785] usb 4-1: USB disconnect, device number 102 [ 1628.055149][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 1628.055167][ T30] audit: type=1400 audit(2000000288.926:2245): avc: denied { write } for pid=30088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.485584][ T30] audit: type=1400 audit(2000000289.356:2246): avc: denied { write } for pid=30126 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.585432][T30132] qrtr: Invalid version 0 [ 1628.853301][ T30] audit: type=1400 audit(2000000289.726:2247): avc: denied { write } for pid=30129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.312911][ T30] audit: type=1400 audit(2000000290.186:2248): avc: denied { write } for pid=30160 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.635295][T30170] xt_policy: output policy not valid in PREROUTING and INPUT [ 1630.396876][ T30] audit: type=1326 audit(2000000291.266:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30120 comm="syz.6.6053" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1630.527603][T30183] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6065'. [ 1630.775075][ T30] audit: type=1326 audit(2000000291.276:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30120 comm="syz.6.6053" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1630.802309][ T30] audit: type=1326 audit(2000000291.266:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30120 comm="syz.6.6053" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1630.878029][ T30] audit: type=1326 audit(2000000291.276:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30120 comm="syz.6.6053" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1630.946202][ T30] audit: type=1326 audit(2000000291.276:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30120 comm="syz.6.6053" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1630.999659][ T30] audit: type=1326 audit(2000000291.296:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30120 comm="syz.6.6053" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2599ce59 code=0x7ffc0000 [ 1631.677272][T21785] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1631.890980][T21785] usb 6-1: Using ep0 maxpacket: 16 [ 1631.948199][T21785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.043070][T21785] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1632.099667][T21785] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1632.168792][T21785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.208973][T30209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.225783][T30209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.244422][T21785] usb 6-1: config 0 descriptor?? [ 1632.425057][T30215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.636827][T30215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.692045][T30225] 9p: Bad value for 'wfdno' [ 1632.834013][T21785] microsoft 0003:045E:07DA.0023: item fetching failed at offset 31/34 [ 1632.853449][T30228] netlink: 'syz.3.6075': attribute type 10 has an invalid length. [ 1632.879776][T30228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6075'. [ 1632.881671][T21785] microsoft 0003:045E:07DA.0023: parse failed [ 1632.983127][T21785] microsoft 0003:045E:07DA.0023: probe with driver microsoft failed with error -22 [ 1633.470961][T30244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.490254][T30244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.532733][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1633.532749][ T30] audit: type=1400 audit(2000000294.406:2280): avc: denied { write } for pid=30229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1633.810328][T30252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6078'. [ 1634.022702][ T30] audit: type=1400 audit(2000000294.896:2281): avc: denied { write } for pid=30251 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.252208][T30259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1634.269375][T30256] netlink: 'syz.6.6080': attribute type 1 has an invalid length. [ 1634.320489][T30256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1634.349923][T30258] bond1: (slave dummy0): making interface the new active one [ 1634.358821][T30258] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1634.716733][T30265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1635.511416][ T5698] usb 6-1: USB disconnect, device number 29 [ 1635.530820][T30277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.555519][T30277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.453177][ T30] audit: type=1326 audit(2000000297.326:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.0.6090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x0 [ 1636.534988][T30292] netlink: 'syz.1.6092': attribute type 1 has an invalid length. [ 1636.560259][T30292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1636.611163][T30295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.647265][T30295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.815056][T30292] bond4: (slave dummy0): Releasing active interface [ 1636.824245][T30292] bond5: (slave dummy0): making interface the new active one [ 1636.832308][T30292] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1637.050541][ T30] audit: type=1326 audit(2000000297.926:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30267 comm="syz.3.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a879ce59 code=0x7ffc0000 [ 1637.102104][ T30] audit: type=1326 audit(2000000297.926:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30267 comm="syz.3.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a879ce59 code=0x7ffc0000 [ 1637.137506][ T30] audit: type=1326 audit(2000000297.926:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30267 comm="syz.3.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a879ce59 code=0x7ffc0000 [ 1637.164935][ T30] audit: type=1326 audit(2000000297.926:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30267 comm="syz.3.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5a879ce59 code=0x7ffc0000 [ 1637.208216][ T30] audit: type=1326 audit(2000000297.926:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30267 comm="syz.3.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a879ce59 code=0x7ffc0000 [ 1637.240883][ T30] audit: type=1326 audit(2000000297.926:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30267 comm="syz.3.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a879ce59 code=0x7ffc0000 [ 1637.267859][ T30] audit: type=1326 audit(2000000297.926:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30267 comm="syz.3.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a879ce59 code=0x7ffc0000 [ 1639.028023][T16696] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 1639.053030][T30348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1639.077339][T30348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1639.234522][T16696] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.276482][T16696] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1639.312653][T16696] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1639.324290][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1639.324307][ T30] audit: type=1326 audit(2000000300.186:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30323 comm="syz.0.6102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x0 [ 1639.382441][T16696] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1639.414438][T16696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.446437][T30330] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1639.470013][T16696] hub 6-1:1.0: bad descriptor, ignoring hub [ 1639.485938][T16696] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1639.503853][T16696] cdc_wdm 6-1:1.0: skipping garbage [ 1639.517114][T16696] cdc_wdm 6-1:1.0: skipping garbage [ 1639.529629][T16696] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1639.544172][T16696] cdc_wdm 6-1:1.0: Unknown control protocol [ 1640.049613][ C1] wdm_int_callback: 1673 callbacks suppressed [ 1640.049643][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.062336][ C1] wdm_int_callback: 1673 callbacks suppressed [ 1640.062366][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.077308][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.083929][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.091195][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.097809][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.107648][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.114270][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.121369][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.127974][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.135057][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.141660][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.148915][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.155529][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.162254][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.168832][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.175520][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.182095][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.188954][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1640.195529][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1640.341127][T30369] xt_policy: output policy not valid in PREROUTING and INPUT [ 1641.327496][T30379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.391091][T30379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.747407][T16256] usb 6-1: USB disconnect, device number 30 [ 1644.331483][T30417] sg_write: data in/out 762587812/4056 bytes for SCSI command 0x3d-- guessing data in; [ 1644.331483][T30417] program syz.3.6124 not setting count and/or reply_len properly [ 1644.429709][T30418] netlink: 'syz.6.6125': attribute type 1 has an invalid length. [ 1644.536988][T30418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1644.897988][T30420] bond1: (slave dummy0): Releasing active interface [ 1644.951632][T30420] bond2: (slave dummy0): making interface the new active one [ 1644.966039][T30420] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1645.764953][T30440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6132'. [ 1645.792355][T30444] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6133'. [ 1646.016828][ T5698] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1646.322680][ T5698] usb 4-1: Using ep0 maxpacket: 16 [ 1647.143189][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1647.165560][ T5698] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1647.166167][T30454] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1647.179390][ T5698] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1647.351347][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.505479][ T5698] usb 4-1: config 0 descriptor?? [ 1648.460462][T30474] qrtr: Invalid version 0 [ 1648.997868][T30478] SELinux: unknown common  [ 1649.008112][T30478] SELinux: invalid class [ 1649.017159][T30478] SELinux: failed to load policy [ 1649.698918][ T30] audit: type=1400 audit(2000000310.577:2354): avc: denied { bind } for pid=30487 comm="syz.6.6145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1649.887012][T30499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1649.946642][T30499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1650.131688][ T5698] usbhid 4-1:0.0: can't add hid device: -71 [ 1650.141543][ T5698] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1650.159543][ T5698] usb 4-1: USB disconnect, device number 103 [ 1650.352055][T30505] overlayfs: missing 'lowerdir' [ 1651.222994][T30516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.230730][T30516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.303121][T30516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.322194][T30516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.485943][T30524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.554212][T30524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.577237][ T30] audit: type=1326 audit(2000000312.447:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30525 comm="syz.0.6156" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc70dd9ce59 code=0x0 [ 1651.740794][T30516] tipc: Resetting bearer [ 1651.782753][T30516] ------------[ cut here ]------------ [ 1651.788301][T30516] !chanctx_conf [ 1651.788324][T30516] WARNING: net/mac80211/tx.c:6467 at ieee80211_tx_skb_tid+0x46a/0x550, CPU#1: syz.1.6153/30516 [ 1651.802191][T30516] Modules linked in: [ 1651.806118][T30516] CPU: 1 UID: 0 PID: 30516 Comm: syz.1.6153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.817143][T30516] Tainted: [L]=SOFTLOCKUP [ 1651.821503][T30516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1651.831599][T30516] RIP: 0010:ieee80211_tx_skb_tid+0x46a/0x550 [ 1651.837630][T30516] Code: fc ff ff e8 c8 04 63 f7 e9 8f fc ff ff 4c 89 e7 e8 eb 04 63 f7 e9 4e fd ff ff e8 b1 04 63 f7 e9 0b fe ff ff e8 47 94 f2 f6 90 <0f> 0b 90 e8 4e e7 7f 00 31 ff 89 c3 89 c6 e8 e3 8e f2 f6 85 db 75 [ 1651.857360][T30516] RSP: 0018:ffffc9000f8e69a8 EFLAGS: 00010246 [ 1651.863406][T30516] RAX: 0000000000080000 RBX: ffff888053270ec0 RCX: ffffc9000411a000 [ 1651.871408][T30516] RDX: 0000000000080000 RSI: ffffffff8b16cad9 RDI: ffff8880882a2540 [ 1651.879411][T30516] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1651.887391][T30516] R10: 0000000000000000 R11: ffffffff8279a184 R12: 0000000000000000 [ 1651.895353][T30516] R13: ffff8880991e2000 R14: 0000000000000007 R15: 0000000000000000 [ 1651.903368][T30516] FS: 00007f98e0da26c0(0000) GS:ffff888124418000(0000) knlGS:0000000000000000 [ 1651.912316][T30516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.918906][T30516] CR2: 0000200000000012 CR3: 0000000070daa000 CR4: 00000000003526f0 [ 1651.926903][T30516] Call Trace: [ 1651.930351][T30516] [ 1651.933360][T30516] mesh_plink_frame_tx.isra.0+0xdf1/0x10d0 [ 1651.939236][T30516] ? __pfx_mesh_plink_frame_tx.isra.0+0x10/0x10 [ 1651.945479][T30516] ? ieee80211s_update_metric+0x410/0x410 [ 1651.951228][T30516] mesh_plink_deactivate+0x271/0x340 [ 1651.956543][T30516] mesh_sta_cleanup+0x35/0x80 [ 1651.961212][T30516] __cleanup_single_sta+0x5c0/0x730 [ 1651.966440][T30516] __sta_info_destroy_part2+0x36a/0x500 [ 1651.971981][T30516] __sta_info_flush+0x4f6/0x720 [ 1651.976857][T30516] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1651.982930][T30516] ? __pfx___sta_info_flush+0x10/0x10 [ 1651.988319][T30516] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1651.993606][T30516] ? __pfx_ieee80211_stop+0x10/0x10 [ 1651.998841][T30516] ? __pfx_ieee80211_stop+0x10/0x10 [ 1652.004028][T30516] ieee80211_do_stop+0x281/0x29a0 [ 1652.009063][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.013826][T30516] ? trace_contention_end+0x126/0x160 [ 1652.019241][T30516] ? ieee80211_stop+0xc5/0x2f0 [ 1652.024000][T30516] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1652.029477][T30516] ? do_raw_spin_lock+0x128/0x260 [ 1652.034486][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.039257][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.044089][T30516] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1652.050176][T30516] ? __pfx_ieee80211_stop+0x10/0x10 [ 1652.055384][T30516] ieee80211_stop+0x165/0x2f0 [ 1652.060075][T30516] ? __pfx_ieee80211_stop+0x10/0x10 [ 1652.065272][T30516] __dev_close_many+0x312/0x710 [ 1652.070158][T30516] ? __pfx___dev_close_many+0x10/0x10 [ 1652.075545][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.080327][T30516] ? __dev_change_flags+0x236/0x850 [ 1652.085524][T30516] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1652.091633][T30516] __dev_change_flags+0x307/0x850 [ 1652.096675][T30516] ? __pfx___dev_change_flags+0x10/0x10 [ 1652.102230][T30516] ? netif_rx_mode_clean+0x17b/0x1e0 [ 1652.107525][T30516] ? netif_rx_mode_clean+0x17b/0x1e0 [ 1652.112793][T30516] ? __pfx_validate_linkmsg+0x10/0x10 [ 1652.118176][T30516] netif_change_flags+0x8d/0x160 [ 1652.123095][T30516] do_setlink.isra.0+0x1ac4/0x3e60 [ 1652.128221][T30516] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 1652.134105][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.138910][T30516] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 1652.144353][T30516] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1652.150431][T30516] ? finish_task_switch.isra.0+0x2c5/0x1010 [ 1652.156336][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.161106][T30516] ? trace_sched_exit_tp+0x120/0x160 [ 1652.166412][T30516] ? __schedule+0x126e/0x6730 [ 1652.171083][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.175865][T30516] ? __pfx___schedule+0x10/0x10 [ 1652.180735][T30516] ? __mutex_lock+0x26d/0x1bd0 [ 1652.185485][T30516] ? rtnl_newlink+0x8bb/0x2380 [ 1652.190286][T30516] ? preempt_schedule_irq+0x7b/0x90 [ 1652.195470][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.200240][T30516] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1652.206327][T30516] ? irqentry_exit+0x24d/0xa00 [ 1652.211076][T30516] rtnl_newlink+0x1b7e/0x2380 [ 1652.215759][T30516] ? __pfx_rtnl_newlink+0x10/0x10 [ 1652.220791][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.225543][T30516] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1652.230958][T30516] ? lock_release+0x24d/0x310 [ 1652.235633][T30516] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1652.241015][T30516] ? cred_has_capability.isra.0+0x186/0x300 [ 1652.246910][T30516] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1652.253145][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.257932][T30516] ? cap_capable+0x107/0x430 [ 1652.262525][T30516] ? __dev_queue_xmit+0x9f0/0x4940 [ 1652.267669][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.272434][T30516] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1652.277549][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.282299][T30516] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1652.287438][T30516] ? lock_release+0x24d/0x310 [ 1652.292099][T30516] ? __pfx_rtnl_newlink+0x10/0x10 [ 1652.297126][T30516] rtnetlink_rcv_msg+0x95e/0xe90 [ 1652.302048][T30516] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1652.307512][T30516] ? ref_tracker_free+0x37e/0x6c0 [ 1652.312529][T30516] netlink_rcv_skb+0x159/0x420 [ 1652.317295][T30516] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1652.322774][T30516] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1652.328064][T30516] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1652.333345][T30516] netlink_unicast+0x585/0x850 [ 1652.338113][T30516] ? __pfx_netlink_unicast+0x10/0x10 [ 1652.343380][T30516] netlink_sendmsg+0x8b0/0xda0 [ 1652.348156][T30516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1652.353424][T30516] ____sys_sendmsg+0xa4d/0xbe0 [ 1652.358195][T30516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1652.363478][T30516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1652.368775][T30516] ___sys_sendmsg+0x190/0x1e0 [ 1652.373430][T30516] ? __pfx____sys_sendmsg+0x10/0x10 [ 1652.378630][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.383383][T30516] __sys_sendmsg+0x160/0x210 [ 1652.387980][T30516] ? __pfx___sys_sendmsg+0x10/0x10 [ 1652.393093][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.397865][T30516] do_syscall_64+0x115/0x870 [ 1652.402432][T30516] ? clear_bhb_loop+0x40/0x90 [ 1652.407107][T30516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.412976][T30516] RIP: 0033:0x7f98dff9ce59 [ 1652.417389][T30516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1652.437013][T30516] RSP: 002b:00007f98e0da2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1652.445405][T30516] RAX: ffffffffffffffda RBX: 00007f98e0215fa0 RCX: 00007f98dff9ce59 [ 1652.453383][T30516] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1652.461361][T30516] RBP: 00007f98e0032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1652.469338][T30516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1652.477303][T30516] R13: 00007f98e0216038 R14: 00007f98e0215fa0 R15: 00007fff7c216858 [ 1652.485264][T30516] [ 1652.488303][T30516] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1652.495560][T30516] CPU: 1 UID: 0 PID: 30516 Comm: syz.1.6153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1652.506471][T30516] Tainted: [L]=SOFTLOCKUP [ 1652.510768][T30516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1652.520796][T30516] Call Trace: [ 1652.524052][T30516] [ 1652.526958][T30516] dump_stack_lvl+0x100/0x190 [ 1652.531614][T30516] vpanic+0x552/0x970 [ 1652.535571][T30516] ? __pfx_vpanic+0x10/0x10 [ 1652.540046][T30516] ? lock_release+0x24d/0x310 [ 1652.544701][T30516] panic+0xd1/0xe0 [ 1652.548405][T30516] ? __pfx_panic+0x10/0x10 [ 1652.552824][T30516] check_panic_on_warn.cold+0x19/0x34 [ 1652.558176][T30516] ? ieee80211_tx_skb_tid+0x46a/0x550 [ 1652.563527][T30516] __warn.cold+0x191/0x318 [ 1652.567920][T30516] __report_bug+0x30f/0x440 [ 1652.572398][T30516] ? ieee80211_tx_skb_tid+0x46a/0x550 [ 1652.577750][T30516] ? __pfx___report_bug+0x10/0x10 [ 1652.582747][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.587488][T30516] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1652.592925][T30516] ? __kasan_slab_alloc+0x89/0x90 [ 1652.597961][T30516] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 1652.604011][T30516] ? ieee80211_tx_skb_tid+0x46a/0x550 [ 1652.609361][T30516] report_bug+0xb2/0x220 [ 1652.613579][T30516] ? ieee80211_tx_skb_tid+0x46a/0x550 [ 1652.618939][T30516] handle_bug+0x16a/0x2a0 [ 1652.623251][T30516] exc_invalid_op+0x17/0x50 [ 1652.627747][T30516] asm_exc_invalid_op+0x1a/0x20 [ 1652.632571][T30516] RIP: 0010:ieee80211_tx_skb_tid+0x46a/0x550 [ 1652.638529][T30516] Code: fc ff ff e8 c8 04 63 f7 e9 8f fc ff ff 4c 89 e7 e8 eb 04 63 f7 e9 4e fd ff ff e8 b1 04 63 f7 e9 0b fe ff ff e8 47 94 f2 f6 90 <0f> 0b 90 e8 4e e7 7f 00 31 ff 89 c3 89 c6 e8 e3 8e f2 f6 85 db 75 [ 1652.658115][T30516] RSP: 0018:ffffc9000f8e69a8 EFLAGS: 00010246 [ 1652.664165][T30516] RAX: 0000000000080000 RBX: ffff888053270ec0 RCX: ffffc9000411a000 [ 1652.672117][T30516] RDX: 0000000000080000 RSI: ffffffff8b16cad9 RDI: ffff8880882a2540 [ 1652.680065][T30516] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1652.688015][T30516] R10: 0000000000000000 R11: ffffffff8279a184 R12: 0000000000000000 [ 1652.695966][T30516] R13: ffff8880991e2000 R14: 0000000000000007 R15: 0000000000000000 [ 1652.703935][T30516] ? kasan_save_track+0x14/0x30 [ 1652.708768][T30516] ? ieee80211_tx_skb_tid+0x469/0x550 [ 1652.714117][T30516] ? ieee80211_tx_skb_tid+0x469/0x550 [ 1652.719466][T30516] mesh_plink_frame_tx.isra.0+0xdf1/0x10d0 [ 1652.725246][T30516] ? __pfx_mesh_plink_frame_tx.isra.0+0x10/0x10 [ 1652.731470][T30516] ? ieee80211s_update_metric+0x410/0x410 [ 1652.737165][T30516] mesh_plink_deactivate+0x271/0x340 [ 1652.742425][T30516] mesh_sta_cleanup+0x35/0x80 [ 1652.747082][T30516] __cleanup_single_sta+0x5c0/0x730 [ 1652.752264][T30516] __sta_info_destroy_part2+0x36a/0x500 [ 1652.757783][T30516] __sta_info_flush+0x4f6/0x720 [ 1652.762604][T30516] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1652.768652][T30516] ? __pfx___sta_info_flush+0x10/0x10 [ 1652.773994][T30516] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1652.779253][T30516] ? __pfx_ieee80211_stop+0x10/0x10 [ 1652.784430][T30516] ? __pfx_ieee80211_stop+0x10/0x10 [ 1652.789693][T30516] ieee80211_do_stop+0x281/0x29a0 [ 1652.794695][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.799437][T30516] ? trace_contention_end+0x126/0x160 [ 1652.804785][T30516] ? ieee80211_stop+0xc5/0x2f0 [ 1652.809545][T30516] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1652.814982][T30516] ? do_raw_spin_lock+0x128/0x260 [ 1652.819984][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.824735][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.829473][T30516] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1652.835517][T30516] ? __pfx_ieee80211_stop+0x10/0x10 [ 1652.840696][T30516] ieee80211_stop+0x165/0x2f0 [ 1652.845351][T30516] ? __pfx_ieee80211_stop+0x10/0x10 [ 1652.850531][T30516] __dev_close_many+0x312/0x710 [ 1652.855366][T30516] ? __pfx___dev_close_many+0x10/0x10 [ 1652.860721][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.865479][T30516] ? __dev_change_flags+0x236/0x850 [ 1652.870651][T30516] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1652.876719][T30516] __dev_change_flags+0x307/0x850 [ 1652.881722][T30516] ? __pfx___dev_change_flags+0x10/0x10 [ 1652.887240][T30516] ? netif_rx_mode_clean+0x17b/0x1e0 [ 1652.892502][T30516] ? netif_rx_mode_clean+0x17b/0x1e0 [ 1652.897779][T30516] ? __pfx_validate_linkmsg+0x10/0x10 [ 1652.903132][T30516] netif_change_flags+0x8d/0x160 [ 1652.908046][T30516] do_setlink.isra.0+0x1ac4/0x3e60 [ 1652.913136][T30516] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 1652.919015][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.923768][T30516] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 1652.929213][T30516] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1652.935266][T30516] ? finish_task_switch.isra.0+0x2c5/0x1010 [ 1652.941144][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.945894][T30516] ? trace_sched_exit_tp+0x120/0x160 [ 1652.951204][T30516] ? __schedule+0x126e/0x6730 [ 1652.955870][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.960622][T30516] ? __pfx___schedule+0x10/0x10 [ 1652.965451][T30516] ? __mutex_lock+0x26d/0x1bd0 [ 1652.970186][T30516] ? rtnl_newlink+0x8bb/0x2380 [ 1652.974928][T30516] ? preempt_schedule_irq+0x7b/0x90 [ 1652.980114][T30516] ? rcu_is_watching+0x12/0xc0 [ 1652.984873][T30516] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1652.990929][T30516] ? irqentry_exit+0x24d/0xa00 [ 1652.995677][T30516] rtnl_newlink+0x1b7e/0x2380 [ 1653.000343][T30516] ? __pfx_rtnl_newlink+0x10/0x10 [ 1653.005354][T30516] ? rcu_is_watching+0x12/0xc0 [ 1653.010097][T30516] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1653.015445][T30516] ? lock_release+0x24d/0x310 [ 1653.020110][T30516] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1653.025462][T30516] ? cred_has_capability.isra.0+0x186/0x300 [ 1653.031777][T30516] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1653.038023][T30516] ? rcu_is_watching+0x12/0xc0 [ 1653.042782][T30516] ? cap_capable+0x107/0x430 [ 1653.047368][T30516] ? __dev_queue_xmit+0x9f0/0x4940 [ 1653.052478][T30516] ? rcu_is_watching+0x12/0xc0 [ 1653.057225][T30516] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1653.062318][T30516] ? rcu_is_watching+0x12/0xc0 [ 1653.067069][T30516] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1653.072160][T30516] ? lock_release+0x24d/0x310 [ 1653.076815][T30516] ? __pfx_rtnl_newlink+0x10/0x10 [ 1653.081818][T30516] rtnetlink_rcv_msg+0x95e/0xe90 [ 1653.086735][T30516] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1653.092174][T30516] ? ref_tracker_free+0x37e/0x6c0 [ 1653.097180][T30516] netlink_rcv_skb+0x159/0x420 [ 1653.101921][T30516] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1653.107363][T30516] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1653.112642][T30516] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1653.117908][T30516] netlink_unicast+0x585/0x850 [ 1653.122649][T30516] ? __pfx_netlink_unicast+0x10/0x10 [ 1653.127927][T30516] netlink_sendmsg+0x8b0/0xda0 [ 1653.132667][T30516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1653.137928][T30516] ____sys_sendmsg+0xa4d/0xbe0 [ 1653.142674][T30516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1653.147947][T30516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1653.153257][T30516] ___sys_sendmsg+0x190/0x1e0 [ 1653.157916][T30516] ? __pfx____sys_sendmsg+0x10/0x10 [ 1653.163110][T30516] ? rcu_is_watching+0x12/0xc0 [ 1653.167865][T30516] __sys_sendmsg+0x160/0x210 [ 1653.172444][T30516] ? __pfx___sys_sendmsg+0x10/0x10 [ 1653.177537][T30516] ? rcu_is_watching+0x12/0xc0 [ 1653.182280][T30516] do_syscall_64+0x115/0x870 [ 1653.186846][T30516] ? clear_bhb_loop+0x40/0x90 [ 1653.191502][T30516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.197389][T30516] RIP: 0033:0x7f98dff9ce59 [ 1653.201784][T30516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.221999][T30516] RSP: 002b:00007f98e0da2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1653.230416][T30516] RAX: ffffffffffffffda RBX: 00007f98e0215fa0 RCX: 00007f98dff9ce59 [ 1653.238381][T30516] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1653.246332][T30516] RBP: 00007f98e0032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1653.254283][T30516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1653.262234][T30516] R13: 00007f98e0216038 R14: 00007f98e0215fa0 R15: 00007fff7c216858 [ 1653.270190][T30516] [ 1653.273437][T30516] Kernel Offset: disabled [ 1653.277749][T30516] Rebooting in 86400 seconds..