last executing test programs: 15m35.887581004s ago: executing program 0 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='rescan', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000c00)='serio1', 0x6) 15m35.010301702s ago: executing program 0 (id=613): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) (fail_nth: 5) 15m34.449994748s ago: executing program 0 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03c9"], 0x7) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000811601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c000b0000ed0600000a0000010a0000020050005000f0020100000811601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='20000000 20080000 500 32000\x00', 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001810ba000200000000000000000000020604000002000493fc49d06fbef7f432949e2260a2f11db495bf9e2ebda330dd23adaf048336c8a2722be52167cfe58523f9a63cd6410e11eb"], &(0x7f0000000080)=""/236, 0x32, 0xec, 0x1}, 0x20) lstat(&(0x7f0000000240)='./dev/mapper/control\x00', &(0x7f0000000440)) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) 15m33.78272514s ago: executing program 0 (id=618): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2fe5, 0x4000000000, &(0x7f0000006680)) (async, rerun: 32) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 15m32.778869096s ago: executing program 0 (id=625): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='maxtcpc 0x50', 0xc) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000, 0x9, &(0x7f0000006680)) times(0xfffffffffffffffc) write(r2, &(0x7f0000000280)='0x50', 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x2d, 0x2, 0x0) setsockopt(r3, 0x11d, 0x1, 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7000002, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5}) syz_emit_ethernet(0x5bd, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x500, @esp={{0x17, 0x4, 0x0, 0x33, 0x5af, 0x64, 0x0, 0x2, 0x32, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xa5, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x6}]}, @timestamp={0x44, 0xc, 0x5e, 0x0, 0x5, [0xffffffff, 0x5]}, @timestamp_addr={0x44, 0x24, 0x18, 0x1, 0x6, [{@rand_addr=0x64010101, 0x1000}, {@rand_addr=0x10, 0x200008}, {@empty, 0x7}, {@private=0xa010100, 0x6}]}, @noop, @rr={0x7, 0xb, 0xb8, [@dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x13}]}]}}, {0x0, 0x1b, @basic={0x0, 0x0, 0x0, [@ipv6=@udp={0x4, 0x6, "7d258a", 0x158, 0x11, 0x1, @private0, @private1, {[@dstopts={0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xbd}]}, @dstopts={0x1d, 0xc, '\x00', [@hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @jumbo, @calipso={0x7, 0x38, {0x2, 0xc, 0x3, 0x3, [0x6, 0x8, 0x2, 0xb, 0x7ff, 0x8001]}}, @jumbo={0xc2, 0x4, 0x6}]}], {0x4e22, 0x4e24, 0xd8, 0x0, @opaque="784b38a066cdfc3bfea75a8614804a977c481d390ed597ec6401b49316ee3d67fb3a0bd477b49c93e26468de2beb16fb369f447487a57ae76d9d733e31769edbc85597ea62550d251f5d5ac69a50754b9b4fff5e12c9f71b8738088b0dd52cfb0d0dea6fdce9f503d1f9ab0a39996668c9105a8d2245338ef7009620e0173eb6f22d345bbe8bd3135cc8bd691008d12b2ecbd1bf804a91c60bb57478d0e777a544d14d33df46399cf1ffc31ddfaa8b20372fd80af1c0103fa82375665babdde390bced54e6c75131061f6ddceb5d099f"}}}, @ipv4=@icmp={{0x39, 0x4, 0x0, 0x1f, 0x106, 0x67, 0x0, 0x8, 0x1, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x1f, 0x77, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010102, @local, @empty, @remote]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xa1, 0x0, 0x6, [0x0, 0x5, 0x800, 0xb8]}, @lsrr={0x83, 0x2b, 0x45, [@broadcast, @remote, @multicast1, @multicast1, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, @empty, @broadcast]}, @rr={0x7, 0x1b, 0xd3, [@local, @loopback, @empty, @private=0xa010102, @local, @loopback]}, @timestamp={0x44, 0x28, 0x45, 0x0, 0x8, [0xba, 0x8000, 0x0, 0x63, 0x9, 0xfffffaef, 0x10001, 0x9, 0xffffffff]}, @rr={0x7, 0x17, 0x22, [@dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x11, "1d78b57e82fbc84e27ad44472ad5ed"}]}}, @redirect={0x5, 0x0, 0x0, @empty, {0x6, 0x4, 0x1, 0x3, 0xff00, 0x66, 0x3, 0x8, 0x88, 0x0, @multicast2, @remote, {[@noop, @end, @noop]}}, "0600"}}, @ipv6=@icmpv6={0xb, 0x6, "53fa2c", 0x41, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, {[@dstopts={0x3c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfffff023}]}, @dstopts={0xc, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @echo_request={0x80, 0x0, 0x0, 0x0, 0xb, "1c353515b1681235c1"}}}, @ipv4=@generic={{0x2b, 0x4, 0x1, 0x2, 0x199, 0x65, 0x0, 0xaa, 0x5e, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x34, 0x2c, 0x3, 0x0, [{@empty, 0x80000000}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0xfffffff7}, {@private=0xa010100, 0xf}, {@multicast2, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0x60, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x2}, {@remote, 0x6f}]}, @cipso={0x86, 0x45, 0x3, [{0x2, 0xa, "6f9180b10941c3d0"}, {0x7, 0xa, "a0b45d531b95162b"}, {0x0, 0xf, "e23e1be07a82f6bf29596ab276"}, {0x7, 0x7, "b21f026013"}, {0x6, 0x6, "d40bb74d"}, {0x1, 0xf, "d4eaf3489bb854d0b45ea56af7"}]}]}}, "d3143a60999acf7f9ae3cce7a6b0848d48faabb482ee0a326019d2ef2046324a2869ea54c324d0dc33cf8934ef48f46e511e4645a66dfc8ceca822639501c9c1fb64f8766ba5b7d7fb4cfb4b780442ac28f2828db8273d29792bd1a2cfdc0733a9db6eeab130be87b6997f3ea52b7eff80adc82faef0e95478e2f1b4f42552381a45d2f59260dea49cc50cfb3f2d6a0247d4d7a62f4d79a15762504e97b517080ddb6bd2fd066687cf4caa43b66bb039539d61dc1f56f40f20ff4aeed5038b1b83e6c2fb619c97bed0c87acbd11399265e88db37aea058b82bd0036d6e42ec2651349ebc6c9bdc85441eab87a9"}, @runt="6c77fa0bde437837", @ipv6=@tipc_packet={0xa, 0x6, "e4951b", 0x8d, 0x6, 0x1, @local, @local, {[@dstopts={0x32, 0xa, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x28, {0x3, 0x8, 0xe, 0x4, [0x6, 0x2, 0x2, 0x1]}}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x1, 0x0, 0xa, 0x2, 0x2, 0x101, 0x0, 0x2, 0x9, 0x4, 0x2, 0x200, 0x6, 0x1, 0x4e20, 0x4e22}, 0x2, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}]}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) memfd_secret(0x80000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fcntl$setpipe(r4, 0x407, 0x40000) fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 15m30.351404779s ago: executing program 0 (id=634): pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x74, r3, 0x104, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x74}, 0x1, 0x0, 0x0, 0x4002}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dlmfs_mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dlmfs_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc/net/afs/cells\x00', &(0x7f0000000040)='xfs\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecc6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x8f, &(0x7f0000000540)=""/143, 0x40f00, 0x11, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, r0, r0, 0x1, r0, r4, r0, r1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0x0, 0x21, 0x1f, &(0x7f0000000780)="8ddcb87675b0bb9bd4e855235314c61cee852b2fdb28701c8f76ead4302d73f9db", &(0x7f00000007c0)=""/31, 0xfffffffc, 0x0, 0x61, 0x9d, &(0x7f0000000880)="196a35c696f4c8c35b1ac581041374be9d5fb9e110a1961352cd4a0d3c0b9ec8097972f728db4fbdfe8d448e0edbf66e33af52abc530ba95dd374971f8bc2dcf99a703e68ac47fd9aa6b1e16a16e2c3c5055368b3effdb66f5e2d9d30c654644be", &(0x7f0000000900)="9b025c4acbb85a8f15f3bb1063cd83082dd5ab4245dd98d5a3c6fa3a43d40a32d5f472831ed7856c15890f207b6ceed9f26f015bef8946be1fc05f9f51e0129ce86e72f2166d9338cbeca4efc4aec77437202c26ca0c0b067f04fbfd2db4782954e8ff174ceea75b9776a2d6622b8410d06d25e163f3b8ace67a070bbf6a3e0b40cf017cadda9ea2f585b5cc547d8900b183defa47f25a4b770d758ab9", 0x3, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0x0, 0x21, 0x1f, &(0x7f0000000780)="8ddcb87675b0bb9bd4e855235314c61cee852b2fdb28701c8f76ead4302d73f9db", &(0x7f00000007c0)=""/31, 0xfffffffc, 0x0, 0x61, 0x9d, &(0x7f0000000880)="196a35c696f4c8c35b1ac581041374be9d5fb9e110a1961352cd4a0d3c0b9ec8097972f728db4fbdfe8d448e0edbf66e33af52abc530ba95dd374971f8bc2dcf99a703e68ac47fd9aa6b1e16a16e2c3c5055368b3effdb66f5e2d9d30c654644be", &(0x7f0000000900)="9b025c4acbb85a8f15f3bb1063cd83082dd5ab4245dd98d5a3c6fa3a43d40a32d5f472831ed7856c15890f207b6ceed9f26f015bef8946be1fc05f9f51e0129ce86e72f2166d9338cbeca4efc4aec77437202c26ca0c0b067f04fbfd2db4782954e8ff174ceea75b9776a2d6622b8410d06d25e163f3b8ace67a070bbf6a3e0b40cf017cadda9ea2f585b5cc547d8900b183defa47f25a4b770d758ab9", 0x3, 0x0, 0x4}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x41) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) write(r4, &(0x7f0000000640)="6164642073797a30203a3a8601", 0xd) mount(0x0, &(0x7f0000000800)='./dlmfs_mnt\x00', &(0x7f0000000840)='ocfs2_dlmfs\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000340)='./bus\x00', r0, 0x4000, r4}, 0x18) umount2(&(0x7f0000000800)='./dlmfs_mnt\x00', 0x0) 15m30.165434269s ago: executing program 32 (id=634): pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x74, r3, 0x104, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x74}, 0x1, 0x0, 0x0, 0x4002}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dlmfs_mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dlmfs_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc/net/afs/cells\x00', &(0x7f0000000040)='xfs\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecc6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x8f, &(0x7f0000000540)=""/143, 0x40f00, 0x11, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, r0, r0, 0x1, r0, r4, r0, r1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0x0, 0x21, 0x1f, &(0x7f0000000780)="8ddcb87675b0bb9bd4e855235314c61cee852b2fdb28701c8f76ead4302d73f9db", &(0x7f00000007c0)=""/31, 0xfffffffc, 0x0, 0x61, 0x9d, &(0x7f0000000880)="196a35c696f4c8c35b1ac581041374be9d5fb9e110a1961352cd4a0d3c0b9ec8097972f728db4fbdfe8d448e0edbf66e33af52abc530ba95dd374971f8bc2dcf99a703e68ac47fd9aa6b1e16a16e2c3c5055368b3effdb66f5e2d9d30c654644be", &(0x7f0000000900)="9b025c4acbb85a8f15f3bb1063cd83082dd5ab4245dd98d5a3c6fa3a43d40a32d5f472831ed7856c15890f207b6ceed9f26f015bef8946be1fc05f9f51e0129ce86e72f2166d9338cbeca4efc4aec77437202c26ca0c0b067f04fbfd2db4782954e8ff174ceea75b9776a2d6622b8410d06d25e163f3b8ace67a070bbf6a3e0b40cf017cadda9ea2f585b5cc547d8900b183defa47f25a4b770d758ab9", 0x3, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0x0, 0x21, 0x1f, &(0x7f0000000780)="8ddcb87675b0bb9bd4e855235314c61cee852b2fdb28701c8f76ead4302d73f9db", &(0x7f00000007c0)=""/31, 0xfffffffc, 0x0, 0x61, 0x9d, &(0x7f0000000880)="196a35c696f4c8c35b1ac581041374be9d5fb9e110a1961352cd4a0d3c0b9ec8097972f728db4fbdfe8d448e0edbf66e33af52abc530ba95dd374971f8bc2dcf99a703e68ac47fd9aa6b1e16a16e2c3c5055368b3effdb66f5e2d9d30c654644be", &(0x7f0000000900)="9b025c4acbb85a8f15f3bb1063cd83082dd5ab4245dd98d5a3c6fa3a43d40a32d5f472831ed7856c15890f207b6ceed9f26f015bef8946be1fc05f9f51e0129ce86e72f2166d9338cbeca4efc4aec77437202c26ca0c0b067f04fbfd2db4782954e8ff174ceea75b9776a2d6622b8410d06d25e163f3b8ace67a070bbf6a3e0b40cf017cadda9ea2f585b5cc547d8900b183defa47f25a4b770d758ab9", 0x3, 0x0, 0x4}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x41) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) write(r4, &(0x7f0000000640)="6164642073797a30203a3a8601", 0xd) mount(0x0, &(0x7f0000000800)='./dlmfs_mnt\x00', &(0x7f0000000840)='ocfs2_dlmfs\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000340)='./bus\x00', r0, 0x4000, r4}, 0x18) umount2(&(0x7f0000000800)='./dlmfs_mnt\x00', 0x0) 12m14.610116784s ago: executing program 1 (id=1237): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800004f2d0a001500018eaadb9e920905000000", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000001) r7 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r7, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) listen(r8, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x4, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r4, 0xa, &(0x7f0000000140)={0x800, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) 12m12.996411159s ago: executing program 1 (id=1240): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nq/=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest', 0x3f) r2 = accept$inet(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) 12m11.377945284s ago: executing program 1 (id=1244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xdce8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xd0, 0x0, 0x0) r5 = eventfd2(0x4, 0x801) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x8000000, 0xd000, 0xa, 0x0, 0xa, 0xfc, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1}, {0x0, 0x8000000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x2}, {0xeeef0000, 0xeeef0000, 0x13, 0x8, 0x0, 0x0, 0xb, 0x0, 0x4, 0xe, 0x84, 0x3}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x80}, {0xb000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x2, 0x10, 0x1a}, {0x11001006, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x8080000, 0x80a0000, 0x4, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x2, 0x4}, {0x1, 0x0, 0xf, 0xf9, 0x0, 0x2, 0x0, 0xc, 0x0, 0x4, 0x0, 0x40}, {0x6000, 0x4}, {0x1000, 0xfffe}, 0x20020000, 0x0, 0xdddd1000, 0x0, 0xb, 0x6001, 0x900, [0x5, 0x0, 0x0, 0x3fffffffffff]}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r5, 0xb}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x100000001, 0x0, 0x0, 0x9, 0x13, 0x0, 0x2002], 0x8080000, 0x1144}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m10.822869839s ago: executing program 1 (id=1247): r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './dev\x00'}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x9, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x3, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0x4, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xdf, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32c, 0x3, 0x1ff, 0x2000803, 0xfffffff8, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000280)={0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000180)={0xbc, 0x29, 0x1, {0x14000000, [{{0x4, 0x1, 0x4}, 0x6, 0x2, 0x5, './dev'}, {{0x4, 0x1}, 0x6, 0x85, 0x7, './file0'}, {{0x0, 0x1, 0x6}, 0x8000000000000000, 0x81, 0x14, './dev/mapper/control'}, {{0x10, 0x3, 0x1}, 0x69d, 0xfa, 0x5, './dev'}, {{0x0, 0x3, 0x4}, 0x3, 0x1, 0x14, './dev/mapper/control'}]}}, 0xbc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae000000000085100000022227577cd778823cdb"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregset(0x4205, r10, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) 12m9.642842233s ago: executing program 1 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000040000000400000000"], 0x48) socket$rds(0x15, 0x5, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x81101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES32], 0x0) 12m4.664325451s ago: executing program 1 (id=1265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) (fail_nth: 5) 12m3.704836965s ago: executing program 33 (id=1265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) (fail_nth: 5) 5m39.566771145s ago: executing program 4 (id=2324): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000001300)={&(0x7f0000000980)=ANY=[@ANYBLOB="020500090e0000002cbd7000ffdbdf17080006003c0000000a"], 0x70}, 0x1, 0x7}, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202000200"], &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x100, &(0x7f0000001400)=@string={0x100, 0x3, "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"}}, {0xea, &(0x7f0000001500)=@string={0xea, 0x3, "adcf47773cb7d5907a325b1b04c0b16e2cb05ddfb84a1c0e240a53736176cc228ef7ee8173d7f2f74d233d4caf6d9c1708d98e94b7dd6bf3d8c39d560a8610c109fe8b47d060fbfa5289f347ab4104df1483ebd22ee67d75c1fc678d4eb051e784c8b5c765bebe374e9c86975b2a7116b975c7060d72b95ab82d16684163bf806ad9b75aeeb39ab810253227c9755a35caf7aff0af67e771458a9a9abe9e59e6dcd74ded3031d8badf13d56e39eab588e90b0b249738a5a32482306f8115ba6e1db2fe94ed347b90438508b140f8e833c08ebe77da87e457861dba6be79e26924f03f83695094be3"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x410}}, {0xbd, &(0x7f0000001640)=@string={0xbd, 0x3, "84c1c26cc8bd3b0fa871225b4863b4d20a90331379850451c7f5a8747be0232c2d0a650650fdf3a41f6ec852dcb31b568b0c955750ec1e127ad06a0ba24074586ec312918e0d731cbf781f70f3ce15c287ac8126410ee923d45830741e20d40f1017c939594bfbbaa44202e7a03e966d82a944e95a25087b57d17f07004621632605497715989d8f1a03aed4603cdaa5e83f492e78108e17f8940bc865bb1bbc53be63aac54bfbb6fa2bb4d5886427087beb123dd48d5bd95e38a5"}}, {0xb3, &(0x7f0000001700)=@string={0xb3, 0x3, "2ccafe382ffe9de10be9418aca28b13afdc8ddc86fe703f7ebf230cf4e26acf6337bd26e00e2cba67f74742b323f1d7c19d49c140e2a2175accdd8e241aefcf5524085c0486b0179fce9d1920e1451159ee12844086e663d5c695b9ed8519eb1ae27eab44f0f7fb672697b8b825ba961bb9087fca5e98af215580d8696d85a4115a099293c49ce3f0d73e546f89a8237c9d306f2dc90d2c84ca4f1d2a6f0f71e6815e79cc3de3c576ffc9c9a21ed674b4c"}}, {0xdb, &(0x7f00000017c0)=@string={0xdb, 0x3, "a616be65f37114519b7525cdc5530e65797bddcd9da296f835a3d7fef840c439d6e93e889fc6dd3acb6e5cc6ab3c063baee4227ea5ccd16346628cb4b95dfc4e3f43623b3094ea0c4ff936626887ffd0f4e8280e898c1fa3e98fbfeb893586cb84353d365b584440efb847708237819cfe6b394fb1b13927dd07e5e6158a7e2614f270f4cfaaf62aef0e2c81bb0d5a99c4bc334a27bebf18fbea2583193f9f5b416fb3e79e597b1a1f76add786cb698b9fd5bf7223c9bb8a4f329ee2a27bf8d51731f76b52ae4c111a203c4374de83c3a4f6dab47fa0d699d0"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x427}}]}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x38) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000002040), 0x1, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001180), 0xc00, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001200)=0xc) fcntl$notify(0xffffffffffffffff, 0x402, 0x3f) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000001100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000001340)='./bus\x00', 0x22a1c0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c00ae31ddd4115c694c070001000000b8327ce96f501e1f02000000080001800405398a7e063ad1f3b6"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000013c0)={0x800000, 0xf, 0x20, "c1689936c1880000e8ffff01071d00", 0x34324948}) 5m36.41609043s ago: executing program 4 (id=2333): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01021f40b676ff651c290000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001"], 0xfc}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x2043}}}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c0c4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000001500)={0x14, 0x0, 0x110, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040841}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000007000000080000000800000045000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000015000000000000000800"/28], 0x50) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) 5m33.466050299s ago: executing program 4 (id=2341): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) mmap(&(0x7f0000f4a000/0x2000)=nil, 0x2000, 0x2800006, 0x4010, 0xffffffffffffffff, 0x47f7c000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x80000001, 0x4) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000001c0)='dax\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x64, 0x30, 0x871a15abc695f91d, 0x0, 0x35dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7fffffff, 0xffffffffffffffff, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x2000200, 0x2, {0x4, 0x1}, 0x3, 0xa}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 5m28.769795362s ago: executing program 4 (id=2347): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setresuid(0xee00, 0xee00, 0x0) bind$bt_hci(r1, &(0x7f0000001200)={0x1f, 0x3}, 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x248, 0x20a, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000002, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'ipvlan0\x00', 'lo\x00', {}, {}, 0x6, 0x0, 0x6, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x7}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xffffffff, 0xff, 0xff, 0xff], [0xffffffff, 0xff000000, 0xffffffff], 'wlan1\x00', 'syzkaller1\x00', {}, {0xff}, 0x3c, 0x7b, 0x1, 0x44}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc6, 0x5, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff09, 0x0) socket(0x1d, 0x2, 0x6) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x10000) (async) sendmsg$kcm(r4, 0x0, 0x800) (async, rerun: 64) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1618, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5, 0x12}) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24018807) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) (async, rerun: 64) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a3000000000080003"], 0x28}}, 0x0) (async, rerun: 64) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) (async, rerun: 32) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 5m27.362888705s ago: executing program 4 (id=2353): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) 5m26.365933386s ago: executing program 4 (id=2356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './config/usb_gadget/g1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002c80)={0x2, 0x0, [{0xffffffff, 0x0, 0x0}, {0x1, 0x98, &(0x7f0000002ac0)=""/152}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup(r3) listen(r4, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) 5m7.678887417s ago: executing program 34 (id=2356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './config/usb_gadget/g1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002c80)={0x2, 0x0, [{0xffffffff, 0x0, 0x0}, {0x1, 0x98, &(0x7f0000002ac0)=""/152}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup(r3) listen(r4, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) 12.892043692s ago: executing program 3 (id=3082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=@acquire={0x128, 0x17, 0x1, 0x70bd2b, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4d5, 0xff}, @in=@local, {@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e20, 0x3, 0x4e22, 0x4, 0xa, 0x80, 0x40, 0x3a}, {{@in=@private=0xa010101, @in=@broadcast, 0x4e21, 0x8, 0x4e22, 0x3, 0xa, 0x0, 0x80, 0x3a}, {0x80000000, 0x6, 0x8, 0xffffffff, 0x58, 0x3, 0x6, 0x5}, {0x0, 0xfffffffffffffffd, 0x101, 0x7fff}, 0xfff, 0x6e6bb1, 0x1}, 0x0, 0x4, 0x6, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) (fail_nth: 3) 12.802719361s ago: executing program 3 (id=3083): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x11, @dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@multicast1, 0x4e20, 0x10000, 0x6, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x55, 0x0, &(0x7f0000000240)="5fd63edbfd8a4a6077fd87686f9ad91a55224bb1ec4805f00e33b097eddabe62f29457b626d6a9603a06e8ac3ee0a62f4103f5a71bb375f65ccdaa47c42dac9eb511d9999402abbd0f082836de780a71c9c35f6aed", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x202201, 0x0) write(r6, &(0x7f0000000200)='offline', 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 11.227523002s ago: executing program 3 (id=3087): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) mmap(&(0x7f0000f4a000/0x2000)=nil, 0x2000, 0x2800006, 0x4010, 0xffffffffffffffff, 0x47f7c000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x80000001, 0x4) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000001c0)='dax\x00', 0x0, 0x0) symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x64, 0x30, 0x871a15abc695f91d, 0x0, 0x35dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7fffffff, 0xffffffffffffffff, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x2000200, 0x2, {0x4, 0x1}, 0x3, 0xa}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 10.808482503s ago: executing program 7 (id=3090): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ffff2bbd8d00fbdbea4f00000000", @ANYRES32=0x0, @ANYBLOB="c61a0200071a07001c00128009000100626f6e64000000000c0002800000010004"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x48, 0x33, 0x57}, {0x28, 0x1, 0xf7, 0xfffff00c}, {0x6, 0x6, 0x0, 0xfffffffd}]}, 0x10) sendto$unix(r6, &(0x7f00000001c0)="5157bb57", 0x4, 0x4040800, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xfd, 0x7, 0x7fc00002}]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000400)={0x0, 0x1, r9, 0x7fffffff, 0x80000}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r0, 0x4, r0}, 0x10) 8.679263206s ago: executing program 6 (id=3095): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) pipe(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xbd) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r5) 7.41315062s ago: executing program 6 (id=3097): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc045}, 0x20004) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x127, &(0x7f0000000500)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@generic={0x17, "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"}}}, 0x0) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) pipe(&(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000010101020000000000000000020000092000018006000340000400001400018008000100ac14fcffffffffffffff14bb0c0019800800020018"], 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x78}}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000700)="440f20c0663503000000440f22c036f30fc7fe0f01cb3ef30f2d5700f20fc21ec2b400b862058ed00f01c20f01cb66660f7ef4832a42", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000080)={0x66, 0x17, 0x2, {0x2f, './sys/module/kvm/parameters/nx_huge_pages/file0'}}, 0x38) 7.301035123s ago: executing program 7 (id=3098): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./proc\x00', &(0x7f00000000e0)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r1, 0x0, 0x4a) 7.263819704s ago: executing program 3 (id=3101): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x13) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000001200)) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x8000, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bc375461caaa2f19936996c7096ffeeb030000000000006400", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643f38b6fa7e380ffeffffff0000fe09"}}}}}}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0xffff) setfsgid(0xee01) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006140)="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", 0x2000, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r4, 0x0, 0x9400, 0x10132, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x4, 0x4, 0x0, 0x0, 0x80, 0x0, 0x2, 0xfe, 0x3, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 7.108742455s ago: executing program 7 (id=3102): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0422b9dd9210b7", 0x7, 0x20000090, 0x0, 0x0) socket(0x15, 0x4, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r5, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0x8000001, 0xf, &(0x7f00000000c0)=[0x138d, 0x5, 0x7d, 0xffff32eb, 0x2, 0x8, 0x2d7b, 0x41f, 0x0, 0x3, 0x0, 0x7, 0xfe09, 0xd2, 0x80000002], 0x0, 0x4400003}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.939008333s ago: executing program 2 (id=3105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000005000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000100000000000000000000000000200037050000000000002b000000008000003a2d285cc980000109c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000"], 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r0, 0x400c4d06, &(0x7f0000000a00)) 4.600652775s ago: executing program 2 (id=3106): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40a00, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}, {}, {}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r2, &(0x7f0000000200)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress.discovery,traddr=127.0.0.1\x00', 0x48) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x25c, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200002, 0x2, 0x2}) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x10, r4}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 4.203251191s ago: executing program 7 (id=3107): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x8007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 4.201935309s ago: executing program 6 (id=3108): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) pipe(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xbd) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) 4.141468539s ago: executing program 5 (id=3109): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f00000000c0)="8fa5", 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 4.134817249s ago: executing program 3 (id=3110): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 3.949798163s ago: executing program 2 (id=3111): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0xa00}, {0x0, 0x100000000000000}]}, 0x68) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000400)="882f1242b009007d39f301003c60", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, 0x0, &(0x7f00000003c0)) r7 = memfd_secret(0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xff, &(0x7f0000000640)=""/255, 0x41000, 0x20, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0xe, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r7, r1], 0x0, 0x10, 0x1}, 0x94) 3.334587376s ago: executing program 6 (id=3112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000840)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xee\x9c\x98\xe4\x18cb\xbd/\xd8\xe95\x7f\x00\xfd6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9b', 0x2) ftruncate(r3, 0xffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4020aeb2, &(0x7f0000002400)={[{0x7, 0x5, 0xfa, 0x2, 0x3, 0x9a, 0x9, 0x4, 0x75, 0x0, 0x2, 0x6, 0xffffdfff}, {0x15, 0x0, 0xa, 0xe7, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x100000001}, {0x2, 0x1004, 0x8, 0x51, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x9, 0xf6, 0x4, 0x2a8606fc}], 0xe978}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {0xfff, 0xa63, 0x7, 0x5}, 0x2f, [0xfd, 0x8, 0x81, 0x80, 0xf, 0xfffffff9, 0x9, 0x2efc19fe, 0x9, 0x5, 0x8, 0x80000001, 0x7, 0x1, 0xe, 0x4, 0x4, 0x40, 0x10000, 0x5, 0x9, 0xfffffff7, 0x7, 0x7, 0x8, 0x5, 0x2, 0x4, 0xa, 0x8001, 0x3, 0xffff, 0x0, 0x4, 0x38, 0x4, 0x2, 0x7, 0x3, 0x9, 0x1, 0x8, 0xba30, 0x9, 0x1, 0x80000000, 0x8, 0xe8, 0x10000000, 0xfffffff7, 0x1ff, 0x1, 0x9, 0x0, 0xfffffff7, 0x3, 0x5, 0xffffffff, 0x3ff, 0x9, 0x10, 0x6, 0x80000000, 0x101], [0x8, 0xfffff001, 0x5, 0x8000, 0x3ff, 0xdde7, 0x5, 0x7, 0x3ff, 0x10000, 0x7, 0x5, 0x8, 0xc723, 0xda53, 0x401, 0x1, 0x9, 0xb12a, 0x101, 0x6eb7, 0x2, 0x100, 0xf3, 0x3, 0x1, 0x9, 0xae, 0x9, 0xfffffffd, 0x10, 0x9, 0x80000000, 0x1, 0x10000, 0x1, 0x6, 0x35, 0x80000001, 0x4, 0xd83a, 0x4, 0x0, 0x3, 0x6, 0x8, 0x4, 0x2, 0x3, 0x103, 0x10000, 0x1, 0x0, 0xe8, 0x9, 0xff, 0xfffffffc, 0x6, 0x4, 0x2, 0x7ff, 0x9, 0xfffffff7, 0x1], [0x7, 0x1, 0x7, 0x4, 0xfffffffa, 0x2, 0x5, 0x72, 0x1, 0x4, 0x7ff, 0x400006, 0xf, 0x6, 0xa, 0x3, 0x7, 0x3ff, 0x7, 0xd, 0x80, 0xe, 0x5, 0x7fff, 0x1, 0x1, 0xffff, 0x9, 0x7, 0x3, 0x4, 0xb, 0x401, 0x1ff, 0x1800, 0x7ff, 0x0, 0x8, 0x6, 0x101, 0x4, 0x1, 0x7, 0xffff, 0x80000001, 0x5, 0x2, 0x200, 0x9, 0xcf5b, 0x5, 0xb, 0xffffffff, 0x5, 0x1, 0xe27, 0x9, 0x8000, 0x6, 0xfff, 0x7, 0x0, 0x3, 0xdaa1], [0x8, 0xfff, 0x6f, 0x5, 0x1, 0x7, 0x4, 0x47, 0x1, 0x200, 0x80000000, 0x0, 0x4, 0x5, 0x3, 0xd, 0x8, 0x9, 0x401, 0x2, 0x7, 0x1, 0x4, 0x113, 0x6, 0x7, 0x10001, 0x2cd, 0xfffffff9, 0x1, 0xff, 0x9, 0x9, 0x8, 0x5, 0x1, 0xfc8, 0xfffffffa, 0x3, 0x5, 0x4, 0x3ff, 0x6, 0x200, 0xf0, 0x2, 0x5, 0x5, 0x10, 0x2, 0xfffffff9, 0x6, 0x9, 0x3, 0xc, 0x0, 0x8001, 0x100, 0x10001, 0x1, 0x1, 0x7, 0x47868932, 0x4]}, 0x45c) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x2000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63a8, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f72, 0x2, 0x3, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x407a, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2.942882672s ago: executing program 3 (id=3113): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) accept4(r0, 0x0, &(0x7f0000000340), 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x90, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x89, 0x4, 0x3, {0x7, 0x25, 0x1, 0x8, 0x7, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0xb, 0x45, {0x7, 0x25, 0x1, 0xc, 0xf1}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0xc6, 0x47, 0x7ffcffff}]}) fstat(r2, &(0x7f0000000540)) write$tcp_congestion(r5, 0x0, 0x0) syz_usb_connect$uac3(0x1, 0xb1, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x80000000000000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mount$afs(&(0x7f00000004c0)=ANY=[@ANYBLOB='#'], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080), 0x8000c0, 0x0) bind$bt_l2cap(r7, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mlockall(0x7) mlockall(0x7) r8 = accept4$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000) connect$bt_l2cap(r8, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0xe) 2.928815735s ago: executing program 5 (id=3114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r2, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x800) dup2(r2, r0) listen(r0, 0x5) accept(r0, 0x0, 0x0) 2.669308786s ago: executing program 2 (id=3115): socket$inet6(0xa, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.655932393s ago: executing program 5 (id=3116): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x30, r1, 0x1, 0x70bda9, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4048004) (fail_nth: 5) 1.987101137s ago: executing program 5 (id=3117): socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff00000007058102000200070502020002"], &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x100, &(0x7f0000001400)=@string={0x100, 0x3, "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"}}, {0xea, &(0x7f0000001500)=@string={0xea, 0x3, "adcf47773cb7d5907a325b1b04c0b16e2cb05ddfb84a1c0e240a53736176cc228ef7ee8173d7f2f74d233d4caf6d9c1708d98e94b7dd6bf3d8c39d560a8610c109fe8b47d060fbfa5289f347ab4104df1483ebd22ee67d75c1fc678d4eb051e784c8b5c765bebe374e9c86975b2a7116b975c7060d72b95ab82d16684163bf806ad9b75aeeb39ab810253227c9755a35caf7aff0af67e771458a9a9abe9e59e6dcd74ded3031d8badf13d56e39eab588e90b0b249738a5a32482306f8115ba6e1db2fe94ed347b90438508b140f8e833c08ebe77da87e457861dba6be79e26924f03f83695094be3"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x410}}, {0xbd, &(0x7f0000001640)=@string={0xbd, 0x3, "84c1c26cc8bd3b0fa871225b4863b4d20a90331379850451c7f5a8747be0232c2d0a650650fdf3a41f6ec852dcb31b568b0c955750ec1e127ad06a0ba24074586ec312918e0d731cbf781f70f3ce15c287ac8126410ee923d45830741e20d40f1017c939594bfbbaa44202e7a03e966d82a944e95a25087b57d17f07004621632605497715989d8f1a03aed4603cdaa5e83f492e78108e17f8940bc865bb1bbc53be63aac54bfbb6fa2bb4d5886427087beb123dd48d5bd95e38a5"}}, {0xb3, &(0x7f0000001700)=@string={0xb3, 0x3, "2ccafe382ffe9de10be9418aca28b13afdc8ddc86fe703f7ebf230cf4e26acf6337bd26e00e2cba67f74742b323f1d7c19d49c140e2a2175accdd8e241aefcf5524085c0486b0179fce9d1920e1451159ee12844086e663d5c695b9ed8519eb1ae27eab44f0f7fb672697b8b825ba961bb9087fca5e98af215580d8696d85a4115a099293c49ce3f0d73e546f89a8237c9d306f2dc90d2c84ca4f1d2a6f0f71e6815e79cc3de3c576ffc9c9a21ed674b4c"}}, {0xdb, &(0x7f00000017c0)=@string={0xdb, 0x3, "a616be65f37114519b7525cdc5530e65797bddcd9da296f835a3d7fef840c439d6e93e889fc6dd3acb6e5cc6ab3c063baee4227ea5ccd16346628cb4b95dfc4e3f43623b3094ea0c4ff936626887ffd0f4e8280e898c1fa3e98fbfeb893586cb84353d365b584440efb847708237819cfe6b394fb1b13927dd07e5e6158a7e2614f270f4cfaaf62aef0e2c81bb0d5a99c4bc334a27bebf18fbea2583193f9f5b416fb3e79e597b1a1f76add786cb698b9fd5bf7223c9bb8a4f329ee2a27bf8d51731f76b52ae4c111a203c4374de83c3a4f6dab47fa0d699d0"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x427}}]}) write(0xffffffffffffffff, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700000000", 0x47) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000002040), 0x1, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001180), 0xc00, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001200)=0xc) fcntl$notify(0xffffffffffffffff, 0x402, 0x3f) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000001100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000001340)='./bus\x00', 0x22a1c0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c00ae31ddd4115c694c070001000000b8327ce96f501e1f02000000080001800405398a7e063ad1f3b6"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000013c0)={0x800000, 0xf, 0x20, "c1689936c1880000e8ffff01071d00", 0x34324948}) 1.93568037s ago: executing program 2 (id=3118): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180), 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xa1, 0x0, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000400)={0x1a, 0x110, 0x10, 0x0, 0x6, 0x20, @broadcast}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/103) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r4, 0x7) listen(r0, 0xffff) 1.340557874s ago: executing program 2 (id=3119): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfff7}]}}}]}, 0x3c}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000040)={0x2, 0x3, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000741000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00008c0000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00007dc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006de000/0x3000)=nil, &(0x7f0000828000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@remote, @loopback, 0x0}, &(0x7f00000002c0)=0xc) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0xd8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r9 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x800, 0x0) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 551.124779ms ago: executing program 7 (id=3120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1502}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000081}, 0x40004) (fail_nth: 5) 457.308528ms ago: executing program 6 (id=3121): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff01000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x8f) 320.056665ms ago: executing program 7 (id=3122): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) pipe(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xbd) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r5) 267.704706ms ago: executing program 5 (id=3123): mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)='common_pid > 0', 0xe) 134.981565ms ago: executing program 6 (id=3124): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000940)=""/102400, 0x19000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="100a06000908010014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) sendmmsg$inet(r8, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@local]}, @timestamp_addr={0x44, 0x54, 0x42, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x1}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xfff}, {@empty, 0x10}, {@empty, 0x6}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x41}}, {@broadcast, 0x2b}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x88}}, {{&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="f5fc2db01b36a43ad73fc5f458f155bd7122b2ea6846c12fed75f6649c925ff96cd4b9aa634283fd78b568dc2bd4f2c9ca53858df3607d6c5bd3413ce9fe1e351dd6a044e408d0bf6a00b4aa85d46a56784cdcb23ce1b998e8b6b73a4a91be57edc92b42dacf0d4e5d3ca9ebd8fa48adc15ae8fb2bf8027cff05d08c26a3f654ef398cc3c92a24d3e2b28052aedaca300f5d5948cb80065d6ef0ef2c06f0e83bd22e51da0b19763a50756ecec261c1ad3b6d042a4e13c51de241bd1b9ee9b9afaa9dce4fc0df0528a6863a41c27ec790af54f45770e02ac0abeb317c5cbc8015ab134f", 0xe3}], 0x1, &(0x7f0000019940)=ANY=[@ANYBLOB="400000000000eb00000000000700000044107330000000050000000700000008000101820fa35284cd40ddd1c8b5fe216021070bb9e00000010a01ec765b1a9714e65000000000000000000008000000", @ANYBLOB="48ce56c96ce4f260dffd3d8477e4af4e9d6e8cc3c1cf902c4005403f89749bfeeb491a2f4a2005e73dc8069aa9373e5279346e2e8ec052ed290b1a4757e6ca8154cbd322e8e7b2af2786d5e50d3cb2ea3342a04219d86ff3b987bbee82d828a31a299e162f9ee43d81aec7b106cb4575965e2cce6d405c5c020bb5046fa6d4b8a9a3ee7405d480789281de5fb5433d9d69cf44040abf4aaa139363c78623457f90ae1b7644e23268a62585736d6243e005dce5fa9f", @ANYBLOB="ffffffffe0000002000000001100000000000000be16dfd88b08890b81000000000000001c0000c5d42fffab4f0b0f0ad4a20927896d10b910e9c9faf7d56378411cfec35f95bdd03c3cf91a9ebf573b6477a9455108f9cb4a8dcc56974dcc884cc2c525e9a0d4fa83097d7ffe55b74de1dbe7068812cd95e772302609f575aba9cf838d64be436a4b901f6a5819c2f41b02f7ba4bbee86b8267872a697d5b718d948c9a621b5ebeca9fec7befeb655194e53ab249fee81264aaf77eb7dc0716664a28f3db132f4aa7d3a20b04aee8d9ac5d4af6289358aa4687cad9bbbb6073d51d7d25265dbb83a1d9ceeda4f35c00cf05178fefa52f3a0715053fc39c89646aa4f58e117046ea5573698de9e52df9ebf4", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000100000000140000000000000000000000020000000600000000000000"], 0xd0}}], 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x81) r12 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a2a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010500000001000000000624fdee7c1b0905810308000300000904010000020d000009040101"], 0x0) 0s ago: executing program 5 (id=3125): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000bd70040000000000000100090001006861736800000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x128}, 0x4000088) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) close(0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) close(r1) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=@getqdisc={0x30, 0x26, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x7, 0xf}, {0xf, 0xa}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fsetxattr$security_capability(r5, &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x3000000, [{0xb, 0x800}, {0x8bd1925, 0x2}]}, 0x4, 0x2) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003700090122bd7008fddbdf2502400000080007"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): left promiscuous mode [ 1127.079309][ T13] veth1_vlan: left promiscuous mode [ 1127.083875][ T13] veth0_vlan: left promiscuous mode [ 1127.791551][ T13] team0 (unregistering): Port device vlan0 removed [ 1127.932223][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1127.944413][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1128.015946][ T5797] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1128.180901][ T5797] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1128.182107][ T5335] usbhid 4-1:0.0: can't add hid device: -71 [ 1128.182188][ T5335] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1128.184497][ T5797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.184537][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.184625][ T5335] usb 4-1: USB disconnect, device number 109 [ 1128.395225][ T5797] usb 6-1: config 0 descriptor?? [ 1128.401657][ T1082] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1128.618035][ T1082] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1128.619352][ T1082] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 1128.619383][ T1082] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24834, setting to 1024 [ 1128.624855][ T1082] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1128.624879][ T1082] usb 8-1: Product: syz [ 1128.624894][ T1082] usb 8-1: Manufacturer: syz [ 1129.087838][ T5797] usbhid 6-1:0.0: can't add hid device: -71 [ 1129.087939][ T5797] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1129.228257][ T1082] hub 8-1:1.0: USB hub found [ 1129.233174][ T5797] usb 6-1: USB disconnect, device number 67 [ 1129.439578][T17191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=17191 comm=syz.7.2879 [ 1129.644478][ T30] audit: type=1400 audit(1789831992.934:1183): avc: denied { write } for pid=17196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.861429][ T30] audit: type=1400 audit(1789831993.154:1184): avc: denied { write } for pid=17217 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1131.680331][T17051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1131.702713][T17051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.707236][T17051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1131.731385][ T1082] hub 8-1:1.0: config failed, can't read hub descriptor (err -22) [ 1131.741530][ T1082] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input285 [ 1131.765398][ C1] usbtouchscreen 8-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1131.771113][T17051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.771731][T17051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1131.794015][ T1082] usb 8-1: USB disconnect, device number 18 [ 1131.813400][T17051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.822605][T17051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1131.919574][T17051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1132.015336][T17051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.037853][T17051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.054221][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.054306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.091890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.091963][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.364698][ T30] audit: type=1326 audit(1789831996.654:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.5.2891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc27859e159 code=0x0 [ 1133.489572][ T1082] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1133.638436][ T1082] usb 8-1: Using ep0 maxpacket: 32 [ 1133.638929][ T1082] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1133.639827][ T1082] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.639854][ T1082] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.641136][ T1082] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1133.641159][ T1082] usb 8-1: Product: syz [ 1133.641174][ T1082] usb 8-1: Manufacturer: syz [ 1133.654640][ T1082] hub 8-1:4.0: USB hub found [ 1133.791368][ T30] audit: type=1400 audit(1789831997.084:1186): avc: denied { write } for pid=17233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.869002][ T1082] hub 8-1:4.0: 2 ports detected [ 1133.909212][ T30] audit: type=1400 audit(1789831997.204:1187): avc: denied { write } for pid=17267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.309463][T17234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.309881][T17234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.392282][T17051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.426405][ T5700] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1134.605798][T17291] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1134.710444][ T5797] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1134.727153][ T5700] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1134.728294][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.728349][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.918267][ T5797] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1134.925225][ T5797] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.925282][ T5797] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1134.925399][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.032800][ T5700] usb 6-1: config 0 descriptor?? [ 1135.305791][T17051] veth0_vlan: entered promiscuous mode [ 1135.619992][T17051] veth1_vlan: entered promiscuous mode [ 1135.700317][ T30] audit: type=1400 audit(1789831998.995:1188): avc: denied { write } for pid=17270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.788649][T17051] veth0_macvtap: entered promiscuous mode [ 1135.792950][T17051] veth1_macvtap: entered promiscuous mode [ 1135.809313][ T1082] hub 8-1:4.0: set hub depth failed [ 1135.815402][ T1082] usb 8-1: USB disconnect, device number 19 [ 1135.841975][T17051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.867610][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1135.869603][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1135.873349][ T5700] usbhid 6-1:0.0: can't add hid device: -71 [ 1135.873455][ T5700] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1135.884363][ T5700] usb 6-1: USB disconnect, device number 68 [ 1135.923676][T17051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.030256][ T6935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.059296][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.072909][ T1429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.072975][ T1429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.394585][ T30] audit: type=1400 audit(1789832000.685:1189): avc: denied { write } for pid=17301 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1137.428746][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.428766][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.607757][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.607779][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.663074][ T5700] usb 4-1: USB disconnect, device number 110 [ 1138.126165][ T1229] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1138.138464][ T30] audit: type=1326 audit(1789832001.435:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.6.2903" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5d9d9e159 code=0x0 [ 1138.291823][ T1229] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1138.307985][ T1229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 1138.308045][ T1229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24834, setting to 1024 [ 1138.333095][T17334] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1138.380561][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1138.380594][ T1229] usb 4-1: Product: syz [ 1138.380636][ T1229] usb 4-1: Manufacturer: syz [ 1138.426330][ T5335] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1138.542834][ T1229] hub 4-1:1.0: USB hub found [ 1138.689172][ T5335] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1138.722822][ T30] audit: type=1400 audit(1789832002.015:1191): avc: denied { write } for pid=17308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.781738][T17316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=17316 comm=syz.3.2900 [ 1138.896194][ T5335] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1138.896246][ T5335] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1138.896282][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.327255][ T30] audit: type=1400 audit(1789832002.625:1192): avc: denied { write } for pid=17341 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.373718][ T5335] usb 3-1: usb_control_msg returned -32 [ 1139.373744][ T5335] usbtmc 3-1:16.0: can't read capabilities [ 1139.524882][T17333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.525239][T17333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.605099][T17350] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1140.396379][T17357] FAULT_INJECTION: forcing a failure. [ 1140.396379][T17357] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.396432][T17357] CPU: 0 UID: 0 PID: 17357 Comm: syz.7.2912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.396458][T17357] Tainted: [L]=SOFTLOCKUP [ 1140.396466][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1140.396477][T17357] Call Trace: [ 1140.396484][T17357] [ 1140.396492][T17357] dump_stack_lvl+0x100/0x190 [ 1140.396523][T17357] should_fail_ex.cold+0x5/0xa [ 1140.396546][T17357] ? __netlink_lookup+0x652/0x900 [ 1140.396568][T17357] should_failslab+0xc2/0x120 [ 1140.396590][T17357] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1140.396611][T17357] ? skb_clone+0x190/0x400 [ 1140.396637][T17357] skb_clone+0x190/0x400 [ 1140.396659][T17357] netlink_deliver_tap+0xaed/0xcc0 [ 1140.396680][T17357] netlink_unicast+0x62b/0x850 [ 1140.396695][T17357] ? __pfx_netlink_unicast+0x10/0x10 [ 1140.396717][T17357] netlink_sendmsg+0x8b0/0xda0 [ 1140.396732][T17357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1140.396754][T17357] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1140.396779][T17357] ____sys_sendmsg+0xa4d/0xbe0 [ 1140.396804][T17357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1140.396826][T17357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1140.396849][T17357] ? lock_acquire+0x1d1/0x380 [ 1140.396861][T17357] ? get_pid_task+0x2a/0x250 [ 1140.396878][T17357] ___sys_sendmsg+0x190/0x1e0 [ 1140.396894][T17357] ? __pfx____sys_sendmsg+0x10/0x10 [ 1140.396912][T17357] ? get_pid_task+0x106/0x250 [ 1140.396953][T17357] ? find_held_lock+0x2b/0x80 [ 1140.397062][T17357] __sys_sendmsg+0x160/0x210 [ 1140.397102][T17357] ? __pfx___sys_sendmsg+0x10/0x10 [ 1140.397147][T17357] do_syscall_64+0x123/0x790 [ 1140.397176][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.397188][T17357] RIP: 0033:0x7f86cab9e159 [ 1140.397199][T17357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.397213][T17357] RSP: 002b:00007f86cba34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1140.397232][T17357] RAX: ffffffffffffffda RBX: 00007f86cae25fa0 RCX: 00007f86cab9e159 [ 1140.397244][T17357] RDX: 0000000000048004 RSI: 0000200000000000 RDI: 0000000000000003 [ 1140.397255][T17357] RBP: 00007f86cba34090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.397271][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.397281][T17357] R13: 00007f86cae26038 R14: 00007f86cae25fa0 R15: 00007ffe95365388 [ 1140.397302][T17357] [ 1140.398954][T17357] openvswitch: netlink: EtherType 0 is less than min 600 [ 1140.946698][T17362] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1140.987302][ T1229] hub 4-1:1.0: config failed, can't read hub descriptor (err -22) [ 1141.144386][ T1229] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input286 [ 1141.753402][ C1] usbtouchscreen 4-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1142.114204][T17370] netlink: 'syz.3.2915': attribute type 21 has an invalid length. [ 1142.126122][T17370] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2915'. [ 1142.128241][T17370] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2915'. [ 1142.184467][T17372] netlink: 'syz.3.2915': attribute type 21 has an invalid length. [ 1142.184489][T17372] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2915'. [ 1142.184555][T17372] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2915'. [ 1142.279507][T17371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.339824][T17371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.429418][ T1229] usb 4-1: USB disconnect, device number 111 [ 1142.791214][ T30] audit: type=1326 audit(1789832006.085:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.6.2916" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5d9d9e159 code=0x0 [ 1142.857369][ T1229] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1143.006507][ T1229] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1143.011427][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.011454][ T1229] usb 4-1: Product: syz [ 1143.011468][ T1229] usb 4-1: Manufacturer: syz [ 1143.011482][ T1229] usb 4-1: SerialNumber: syz [ 1143.014083][ T1229] usb 4-1: config 0 descriptor?? [ 1143.461683][T17370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2915'. [ 1143.769829][T11520] usb 3-1: USB disconnect, device number 110 [ 1143.994028][T17390] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1144.300327][ T1229] usb 4-1: Firmware version (0.0) predates our first public release. [ 1144.300368][ T1229] usb 4-1: Please update to version 0.2 or newer [ 1145.692673][ T1229] usb 4-1: USB disconnect, device number 112 [ 1146.096542][T11520] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1146.445738][ T5335] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1146.471329][T11520] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1146.489329][T11520] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.489365][T11520] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1146.489517][T11520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.585767][T10792] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1146.608561][ T5335] usb 8-1: Using ep0 maxpacket: 8 [ 1146.706317][ T5335] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1146.711114][ T5335] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1146.711158][ T5335] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.711179][ T5335] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1146.711200][ T5335] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1146.711241][ T5335] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1146.712155][T17402] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1146.785069][ T5335] usb 8-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1146.785102][ T5335] usb 8-1: Product: syz [ 1146.955698][T10792] usb 3-1: Using ep0 maxpacket: 16 [ 1146.956769][T10792] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1146.999033][T10792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.999081][T10792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1146.999109][T10792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1146.999129][T10792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1146.999149][T10792] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.084249][T10792] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1147.084277][T10792] usb 3-1: Manufacturer: syz [ 1147.163483][T11520] usb 6-1: usb_control_msg returned -32 [ 1147.163589][T11520] usbtmc 6-1:16.0: can't read capabilities [ 1147.445033][T10792] usb 3-1: config 0 descriptor?? [ 1147.466794][T17397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.467241][T17397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.038009][T11520] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1148.102415][ T5335] usb 8-1: usb_control_msg returned -32 [ 1148.102453][ T5335] usbtmc 8-1:16.0: can't read capabilities [ 1148.103293][T17420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.103624][T17420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.165613][T15428] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1148.178016][T10792] rc_core: IR keymap rc-hauppauge not found [ 1148.178031][T10792] Registered IR keymap rc-empty [ 1148.178500][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.202035][T11520] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1148.202790][T11520] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 1148.202809][T11520] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24834, setting to 1024 [ 1148.203910][T11520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1148.203938][T11520] usb 4-1: Product: syz [ 1148.203946][T11520] usb 4-1: Manufacturer: syz [ 1148.206101][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.247833][T10792] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1148.259518][T10792] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input287 [ 1148.284368][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.305113][T11520] hub 4-1:1.0: USB hub found [ 1148.305970][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.325779][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.335606][T15428] usb 7-1: Using ep0 maxpacket: 32 [ 1148.348774][T15428] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1148.355647][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.367237][T15428] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.367257][T15428] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.369055][T15428] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1148.369071][T15428] usb 7-1: Product: syz [ 1148.369079][T15428] usb 7-1: Manufacturer: syz [ 1148.375764][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.421657][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.429520][T15428] hub 7-1:4.0: USB hub found [ 1148.435759][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.454274][T17415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=17415 comm=syz.3.2925 [ 1148.458369][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.478762][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.495628][T10792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1148.517186][T10792] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1148.517210][T10792] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1148.549699][T10792] usb 3-1: USB disconnect, device number 111 [ 1148.655184][T15428] hub 7-1:4.0: 2 ports detected [ 1149.064954][T17418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.065282][T17418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.322047][T10792] usb 8-1: USB disconnect, device number 20 [ 1149.343943][ T30] audit: type=1326 audit(1789832012.635:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17438 comm="syz.2.2930" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e8c39e159 code=0x0 [ 1149.540121][T15428] hub 7-1:4.0: set hub depth failed [ 1149.549717][T15428] usb 7-1: USB disconnect, device number 58 [ 1149.785488][T10792] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1149.937946][T10792] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1149.941655][T10792] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.941695][T10792] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.941732][T10792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.077925][T15428] usb 6-1: USB disconnect, device number 69 [ 1150.438553][T11520] hub 4-1:1.0: config failed, can't read hub descriptor (err -22) [ 1150.462818][T11520] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input288 [ 1150.514709][T11520] usb 4-1: USB disconnect, device number 113 [ 1150.739875][T17468] syz.5.2937: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1150.739918][T17468] CPU: 1 UID: 0 PID: 17468 Comm: syz.5.2937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.739939][T17468] Tainted: [L]=SOFTLOCKUP [ 1150.739944][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1150.739952][T17468] Call Trace: [ 1150.739957][T17468] [ 1150.739963][T17468] dump_stack_lvl+0x100/0x190 [ 1150.739986][T17468] warn_alloc.cold+0x9e/0xb2 [ 1150.740000][T17468] ? __pfx_warn_alloc+0x10/0x10 [ 1150.740014][T17468] ? avc_has_extended_perms+0x201/0x1080 [ 1150.740032][T17468] ? avc_has_extended_perms+0x33a/0x1080 [ 1150.740049][T17468] ? avc_has_extended_perms+0x33a/0x1080 [ 1150.740070][T17468] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1150.740087][T17468] ? rcu_is_watching+0x13/0xc0 [ 1150.740111][T17468] ? trace_contention_end+0x126/0x160 [ 1150.740138][T17468] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1150.740153][T17468] ? kasan_quarantine_put+0x104/0x240 [ 1150.740167][T17468] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1150.740182][T17468] ? __pfx___mutex_lock+0x10/0x10 [ 1150.740200][T17468] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.740217][T17468] ? tomoyo_path_number_perm+0x188/0x580 [ 1150.740233][T17468] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1150.740245][T17468] __vmalloc_node_noprof+0xad/0xf0 [ 1150.740260][T17468] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1150.740274][T17468] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1150.740288][T17468] ? do_vfs_ioctl+0x226/0x13e0 [ 1150.740304][T17468] dvb_usercopy+0x167/0x340 [ 1150.740322][T17468] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1150.740336][T17468] ? __pfx_dvb_usercopy+0x10/0x10 [ 1150.740352][T17468] ? __fget_files+0x34/0x3d0 [ 1150.740372][T17468] ? selinux_file_ioctl+0x13b/0x290 [ 1150.740385][T17468] ? selinux_file_ioctl+0xb6/0x290 [ 1150.740399][T17468] dvb_demux_ioctl+0x29/0x40 [ 1150.740409][T17468] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1150.740421][T17468] __x64_sys_ioctl+0x18e/0x210 [ 1150.740436][T17468] do_syscall_64+0x123/0x790 [ 1150.740454][T17468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.740466][T17468] RIP: 0033:0x7fc27859e159 [ 1150.740477][T17468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.740488][T17468] RSP: 002b:00007fc279530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1150.740500][T17468] RAX: ffffffffffffffda RBX: 00007fc278825fa0 RCX: 00007fc27859e159 [ 1150.740507][T17468] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000b [ 1150.740515][T17468] RBP: 00007fc27863506b R08: 0000000000000000 R09: 0000000000000000 [ 1150.740521][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.740528][T17468] R13: 00007fc278826038 R14: 00007fc278825fa0 R15: 00007ffde2651158 [ 1150.740543][T17468] [ 1150.740569][T17468] Mem-Info: [ 1150.740576][T17468] active_anon:39937 inactive_anon:0 isolated_anon:0 [ 1150.740576][T17468] active_file:2704 inactive_file:63654 isolated_file:0 [ 1150.740576][T17468] unevictable:0 dirty:336 writeback:0 [ 1150.740576][T17468] slab_reclaimable:12896 slab_unreclaimable:101805 [ 1150.740576][T17468] mapped:36455 shmem:27991 pagetables:1595 [ 1150.740576][T17468] sec_pagetables:0 bounce:0 [ 1150.740576][T17468] kernel_misc_reclaimable:0 [ 1150.740576][T17468] free:1251742 free_pcp:7558 free_cma:0 [ 1150.740606][T17468] Node 0 active_anon:159748kB inactive_anon:0kB active_file:10816kB inactive_file:254420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145820kB dirty:1340kB writeback:0kB shmem:111964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13292kB pagetables:6248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1150.740638][T17468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1150.740669][T17468] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.740715][T17468] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 1150.740738][T17468] Node 0 DMA32 free:1047244kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:159748kB inactive_anon:0kB active_file:10816kB inactive_file:254420kB unevictable:0kB writepending:1340kB zspages:7420kB present:3129332kB managed:2530492kB mlocked:0kB bounce:0kB free_pcp:30232kB local_pcp:17912kB free_cma:0kB [ 1150.740769][T17468] lowmem_reserve[]: 0 0 0 0 0 [ 1150.740788][T17468] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.740817][T17468] lowmem_reserve[]: 0 0 0 0 0 [ 1150.740859][T17468] Node 1 Normal free:3944396kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.740890][T17468] lowmem_reserve[]: 0 0 0 0 0 [ 1150.740908][T17468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1150.741000][T17468] Node 0 DMA32: 1691*4kB (ME) 2250*8kB (M) 967*16kB (UME) 2025*32kB (UME) 1494*64kB (UME) 744*128kB (UME) 191*256kB (UM) 72*512kB (UME) 32*1024kB (UME) 5*2048kB (M) 152*4096kB (UM) = 1047244kB [ 1150.741094][T17468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1150.741166][T17468] Node 1 Normal: 9*4kB (UM) 9*8kB (UM) 6*16kB (UM) 4*32kB (UM) 8*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944396kB [ 1150.741279][T17468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.741289][T17468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1150.741297][T17468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.741305][T17468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1150.741314][T17468] 94345 total pagecache pages [ 1150.741318][T17468] 0 pages in swap cache [ 1150.741322][T17468] Free swap = 45632kB [ 1150.741327][T17468] Total swap = 124996kB [ 1150.741331][T17468] 2097051 pages RAM [ 1150.741335][T17468] 0 pages HighMem/MovableOnly [ 1150.741339][T17468] 432795 pages reserved [ 1150.741343][T17468] 0 pages cma reserved [ 1151.617063][T17466] bpf: Bad value for 'uid' [ 1152.034596][T17476] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1152.390029][T17486] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1152.510052][T17490] FAULT_INJECTION: forcing a failure. [ 1152.510052][T17490] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.510077][T17490] CPU: 1 UID: 0 PID: 17490 Comm: syz.5.2941 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.510095][T17490] Tainted: [L]=SOFTLOCKUP [ 1152.510099][T17490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1152.510110][T17490] Call Trace: [ 1152.510116][T17490] [ 1152.510121][T17490] dump_stack_lvl+0x100/0x190 [ 1152.510142][T17490] should_fail_ex.cold+0x5/0xa [ 1152.510161][T17490] should_failslab+0xc2/0x120 [ 1152.510177][T17490] __kmalloc_cache_noprof+0x91/0x6d0 [ 1152.510198][T17490] ? sctp_association_new+0xbb/0x2990 [ 1152.510214][T17490] sctp_association_new+0xbb/0x2990 [ 1152.510233][T17490] sctp_connect_new_asoc+0x1a8/0x770 [ 1152.510250][T17490] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1152.510266][T17490] ? __ipv6_addr_type+0xe8/0x2e0 [ 1152.510281][T17490] ? __ipv6_addr_type+0xe8/0x2e0 [ 1152.510297][T17490] __sctp_connect+0x3e7/0xc70 [ 1152.510314][T17490] ? __pfx___sctp_connect+0x10/0x10 [ 1152.510329][T17490] ? selinux_sctp_bind_connect+0xe0/0x230 [ 1152.510351][T17490] __sctp_setsockopt_connectx+0x100/0x190 [ 1152.510375][T17490] sctp_setsockopt+0x46a9/0xb370 [ 1152.510393][T17490] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1152.510407][T17490] ? __fget_files+0x215/0x3d0 [ 1152.510429][T17490] ? selinux_socket_setsockopt+0x6a/0x80 [ 1152.510440][T17490] ? sock_common_setsockopt+0x2e/0xf0 [ 1152.510458][T17490] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1152.510478][T17490] do_sock_setsockopt+0xf3/0x1d0 [ 1152.510498][T17490] __sys_setsockopt+0x195/0x220 [ 1152.510516][T17490] __x64_sys_setsockopt+0xbd/0x160 [ 1152.510530][T17490] ? do_syscall_64+0xae/0x790 [ 1152.510549][T17490] ? lockdep_hardirqs_on+0x7d/0x110 [ 1152.510565][T17490] do_syscall_64+0x123/0x790 [ 1152.510582][T17490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.510594][T17490] RIP: 0033:0x7fc27859e159 [ 1152.510605][T17490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.510616][T17490] RSP: 002b:00007fc27950f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1152.510628][T17490] RAX: ffffffffffffffda RBX: 00007fc278826090 RCX: 00007fc27859e159 [ 1152.510636][T17490] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1152.510643][T17490] RBP: 00007fc27863506b R08: 000000000000001c R09: 0000000000000000 [ 1152.510650][T17490] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1152.510657][T17490] R13: 00007fc278826128 R14: 00007fc278826090 R15: 00007ffde2651158 [ 1152.510672][T17490] [ 1152.640966][ T5335] usb 8-1: USB disconnect, device number 21 [ 1152.909937][T17502] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x50 [ 1152.911710][ T5899] maxtcpc 0-0050: error -EIO: Failed to read TCPC_POWER_STATUS [ 1152.912412][T17502] i2c i2c-0: delete_device: Deleting device maxtcpc at 0x50 [ 1152.913370][ T5899] maxtcpc 0-0050: probe with driver maxtcpc failed with error -5 [ 1153.085380][T11520] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1153.248072][T11520] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1153.266928][T11520] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 1153.266961][T11520] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24834, setting to 1024 [ 1153.273712][T11520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1153.273735][T11520] usb 4-1: Product: syz [ 1153.273747][T11520] usb 4-1: Manufacturer: syz [ 1153.279033][T11520] hub 4-1:1.0: USB hub found [ 1153.493383][T17495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=17495 comm=syz.3.2946 [ 1154.891478][ T30] audit: type=1326 audit(1789832018.176:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17517 comm="syz.5.2954" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc27859e159 code=0x0 [ 1155.028515][T17527] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1156.433630][T11520] hub 4-1:1.0: config failed, can't read hub descriptor (err -22) [ 1156.451994][T11520] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input291 [ 1156.486608][T11520] usb 4-1: Failed to suspend device, error -71 [ 1156.487022][T11520] usb 4-1: USB disconnect, device number 114 [ 1156.835204][ T5335] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1156.892560][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1156.919599][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1156.927094][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1156.934755][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1156.936921][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1156.986558][ T5335] usb 6-1: Using ep0 maxpacket: 32 [ 1156.993544][ T5335] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1156.993588][ T5335] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1157.019443][ T5335] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1157.019472][ T5335] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1157.019492][ T5335] usb 6-1: config 14 has no interface number 0 [ 1157.019508][ T5335] usb 6-1: config 14 has no interface number 1 [ 1157.019577][ T5335] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1157.019599][ T5335] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1157.019622][ T5335] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1157.019647][ T5335] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1157.019673][ T5335] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 25088, setting to 1024 [ 1157.019716][ T5335] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.019740][ T5335] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1157.019757][ T5335] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1157.078708][ T5335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.078736][ T5335] usb 6-1: Product: syz [ 1157.078750][ T5335] usb 6-1: Manufacturer: syz [ 1157.078789][ T5335] usb 6-1: SerialNumber: syz [ 1157.249848][ T5599] syz_tun (unregistering): left allmulticast mode [ 1157.341590][T17543] bpf: Bad value for 'uid' [ 1157.569038][ T5335] legousbtower 6-1:14.57: interrupt endpoints not found [ 1157.828430][ T1429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.828465][ T1429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.153774][T17559] FAULT_INJECTION: forcing a failure. [ 1158.153774][T17559] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.153807][T17559] CPU: 0 UID: 0 PID: 17559 Comm: syz.2.2963 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.153833][T17559] Tainted: [L]=SOFTLOCKUP [ 1158.153840][T17559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1158.153851][T17559] Call Trace: [ 1158.153858][T17559] [ 1158.153866][T17559] dump_stack_lvl+0x100/0x190 [ 1158.153898][T17559] should_fail_ex.cold+0x5/0xa [ 1158.153926][T17559] should_failslab+0xc2/0x120 [ 1158.153951][T17559] __kmalloc_cache_noprof+0x91/0x6d0 [ 1158.153980][T17559] ? nf_tables_dump_flowtable_start+0xa1/0x180 [ 1158.154007][T17559] nf_tables_dump_flowtable_start+0xa1/0x180 [ 1158.154030][T17559] __netlink_dump_start+0x60e/0x990 [ 1158.154052][T17559] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 1158.154076][T17559] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 1158.154100][T17559] nf_tables_getflowtable+0x6d8/0x830 [ 1158.154130][T17559] ? __pfx_nf_tables_getflowtable+0x10/0x10 [ 1158.154155][T17559] ? net_generic+0x25/0x2a0 [ 1158.154179][T17559] ? __pfx_nf_tables_dump_flowtable_start+0x10/0x10 [ 1158.154198][T17559] ? __pfx_nf_tables_dump_flowtable+0x10/0x10 [ 1158.154225][T17559] ? __pfx_nf_tables_dump_flowtable_done+0x10/0x10 [ 1158.154257][T17559] ? __nla_parse+0x40/0x60 [ 1158.154285][T17559] ? __pfx_nf_tables_getflowtable+0x10/0x10 [ 1158.154318][T17559] nfnetlink_rcv_msg+0x557/0x11e0 [ 1158.154354][T17559] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1158.154384][T17559] ? __lock_acquire+0x5c0/0x1f40 [ 1158.154426][T17559] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1158.154462][T17559] netlink_rcv_skb+0x159/0x420 [ 1158.154484][T17559] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1158.154512][T17559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1158.154544][T17559] ? ns_capable+0xd2/0xf0 [ 1158.154567][T17559] nfnetlink_rcv+0x1b3/0x440 [ 1158.154594][T17559] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1158.154619][T17559] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1158.154645][T17559] netlink_unicast+0x585/0x850 [ 1158.154669][T17559] ? __pfx_netlink_unicast+0x10/0x10 [ 1158.154697][T17559] netlink_sendmsg+0x8b0/0xda0 [ 1158.154723][T17559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.154748][T17559] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1158.154773][T17559] ____sys_sendmsg+0xa4d/0xbe0 [ 1158.154800][T17559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.154822][T17559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.154856][T17559] ? lock_acquire+0x1d1/0x380 [ 1158.154875][T17559] ? get_pid_task+0x2a/0x250 [ 1158.154903][T17559] ___sys_sendmsg+0x190/0x1e0 [ 1158.154922][T17559] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.154938][T17559] ? get_pid_task+0x106/0x250 [ 1158.154969][T17559] ? find_held_lock+0x2b/0x80 [ 1158.155010][T17559] __sys_sendmsg+0x160/0x210 [ 1158.155035][T17559] ? __pfx___sys_sendmsg+0x10/0x10 [ 1158.155073][T17559] do_syscall_64+0x123/0x790 [ 1158.155104][T17559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.155123][T17559] RIP: 0033:0x7f1e8c39e159 [ 1158.155139][T17559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.155157][T17559] RSP: 002b:00007f1e8d299028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.155176][T17559] RAX: ffffffffffffffda RBX: 00007f1e8c625fa0 RCX: 00007f1e8c39e159 [ 1158.155189][T17559] RDX: 0000000020000984 RSI: 0000200000000700 RDI: 0000000000000003 [ 1158.155200][T17559] RBP: 00007f1e8d299090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.155212][T17559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.155223][T17559] R13: 00007f1e8c626038 R14: 00007f1e8c625fa0 R15: 00007ffead556d58 [ 1158.155249][T17559] [ 1158.246074][T17553] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1158.246273][T17553] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1158.246429][T17553] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1158.246573][T17553] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1158.246640][T17553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1158.704642][T17553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1158.714137][T17553] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1158.719304][T17553] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1158.763394][T17553] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1158.789019][ T1429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.789053][ T1429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.376893][T15428] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1159.435387][ T1429] team0: Port device netdevsim1 removed [ 1159.443514][ T1429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.443536][ T1429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.524923][T15428] usb 7-1: Using ep0 maxpacket: 32 [ 1159.525670][T15428] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1159.527146][T15428] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1159.527168][T15428] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.527185][T15428] usb 7-1: config 0 has no interface number 0 [ 1159.527218][T15428] usb 7-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1159.532834][T15428] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.532852][T15428] usb 7-1: Product: syz [ 1159.532862][T15428] usb 7-1: Manufacturer: syz [ 1159.532870][T15428] usb 7-1: SerialNumber: syz [ 1159.540986][T15428] usb 7-1: config 0 descriptor?? [ 1159.553764][T15428] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1159.556004][T15428] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 1159.661868][ T5335] legousbtower 6-1:14.228: get version request failed: -71 [ 1159.662032][ T5335] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 1159.676379][ T5335] usb 6-1: USB disconnect, device number 70 [ 1159.805702][T17589] CacheFiles: Failed to register: -95 [ 1159.827371][T17579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.830618][T17579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.134913][T11551] Bluetooth: hci2: command 0x0c1a tx timeout [ 1160.281031][ T1429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.281150][ T1429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.297159][T11551] Bluetooth: hci4: command 0x0c1a tx timeout [ 1160.297232][T11551] Bluetooth: hci5: command 0x0c1a tx timeout [ 1160.297255][T11551] Bluetooth: hci0: command 0x0406 tx timeout [ 1160.537873][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.537917][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.537994][T17538] bridge_slave_0: entered allmulticast mode [ 1160.541224][T17538] bridge_slave_0: entered promiscuous mode [ 1160.564068][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.564137][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.564277][T17538] bridge_slave_1: entered allmulticast mode [ 1160.566101][T17538] bridge_slave_1: entered promiscuous mode [ 1160.638803][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.657510][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.684874][T10792] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1160.718969][T17538] team0: Port device team_slave_0 added [ 1160.725867][T17538] team0: Port device team_slave_1 added [ 1160.775129][ T5613] Bluetooth: hci3: command 0x041b tx timeout [ 1160.824093][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.824107][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.824126][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.826110][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.826139][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.826159][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.869631][T10792] usb 8-1: Using ep0 maxpacket: 16 [ 1160.877110][T10792] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1160.928844][T10792] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.928888][T10792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1160.928915][T10792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1160.928933][T10792] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1160.928950][T10792] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1160.960857][T10792] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1160.960882][T10792] usb 8-1: Manufacturer: syz [ 1160.985770][T10792] usb 8-1: config 0 descriptor?? [ 1161.116300][T17538] hsr_slave_0: entered promiscuous mode [ 1161.121420][ T5796] usb 7-1: USB disconnect, device number 59 [ 1161.127389][T17538] hsr_slave_1: entered promiscuous mode [ 1161.133905][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 1161.133925][T17538] Cannot create hsr debugfs directory [ 1161.168610][T17602] warn_alloc: 1 callbacks suppressed [ 1161.168626][T17602] syz.2.2971: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1161.168704][T17602] CPU: 1 UID: 0 PID: 17602 Comm: syz.2.2971 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.168721][T17602] Tainted: [L]=SOFTLOCKUP [ 1161.168725][T17602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1161.168732][T17602] Call Trace: [ 1161.168736][T17602] [ 1161.168741][T17602] dump_stack_lvl+0x100/0x190 [ 1161.168764][T17602] warn_alloc.cold+0x9e/0xb2 [ 1161.168787][T17602] ? __pfx_warn_alloc+0x10/0x10 [ 1161.168812][T17602] ? avc_has_extended_perms+0x201/0x1080 [ 1161.168840][T17602] ? avc_has_extended_perms+0x33a/0x1080 [ 1161.168861][T17602] ? avc_has_extended_perms+0x33a/0x1080 [ 1161.168882][T17602] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1161.168899][T17602] ? rcu_is_watching+0x13/0xc0 [ 1161.168917][T17602] ? trace_contention_end+0x126/0x160 [ 1161.168942][T17602] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1161.168962][T17602] ? kasan_quarantine_put+0x104/0x240 [ 1161.168984][T17602] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1161.169004][T17602] ? __pfx___mutex_lock+0x10/0x10 [ 1161.169022][T17602] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1161.169041][T17602] ? tomoyo_path_number_perm+0x188/0x580 [ 1161.169057][T17602] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1161.169077][T17602] __vmalloc_node_noprof+0xad/0xf0 [ 1161.169101][T17602] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1161.169124][T17602] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1161.169144][T17602] ? do_vfs_ioctl+0x226/0x13e0 [ 1161.169159][T17602] dvb_usercopy+0x167/0x340 [ 1161.169177][T17602] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1161.169190][T17602] ? __pfx_dvb_usercopy+0x10/0x10 [ 1161.169209][T17602] ? __fget_files+0x34/0x3d0 [ 1161.169243][T17602] ? selinux_file_ioctl+0x13b/0x290 [ 1161.169263][T17602] ? selinux_file_ioctl+0xb6/0x290 [ 1161.169290][T17602] dvb_demux_ioctl+0x29/0x40 [ 1161.169301][T17602] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1161.169312][T17602] __x64_sys_ioctl+0x18e/0x210 [ 1161.169326][T17602] do_syscall_64+0x123/0x790 [ 1161.169344][T17602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.169362][T17602] RIP: 0033:0x7f1e8c39e159 [ 1161.169379][T17602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.169396][T17602] RSP: 002b:00007f1e8d299028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.169414][T17602] RAX: ffffffffffffffda RBX: 00007f1e8c625fa0 RCX: 00007f1e8c39e159 [ 1161.169427][T17602] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000b [ 1161.169436][T17602] RBP: 00007f1e8c43506b R08: 0000000000000000 R09: 0000000000000000 [ 1161.169443][T17602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.169450][T17602] R13: 00007f1e8c626038 R14: 00007f1e8c625fa0 R15: 00007ffead556d58 [ 1161.169465][T17602] [ 1161.169483][T17602] Mem-Info: [ 1161.169489][T17602] active_anon:33273 inactive_anon:0 isolated_anon:0 [ 1161.169489][T17602] active_file:2704 inactive_file:63660 isolated_file:0 [ 1161.169489][T17602] unevictable:0 dirty:592 writeback:0 [ 1161.169489][T17602] slab_reclaimable:12894 slab_unreclaimable:100304 [ 1161.169489][T17602] mapped:35073 shmem:23238 pagetables:1576 [ 1161.169489][T17602] sec_pagetables:0 bounce:0 [ 1161.169489][T17602] kernel_misc_reclaimable:0 [ 1161.169489][T17602] free:1249895 free_pcp:19904 free_cma:0 [ 1161.169536][T17602] Node 0 active_anon:133092kB inactive_anon:0kB active_file:10816kB inactive_file:254444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140292kB dirty:2364kB writeback:0kB shmem:92952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13244kB pagetables:6172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1161.169583][T17602] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1161.169628][T17602] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.169676][T17602] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 1161.169712][T17602] Node 0 DMA32 free:1039856kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:133092kB inactive_anon:0kB active_file:10816kB inactive_file:254444kB unevictable:0kB writepending:2364kB zspages:0kB present:3129332kB managed:2530492kB mlocked:0kB bounce:0kB free_pcp:79616kB local_pcp:34076kB free_cma:0kB [ 1161.169760][T17602] lowmem_reserve[]: 0 0 0 0 0 [ 1161.169779][T17602] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.169825][T17602] lowmem_reserve[]: 0 0 0 0 0 [ 1161.169870][T17602] Node 1 Normal free:3944396kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.169914][T17602] lowmem_reserve[]: 0 0 0 0 0 [ 1161.169935][T17602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1161.170061][T17602] Node 0 DMA32: 3860*4kB (UME) 1833*8kB (UM) 2351*16kB (UME) 813*32kB (UME) 1452*64kB (UME) 735*128kB (UME) 191*256kB (UM) 75*512kB (UME) 32*1024kB (UME) 6*2048kB (UM) 153*4096kB (UM) = 1039784kB [ 1161.170208][T17602] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1161.170295][T17602] Node 1 Normal: 9*4kB (UM) 9*8kB (UM) 6*16kB (UM) 4*32kB (UM) 8*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944396kB [ 1161.170424][T17602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1161.170440][T17602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1161.170469][T17602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1161.170479][T17602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1161.170489][T17602] 89598 total pagecache pages [ 1161.170493][T17602] 0 pages in swap cache [ 1161.170498][T17602] Free swap = 124996kB [ 1161.170503][T17602] Total swap = 124996kB [ 1161.170508][T17602] 2097051 pages RAM [ 1161.170512][T17602] 0 pages HighMem/MovableOnly [ 1161.170516][T17602] 432795 pages reserved [ 1161.170523][T17602] 0 pages cma reserved [ 1161.439655][T10792] rc_core: IR keymap rc-hauppauge not found [ 1161.439674][T10792] Registered IR keymap rc-empty [ 1161.439777][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.473966][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.486203][T10792] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1161.585815][T10792] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input293 [ 1161.615661][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.648652][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.688709][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.725117][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.766695][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.794930][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.817393][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.848071][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.967181][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1161.984919][T10792] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1162.023819][T10792] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1162.023842][T10792] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1162.052870][T10792] usb 8-1: USB disconnect, device number 22 [ 1162.374749][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 1162.659528][T17622] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1162.828455][ T30] audit: type=1400 audit(1789832026.116:1196): avc: denied { write } for pid=17605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.865787][ T5613] Bluetooth: hci3: command 0x041b tx timeout [ 1163.239870][ T30] audit: type=1400 audit(1789832026.526:1197): avc: denied { write } for pid=17632 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1163.303648][ T1429] gretap0 (unregistering): left promiscuous mode [ 1163.361569][ T1429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.376568][ T1429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.379665][ T1429] bond0 (unregistering): Released all slaves [ 1163.641373][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1163.672202][T17636] netlink: 'syz.2.2976': attribute type 21 has an invalid length. [ 1163.672225][T17636] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2976'. [ 1163.702388][T17637] netlink: 'syz.6.2975': attribute type 21 has an invalid length. [ 1163.702411][T17637] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2975'. [ 1163.723389][T17638] netlink: 'syz.2.2976': attribute type 21 has an invalid length. [ 1163.723410][T17638] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2976'. [ 1163.742882][T17636] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2976'. [ 1163.750662][T17637] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2975'. [ 1163.750927][T17638] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2976'. [ 1163.751981][T17637] netlink: 'syz.6.2975': attribute type 21 has an invalid length. [ 1163.751995][T17637] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2975'. [ 1163.752032][T17637] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2975'. [ 1164.054043][ T5335] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1164.059813][T10792] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1164.064780][T11520] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1164.087347][ T1429] veth1_to_team: left promiscuous mode [ 1164.107192][ T1429] hsr_slave_0: left promiscuous mode [ 1164.112919][ T1429] hsr_slave_1: left promiscuous mode [ 1164.113784][ T1429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.113823][ T1429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.135237][ T1429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.135256][ T1429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.161615][ T1429] veth1_macvtap: left promiscuous mode [ 1164.161648][ T1429] veth0_macvtap: left promiscuous mode [ 1164.161736][ T1429] veth1_vlan: left promiscuous mode [ 1164.161787][ T1429] veth0_vlan: left promiscuous mode [ 1164.205582][ T5335] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1164.209432][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.209458][ T5335] usb 3-1: Product: syz [ 1164.209473][ T5335] usb 3-1: Manufacturer: syz [ 1164.209489][ T5335] usb 3-1: SerialNumber: syz [ 1164.212891][ T5335] usb 3-1: config 0 descriptor?? [ 1164.218851][T10792] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1164.223285][T10792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.223307][T10792] usb 7-1: Product: syz [ 1164.223325][T10792] usb 7-1: Manufacturer: syz [ 1164.223338][T10792] usb 7-1: SerialNumber: syz [ 1164.236153][T10792] usb 7-1: config 0 descriptor?? [ 1164.264866][ T5797] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1164.300997][T11520] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1164.311166][T11520] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1164.311224][T11520] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.311260][T11520] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.427204][ T5797] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1164.428103][ T5797] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1164.428133][ T5797] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.428154][ T5797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1164.428181][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.440387][ T5797] usb 6-1: config 0 descriptor?? [ 1164.465066][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 1164.482587][ T30] audit: type=1400 audit(1789832027.766:1198): avc: denied { write } for pid=17644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.556285][T11520] usb 8-1: usb_control_msg returned -32 [ 1164.556363][T11520] usbtmc 8-1:16.0: can't read capabilities [ 1164.597590][ T30] audit: type=1400 audit(1789832027.886:1199): avc: denied { write } for pid=17655 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.660687][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2975'. [ 1164.664114][T17637] netlink: 'syz.6.2975': attribute type 1 has an invalid length. [ 1164.664137][T17637] netlink: 'syz.6.2975': attribute type 2 has an invalid length. [ 1164.664149][T17637] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2975'. [ 1164.705377][T10792] usb 7-1: Firmware version (0.0) predates our first public release. [ 1164.705418][T10792] usb 7-1: Please update to version 0.2 or newer [ 1164.713976][T17636] netlink: 'syz.2.2976': attribute type 1 has an invalid length. [ 1164.713995][T17636] netlink: 'syz.2.2976': attribute type 2 has an invalid length. [ 1164.755559][ T5335] usb 3-1: Firmware version (0.0) predates our first public release. [ 1164.755576][ T5335] usb 3-1: Please update to version 0.2 or newer [ 1164.763089][T17657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.763493][T17657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.808660][ T1429] team0 (unregistering): Port device team_slave_1 removed [ 1164.828159][ T1429] team0 (unregistering): Port device team_slave_0 removed [ 1164.913955][ T5797] usbhid 6-1:0.0: can't add hid device: -71 [ 1164.914020][ T5797] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1164.932319][ T5797] usb 6-1: USB disconnect, device number 71 [ 1164.945731][ T5613] Bluetooth: hci3: command 0x041b tx timeout [ 1165.146448][ T5264] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1165.185500][ T5335] usb 3-1: USB disconnect, device number 112 [ 1165.189519][T10792] usb 7-1: USB disconnect, device number 60 [ 1165.719322][T17671] CacheFiles: Failed to register: -95 [ 1166.497936][T17676] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x50 [ 1166.501104][T17676] i2c i2c-0: delete_device: Deleting device maxtcpc at 0x50 [ 1166.536748][ T5899] maxtcpc 0-0050: error -EIO: Failed to read TCPC_POWER_STATUS [ 1166.537324][ T5899] maxtcpc 0-0050: probe with driver maxtcpc failed with error -5 [ 1166.569105][ T30] audit: type=1400 audit(1789832029.846:1200): avc: denied { read } for pid=17677 comm="syz.5.2982" path="socket:[57210]" dev="sockfs" ino=57210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1167.015890][ T5613] Bluetooth: hci3: command 0x041b tx timeout [ 1167.284047][T17698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1167.297415][ T30] audit: type=1400 audit(1789832030.596:1201): avc: denied { accept } for pid=17696 comm="syz.2.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1167.350006][T17695] FAULT_INJECTION: forcing a failure. [ 1167.350006][T17695] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.350043][T17695] CPU: 1 UID: 0 PID: 17695 Comm: syz.6.2985 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.350076][T17695] Tainted: [L]=SOFTLOCKUP [ 1167.350084][T17695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1167.350097][T17695] Call Trace: [ 1167.350106][T17695] [ 1167.350114][T17695] dump_stack_lvl+0x100/0x190 [ 1167.350149][T17695] should_fail_ex.cold+0x5/0xa [ 1167.350178][T17695] should_failslab+0xc2/0x120 [ 1167.350205][T17695] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1167.350227][T17695] ? __pfx_map_id_range_down+0x10/0x10 [ 1167.350249][T17695] ? rcu_is_watching+0x13/0xc0 [ 1167.350276][T17695] ? security_inode_alloc+0x3b/0x2c0 [ 1167.350303][T17695] security_inode_alloc+0x3b/0x2c0 [ 1167.350325][T17695] inode_init_always_gfp+0xc6f/0xfb0 [ 1167.350363][T17695] alloc_inode+0x8e/0x250 [ 1167.350385][T17695] sock_alloc+0x44/0x280 [ 1167.350413][T17695] ? security_socket_create+0x7f/0x250 [ 1167.350449][T17695] __sock_create+0xc2/0x860 [ 1167.350487][T17695] __sys_socket+0x14d/0x260 [ 1167.350509][T17695] ? __pfx___sys_socket+0x10/0x10 [ 1167.350537][T17695] __x64_sys_socket+0x72/0xb0 [ 1167.350556][T17695] ? lockdep_hardirqs_on+0x7d/0x110 [ 1167.350586][T17695] do_syscall_64+0x123/0x790 [ 1167.350618][T17695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.350639][T17695] RIP: 0033:0x7ff5d9d9e159 [ 1167.350657][T17695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.350677][T17695] RSP: 002b:00007ff5dabdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1167.350697][T17695] RAX: ffffffffffffffda RBX: 00007ff5da025fa0 RCX: 00007ff5d9d9e159 [ 1167.350711][T17695] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1167.350724][T17695] RBP: 00007ff5d9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1167.350736][T17695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.350748][T17695] R13: 00007ff5da026038 R14: 00007ff5da025fa0 R15: 00007fff730b6718 [ 1167.350776][T17695] [ 1167.350821][T17695] socket: no more sockets [ 1167.842753][ T30] audit: type=1400 audit(1789832031.126:1202): avc: denied { write } for pid=17664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1168.054134][T17709] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1168.267646][ T30] audit: type=1400 audit(1789832031.556:1203): avc: denied { write } for pid=17711 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1169.562150][ T5613] Bluetooth: hci3: command 0x041b tx timeout [ 1169.938233][T17538] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1169.956699][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1169.957201][T17538] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1169.985978][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1169.986734][T17538] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1170.018692][ T1082] usb 8-1: USB disconnect, device number 23 [ 1170.019122][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1170.019999][T17538] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1170.056472][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1170.135422][ T5335] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1170.240099][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.272931][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.285169][ T5335] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1170.286243][ T5335] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1170.286270][ T5335] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.286307][ T5335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.339723][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.339808][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.356571][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.356649][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.518726][ T5335] usb 7-1: usb_control_msg returned -32 [ 1170.518788][ T5335] usbtmc 7-1:16.0: can't read capabilities [ 1170.798348][T17722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.842010][T17722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.248406][ T30] audit: type=1400 audit(1789832034.537:1204): avc: denied { write } for pid=17723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1171.327333][T17748] openvswitch: netlink: EtherType 0 is less than min 600 [ 1171.572612][ T30] audit: type=1400 audit(1789832034.857:1205): avc: denied { write } for pid=17752 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1171.584258][ T5613] Bluetooth: hci3: command 0x041b tx timeout [ 1171.605999][T10792] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1171.759251][T10792] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1171.760163][T10792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.760185][T10792] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1171.760224][T10792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.770880][T10792] usb 6-1: config 0 descriptor?? [ 1171.816303][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.816363][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.943867][T17538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.069337][T17763] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1172.522142][T17766] i2c i2c-0: delete_device: Can't find device in list [ 1172.710442][T17538] veth0_vlan: entered promiscuous mode [ 1172.774353][T17538] veth1_vlan: entered promiscuous mode [ 1172.806661][T17538] veth0_macvtap: entered promiscuous mode [ 1172.815495][T17538] veth1_macvtap: entered promiscuous mode [ 1172.827301][T17538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.859225][T17538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.915848][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.917103][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.008848][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.056396][ T5899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.093859][ T5797] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1173.159088][T10792] Bluetooth: Can't get version to change to load ram patch err [ 1173.159107][T10792] Bluetooth: Loading sysconfig file failed [ 1173.159130][T10792] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 1173.189153][T10792] usb 6-1: USB disconnect, device number 72 [ 1173.249602][ T5797] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1173.253063][ T5797] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1173.253094][ T5797] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1173.253117][ T5797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.298609][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.298631][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.398327][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.398347][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.505890][ T5797] usb 8-1: usb_control_msg returned -32 [ 1173.505932][ T5797] usbtmc 8-1:16.0: can't read capabilities [ 1173.556387][ T30] audit: type=1400 audit(1789832036.837:1206): avc: denied { write } for pid=17769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.610105][T17771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.616953][T17771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.807644][ T30] audit: type=1400 audit(1789832037.097:1207): avc: denied { write } for pid=17791 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1174.130823][ T5797] usb 7-1: USB disconnect, device number 61 [ 1175.205161][ T30] audit: type=1400 audit(1789832038.497:1208): avc: denied { write } for pid=17794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1175.359991][ T30] audit: type=1400 audit(1789832038.647:1209): avc: denied { write } for pid=17816 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1176.116749][T17836] CacheFiles: Failed to register: -95 [ 1176.163333][ T5797] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1176.326312][ T5797] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1176.330513][ T5797] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.332029][ T5797] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1176.332221][ T5797] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1176.332251][ T5797] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1176.333204][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.113522][T17845] Cannot find del_set index 2 as target [ 1178.057637][T17828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.058048][T17828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.096107][T17828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.096502][T17828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.107937][T17847] bpf: Bad value for 'uid' [ 1178.116303][ T30] audit: type=1400 audit(1789832041.407:1210): avc: denied { getopt } for pid=17826 comm="syz.5.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1178.162841][ T5797] gud 6-1:1.0: Failed to add properties (error=-71) [ 1178.162873][ T5797] gud 6-1:1.0: probe with driver gud failed with error -71 [ 1179.294457][ T1229] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1179.374821][ T5797] usb 6-1: USB disconnect, device number 73 [ 1179.426005][ T1229] usb 4-1: device descriptor read/64, error -71 [ 1179.487001][T17855] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1179.522321][T17858] tunl0: Master is either lo or non-ether device [ 1179.539706][ T30] audit: type=1400 audit(1789832042.817:1211): avc: denied { write } for pid=17821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1179.663953][ T1229] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1179.726010][ T30] audit: type=1400 audit(1789832043.017:1212): avc: denied { write } for pid=17862 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1179.814365][ T1229] usb 4-1: device descriptor read/64, error -71 [ 1179.817248][T11520] usb 8-1: USB disconnect, device number 24 [ 1179.895242][T17861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1179.897991][T17861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1179.900189][T17861] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1179.900862][T17861] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1179.901044][T17861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1179.937296][ T1229] usb usb4-port1: attempt power cycle [ 1181.746612][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 1181.973805][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1181.976576][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 1181.976771][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1182.006403][ T5613] Bluetooth: hci3: command 0x041b tx timeout [ 1183.101467][T17881] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1183.263674][T17872] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1183.514882][T17894] Cannot find del_set index 2 as target [ 1184.423553][ T5797] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1184.583593][ T1082] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1184.601710][ T5797] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 1184.680068][ T5797] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1184.680099][ T5797] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1184.749525][T17900] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1184.764796][ T1082] usb 8-1: Using ep0 maxpacket: 32 [ 1184.780694][ T5797] usb 6-1: string descriptor 0 read error: -22 [ 1184.780801][ T5797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.878583][ T1082] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1184.893556][ T1229] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1184.934980][ T1082] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1185.011870][ T1082] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1185.011897][ T1082] usb 8-1: Product: syz [ 1185.011914][ T1082] usb 8-1: Manufacturer: syz [ 1185.011928][ T1082] usb 8-1: SerialNumber: syz [ 1185.260712][ T1229] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1185.377998][ T1229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.378047][ T1229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1185.378073][ T1229] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1185.378110][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.440127][ T5797] etas_es58x 6-1:1.0: Starting (null) (null) (Serial Number (null)) [ 1185.440249][ T5797] etas_es58x 6-1:1.0: could not retrieve the product info string [ 1185.743115][ T1082] usb 8-1: config 0 descriptor?? [ 1185.754558][T17896] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1185.755666][ T1082] hub 8-1:0.0: bad descriptor, ignoring hub [ 1185.755686][ T1082] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1185.847004][ T5797] usb 6-1: USB disconnect, device number 74 [ 1186.024035][ T5797] etas_es58x 6-1:1.0: Disconnecting (null) (null) [ 1186.119419][T17910] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1186.873975][ T1082] usb 8-1: USB disconnect, device number 25 [ 1187.040448][ T30] audit: type=1400 audit(1789832050.327:1213): avc: denied { cmd } for pid=17927 comm="iou-wrk-17929" path="socket:[58872]" dev="sockfs" ino=58872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1187.084499][ T1229] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 1187.084556][ T1229] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1187.084569][ T1229] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1187.178651][ T1229] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 1187.191598][ T1229] usb 4-1: USB disconnect, device number 118 [ 1187.606701][T17950] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1188.201510][T17953] Cannot find del_set index 2 as target [ 1189.073625][ T30] audit: type=1400 audit(1789832052.358:1214): avc: denied { write } for pid=17922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.128541][T17959] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1189.128569][T17959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1189.128642][T17959] vhci_hcd vhci_hcd.0: Device attached [ 1189.263086][T17963] vhci_hcd: connection closed [ 1189.281398][ T3302] vhci_hcd vhci_hcd.2: stop threads [ 1189.281424][ T3302] vhci_hcd vhci_hcd.2: release socket [ 1189.281441][ T3302] vhci_hcd vhci_hcd.2: disconnect device [ 1189.396237][T17971] Cannot find del_set index 2 as target [ 1189.411505][T17971] overlayfs: failed to resolve './bus': -2 [ 1189.417060][ T1082] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1189.553949][ T5797] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1189.575241][ T1082] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 1189.600024][ T1082] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1189.600661][ T1082] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1189.630532][ T1082] usb 4-1: string descriptor 0 read error: -22 [ 1189.640688][ T1082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.723430][ T5797] usb 7-1: Using ep0 maxpacket: 32 [ 1189.729281][ T5797] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1189.774060][ T1082] etas_es58x 4-1:1.0: Starting (null) (null) (Serial Number (null)) [ 1189.776469][ T5797] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.776569][ T5797] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.779754][ T1082] etas_es58x 4-1:1.0: could not retrieve the product info string [ 1189.863812][ T5797] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1189.863869][ T5797] usb 7-1: Product: syz [ 1189.863930][ T5797] usb 7-1: Manufacturer: syz [ 1190.098589][ T5797] hub 7-1:4.0: USB hub found [ 1190.241212][ T1082] usb 4-1: USB disconnect, device number 119 [ 1190.259748][ T1082] etas_es58x 4-1:1.0: Disconnecting (null) (null) [ 1190.309091][ T5797] hub 7-1:4.0: 2 ports detected [ 1190.326267][ T30] audit: type=1400 audit(1789832053.618:1215): avc: denied { write } for pid=17970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1190.521247][T17980] __nla_validate_parse: 3 callbacks suppressed [ 1190.521270][T17980] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3038'. [ 1190.741413][T17969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.741816][T17969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.972922][T17994] fuse: Bad value for 'group_id' [ 1190.972943][T17994] fuse: Bad value for 'group_id' [ 1191.053208][ T5335] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1191.058599][ T30] audit: type=1326 audit(1789832054.348:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17993 comm="syz.7.3041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86cab9e159 code=0x0 [ 1191.120740][ T30] audit: type=1400 audit(1789832054.408:1217): avc: denied { write } for pid=17981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.184687][ T5797] hub 7-1:4.0: set hub depth failed [ 1191.190704][ T5797] usb 7-1: USB disconnect, device number 62 [ 1191.199095][ T30] audit: type=1326 audit(1789832054.488:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.2.3043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e8c39e159 code=0x0 [ 1191.249718][ T5335] usb 6-1: New USB device found, idVendor=05c6, idProduct=9235, bcdDevice=32.ab [ 1191.251062][ T5335] usb 6-1: config 127 has an invalid interface number: 174 but max is 2 [ 1191.251085][ T5335] usb 6-1: config 127 has an invalid interface number: 78 but max is 2 [ 1191.251102][ T5335] usb 6-1: config 127 has an invalid interface number: 97 but max is 2 [ 1191.251170][ T5335] usb 6-1: config 127 has no interface number 0 [ 1191.251207][ T5335] usb 6-1: config 127 has no interface number 1 [ 1191.251224][ T5335] usb 6-1: config 127 has no interface number 2 [ 1191.251263][ T5335] usb 6-1: config 127 interface 174 has no altsetting 0 [ 1191.251281][ T5335] usb 6-1: config 127 interface 78 has no altsetting 0 [ 1191.251299][ T5335] usb 6-1: config 127 interface 97 has no altsetting 0 [ 1191.258112][ T5335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.258140][ T5335] usb 6-1: Product: syz [ 1191.258154][ T5335] usb 6-1: Manufacturer: syz [ 1191.258167][ T5335] usb 6-1: SerialNumber: syz [ 1191.385030][ T30] audit: type=1400 audit(1789832054.678:1219): avc: denied { write } for pid=18013 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.508423][T18012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1191.509897][T18012] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1191.510342][T18012] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1191.511969][T18012] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1191.512556][T18012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1191.604835][T17986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.605337][T17986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.630651][ T5335] usb 6-1: selecting invalid altsetting 0 [ 1191.630674][ T5335] usb 6-1: Could not set interface, error -22 [ 1191.634345][ T5335] usb 6-1: USB disconnect, device number 75 [ 1193.386920][T18034] CacheFiles: Failed to register: -95 [ 1193.470422][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 1193.574963][T11551] Bluetooth: hci4: command 0x0c1a tx timeout [ 1193.574965][ T5613] Bluetooth: hci3: command 0x041b tx timeout [ 1193.575002][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 1193.575006][T11551] Bluetooth: hci0: command 0x0406 tx timeout [ 1195.807876][T18028] Process accounting resumed [ 1195.949927][T18045] FAULT_INJECTION: forcing a failure. [ 1195.949927][T18045] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.949963][T18045] CPU: 0 UID: 0 PID: 18045 Comm: syz.3.3051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.949994][T18045] Tainted: [L]=SOFTLOCKUP [ 1195.950003][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1195.950016][T18045] Call Trace: [ 1195.950023][T18045] [ 1195.950032][T18045] dump_stack_lvl+0x100/0x190 [ 1195.950069][T18045] should_fail_ex.cold+0x5/0xa [ 1195.950098][T18045] should_failslab+0xc2/0x120 [ 1195.950125][T18045] __kmalloc_cache_noprof+0x91/0x6d0 [ 1195.950157][T18045] ? sctp_association_new+0xbb/0x2990 [ 1195.950186][T18045] sctp_association_new+0xbb/0x2990 [ 1195.950216][T18045] sctp_connect_new_asoc+0x1a8/0x770 [ 1195.950244][T18045] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1195.950273][T18045] ? __ipv6_addr_type+0xe8/0x2e0 [ 1195.950299][T18045] ? __ipv6_addr_type+0xe8/0x2e0 [ 1195.950329][T18045] __sctp_connect+0x3e7/0xc70 [ 1195.950361][T18045] ? __pfx___sctp_connect+0x10/0x10 [ 1195.950387][T18045] ? selinux_sctp_bind_connect+0xe0/0x230 [ 1195.950417][T18045] __sctp_setsockopt_connectx+0x100/0x190 [ 1195.950446][T18045] sctp_setsockopt+0x46a9/0xb370 [ 1195.950475][T18045] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1195.950498][T18045] ? __fget_files+0x215/0x3d0 [ 1195.950526][T18045] ? selinux_socket_setsockopt+0x6a/0x80 [ 1195.950545][T18045] ? sock_common_setsockopt+0x2e/0xf0 [ 1195.950575][T18045] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1195.950613][T18045] do_sock_setsockopt+0xf3/0x1d0 [ 1195.950647][T18045] __sys_setsockopt+0x195/0x220 [ 1195.950676][T18045] __x64_sys_setsockopt+0xbd/0x160 [ 1195.950700][T18045] ? do_syscall_64+0xae/0x790 [ 1195.950729][T18045] ? lockdep_hardirqs_on+0x7d/0x110 [ 1195.950756][T18045] do_syscall_64+0x123/0x790 [ 1195.950787][T18045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.950809][T18045] RIP: 0033:0x7fb75799e159 [ 1195.950826][T18045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.950845][T18045] RSP: 002b:00007fb7588f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1195.950865][T18045] RAX: ffffffffffffffda RBX: 00007fb757c26090 RCX: 00007fb75799e159 [ 1195.950878][T18045] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1195.950890][T18045] RBP: 00007fb757a3506b R08: 000000000000001c R09: 0000000000000000 [ 1195.950902][T18045] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1195.950913][T18045] R13: 00007fb757c26128 R14: 00007fb757c26090 R15: 00007ffd950d7248 [ 1195.950940][T18045] [ 1196.643360][T18052] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1197.029585][T18057] netlink: 'syz.2.3053': attribute type 21 has an invalid length. [ 1197.029622][T18057] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1197.029745][T18057] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1197.085910][T18055] netlink: 'syz.2.3053': attribute type 21 has an invalid length. [ 1197.085940][T18055] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1197.086088][T18055] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1197.341709][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1197.364071][T18055] netlink: 'syz.2.3053': attribute type 1 has an invalid length. [ 1197.364091][T18055] netlink: 'syz.2.3053': attribute type 2 has an invalid length. [ 1197.364102][T18055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1200.103947][ T52] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1200.372496][T18081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1200.372909][T18081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1200.373017][T18081] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1200.373139][T18081] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1200.373260][T18081] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1200.537868][T18088] netlink: 'syz.5.3058': attribute type 21 has an invalid length. [ 1200.537890][T18088] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3058'. [ 1200.537934][T18088] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3058'. [ 1200.538749][T18088] netlink: 'syz.5.3058': attribute type 21 has an invalid length. [ 1200.538763][T18088] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3058'. [ 1200.538799][T18088] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3058'. [ 1200.674069][T18090] CacheFiles: Failed to register: -95 [ 1201.479266][T11520] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1201.577895][T18087] Process accounting resumed [ 1201.631149][ T6931] maxtcpc 0-0050: error -EIO: Failed to read TCPC_POWER_STATUS [ 1201.631714][ T6931] maxtcpc 0-0050: probe with driver maxtcpc failed with error -5 [ 1201.631992][T18095] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x50 [ 1201.633734][T11520] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1201.636817][T11520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.636838][T11520] usb 6-1: Product: syz [ 1201.636851][T11520] usb 6-1: Manufacturer: syz [ 1201.636864][T11520] usb 6-1: SerialNumber: syz [ 1201.639239][T11520] usb 6-1: config 0 descriptor?? [ 1201.654811][T18095] i2c i2c-0: delete_device: Deleting device maxtcpc at 0x50 [ 1201.702671][T15428] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1201.766870][T18100] FAULT_INJECTION: forcing a failure. [ 1201.766870][T18100] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.766906][T18100] CPU: 0 UID: 0 PID: 18100 Comm: syz.2.3064 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.766934][T18100] Tainted: [L]=SOFTLOCKUP [ 1201.766942][T18100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1201.766954][T18100] Call Trace: [ 1201.766961][T18100] [ 1201.766969][T18100] dump_stack_lvl+0x100/0x190 [ 1201.767003][T18100] should_fail_ex.cold+0x5/0xa [ 1201.767033][T18100] should_failslab+0xc2/0x120 [ 1201.767060][T18100] __kmalloc_cache_noprof+0x91/0x6d0 [ 1201.767090][T18100] ? sctp_association_new+0xbb/0x2990 [ 1201.767118][T18100] sctp_association_new+0xbb/0x2990 [ 1201.767148][T18100] sctp_connect_new_asoc+0x1a8/0x770 [ 1201.767174][T18100] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1201.767201][T18100] ? __ipv6_addr_type+0xe8/0x2e0 [ 1201.767227][T18100] ? __ipv6_addr_type+0xe8/0x2e0 [ 1201.767255][T18100] __sctp_connect+0x3e7/0xc70 [ 1201.767286][T18100] ? __pfx___sctp_connect+0x10/0x10 [ 1201.767311][T18100] ? selinux_sctp_bind_connect+0xe0/0x230 [ 1201.767339][T18100] __sctp_setsockopt_connectx+0x100/0x190 [ 1201.767367][T18100] sctp_setsockopt+0x46a9/0xb370 [ 1201.767396][T18100] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1201.767420][T18100] ? __fget_files+0x215/0x3d0 [ 1201.767450][T18100] ? selinux_socket_setsockopt+0x6a/0x80 [ 1201.767469][T18100] ? sock_common_setsockopt+0x2e/0xf0 [ 1201.767498][T18100] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1201.767527][T18100] do_sock_setsockopt+0xf3/0x1d0 [ 1201.767557][T18100] __sys_setsockopt+0x195/0x220 [ 1201.767592][T18100] __x64_sys_setsockopt+0xbd/0x160 [ 1201.767615][T18100] ? do_syscall_64+0xae/0x790 [ 1201.767643][T18100] ? lockdep_hardirqs_on+0x7d/0x110 [ 1201.767672][T18100] do_syscall_64+0x123/0x790 [ 1201.767704][T18100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.767725][T18100] RIP: 0033:0x7f1e8c39e159 [ 1201.767743][T18100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.767762][T18100] RSP: 002b:00007f1e8d278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1201.767783][T18100] RAX: ffffffffffffffda RBX: 00007f1e8c626090 RCX: 00007f1e8c39e159 [ 1201.767796][T18100] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1201.767809][T18100] RBP: 00007f1e8c43506b R08: 000000000000001c R09: 0000000000000000 [ 1201.767821][T18100] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1201.767834][T18100] R13: 00007f1e8c626128 R14: 00007f1e8c626090 R15: 00007ffead556d58 [ 1201.767861][T18100] [ 1201.853714][ T30] audit: type=1326 audit(1789832065.138:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18098 comm="syz.3.3066" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb75799e159 code=0x0 [ 1201.863561][T15428] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1201.864892][T15428] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1201.864915][T15428] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1201.864969][T15428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.062098][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3058'. [ 1202.079823][T15428] usb 7-1: usb_control_msg returned -32 [ 1202.079860][T15428] usbtmc 7-1:16.0: can't read capabilities [ 1202.128896][T18106] netlink: 'syz.5.3058': attribute type 1 has an invalid length. [ 1202.128910][T18106] netlink: 'syz.5.3058': attribute type 2 has an invalid length. [ 1202.128962][T18106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3058'. [ 1202.143960][T11520] usb 6-1: Firmware version (0.0) predates our first public release. [ 1202.143983][T11520] usb 6-1: Please update to version 0.2 or newer [ 1202.209224][T11520] usb 6-1: USB disconnect, device number 76 [ 1202.237524][T18093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.245479][T18093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.292672][T11551] Bluetooth: hci2: command 0x0c1a tx timeout [ 1202.452587][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1202.452626][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 1202.452646][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1202.452690][T11551] Bluetooth: hci3: command 0x041b tx timeout [ 1207.672056][T15428] usb 7-1: USB disconnect, device number 63 [ 1208.674533][T18149] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x50 [ 1208.675317][ T157] maxtcpc 0-0050: error -EIO: Failed to read TCPC_POWER_STATUS [ 1208.675896][ T157] maxtcpc 0-0050: probe with driver maxtcpc failed with error -5 [ 1208.707917][T18149] i2c i2c-0: delete_device: Deleting device maxtcpc at 0x50 [ 1208.831138][T18152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1208.831301][T18152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1208.831424][T18152] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1208.833774][T18152] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1208.833895][T18152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1209.072288][ T5797] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1209.222165][ T5797] usb 6-1: Using ep0 maxpacket: 16 [ 1209.222826][ T5797] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1209.224718][ T5797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.224762][ T5797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.224785][ T5797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1209.224822][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.232350][ T5797] usb 6-1: config 0 descriptor?? [ 1210.773448][T11551] Bluetooth: hci2: command 0x0c1a tx timeout [ 1210.852019][T11551] Bluetooth: hci3: command 0x041b tx timeout [ 1210.862883][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 1210.862996][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1210.863192][T11551] Bluetooth: hci4: command 0x0c1a tx timeout [ 1211.171600][ T5797] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.002C/input/input294 [ 1211.249605][ T5797] microsoft 0003:045E:07DA.002C: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1211.268928][ T5797] usb 6-1: USB disconnect, device number 77 [ 1211.647106][T18188] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1211.652176][ T1229] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1211.975030][ T1229] usb 4-1: Using ep0 maxpacket: 32 [ 1212.020467][ T1229] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1212.401136][ T1229] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.401247][ T1229] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.779840][ T1229] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1212.779906][ T1229] usb 4-1: Product: syz [ 1212.779989][ T1229] usb 4-1: Manufacturer: syz [ 1212.917134][T18183] fido_id[18183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1212.953728][ T1229] hub 4-1:4.0: USB hub found [ 1213.097137][T18197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=18197 comm=syz.7.3090 [ 1213.139607][ T1229] hub 4-1:4.0: 2 ports detected [ 1213.271461][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3090'. [ 1213.550103][T18185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.550517][T18185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.699164][ T1229] hub 4-1:4.0: set hub depth failed [ 1213.713885][ T1229] usb 4-1: USB disconnect, device number 120 [ 1215.299648][ T30] audit: type=1400 audit(1789832078.589:1221): avc: denied { watch watch_reads } for pid=18232 comm="syz.5.3099" path="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1217.929092][T18257] nvme nvme0: rdma_resolve_addr failed (-19). [ 1218.006450][ T30] audit: type=1400 audit(1789832081.299:1222): avc: denied { lock } for pid=18255 comm="syz.2.3106" path="socket:[60667]" dev="sockfs" ino=60667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1218.149779][T18259] syzkaller1: entered promiscuous mode [ 1218.149802][T18259] syzkaller1: entered allmulticast mode [ 1219.623308][ T30] audit: type=1400 audit(1789832082.919:1223): avc: denied { accept } for pid=18283 comm="syz.3.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1219.623436][T18282] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3114'. [ 1219.917379][T15428] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1220.141668][T15428] usb 4-1: Using ep0 maxpacket: 32 [ 1220.282930][T15428] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1220.282976][T15428] usb 4-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 1220.288061][T15428] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7 [ 1220.329787][T15428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.329814][T15428] usb 4-1: Product: syz [ 1220.329825][T15428] usb 4-1: Manufacturer: syz [ 1220.329833][T15428] usb 4-1: SerialNumber: syz [ 1220.335128][T18295] FAULT_INJECTION: forcing a failure. [ 1220.335128][T18295] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.335156][T18295] CPU: 0 UID: 0 PID: 18295 Comm: syz.5.3116 Tainted: G L syzkaller #0 PREEMPT(full) [ 1220.335178][T18295] Tainted: [L]=SOFTLOCKUP [ 1220.335184][T18295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1220.335194][T18295] Call Trace: [ 1220.335201][T18295] [ 1220.335207][T18295] dump_stack_lvl+0x100/0x190 [ 1220.335237][T18295] should_fail_ex.cold+0x5/0xa [ 1220.335261][T18295] should_failslab+0xc2/0x120 [ 1220.335285][T18295] __kmalloc_noprof+0xfc/0x840 [ 1220.335303][T18295] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1220.335332][T18295] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1220.335360][T18295] genl_family_rcv_msg_doit+0xc7/0x300 [ 1220.335383][T18295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1220.335412][T18295] ? bpf_lsm_capable+0x9/0x10 [ 1220.335436][T18295] ? security_capable+0x80/0x260 [ 1220.335462][T18295] ? ns_capable+0xd2/0xf0 [ 1220.335481][T18295] genl_rcv_msg+0x560/0x800 [ 1220.335505][T18295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1220.335531][T18295] ? __lock_acquire+0x5c0/0x1f40 [ 1220.335547][T18295] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1220.335571][T18295] ? __pfx_nl80211_set_station+0x10/0x10 [ 1220.335587][T18295] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1220.335613][T18295] ? __lock_acquire+0x5c0/0x1f40 [ 1220.335635][T18295] netlink_rcv_skb+0x159/0x420 [ 1220.335654][T18295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1220.335676][T18295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1220.335705][T18295] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1220.335726][T18295] genl_rcv+0x28/0x40 [ 1220.335744][T18295] netlink_unicast+0x585/0x850 [ 1220.335766][T18295] ? __pfx_netlink_unicast+0x10/0x10 [ 1220.335792][T18295] netlink_sendmsg+0x8b0/0xda0 [ 1220.335816][T18295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.335837][T18295] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1220.335859][T18295] ____sys_sendmsg+0xa4d/0xbe0 [ 1220.335882][T18295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.335903][T18295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1220.335933][T18295] ? lock_acquire+0x1d1/0x380 [ 1220.335950][T18295] ? get_pid_task+0x2a/0x250 [ 1220.335975][T18295] ___sys_sendmsg+0x190/0x1e0 [ 1220.335992][T18295] ? __pfx____sys_sendmsg+0x10/0x10 [ 1220.336009][T18295] ? get_pid_task+0x106/0x250 [ 1220.336039][T18295] ? find_held_lock+0x2b/0x80 [ 1220.336076][T18295] __sys_sendmsg+0x160/0x210 [ 1220.336098][T18295] ? __pfx___sys_sendmsg+0x10/0x10 [ 1220.336131][T18295] do_syscall_64+0x123/0x790 [ 1220.336157][T18295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.336174][T18295] RIP: 0033:0x7fc27859e159 [ 1220.336188][T18295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.336204][T18295] RSP: 002b:00007fc279530028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.336221][T18295] RAX: ffffffffffffffda RBX: 00007fc278825fa0 RCX: 00007fc27859e159 [ 1220.336232][T18295] RDX: 0000000004048004 RSI: 0000200000000c40 RDI: 0000000000000004 [ 1220.336242][T18295] RBP: 00007fc279530090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.336253][T18295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.336263][T18295] R13: 00007fc278826038 R14: 00007fc278825fa0 R15: 00007ffde2651158 [ 1220.336286][T18295] [ 1220.629320][T18285] tc_dump_action: action bad kind [ 1220.698412][ T30] audit: type=1326 audit(1789832083.989:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75799e159 code=0x7ffc0000 [ 1220.699336][ T30] audit: type=1326 audit(1789832083.989:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb75799e159 code=0x7ffc0000 [ 1220.706283][ T30] audit: type=1326 audit(1789832083.989:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75799e159 code=0x7ffc0000 [ 1220.706326][ T30] audit: type=1326 audit(1789832083.989:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75799e159 code=0x7ffc0000 [ 1220.735224][ T30] audit: type=1326 audit(1789832084.029:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb75799e159 code=0x7ffc0000 [ 1220.735269][ T30] audit: type=1326 audit(1789832084.029:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75799e159 code=0x7ffc0000 [ 1220.735303][ T30] audit: type=1326 audit(1789832084.029:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75799e159 code=0x7ffc0000 [ 1220.751344][T18285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.751641][ T30] audit: type=1326 audit(1789832084.029:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb75795e98e code=0x7ffc0000 [ 1220.751682][ T30] audit: type=1326 audit(1789832084.029:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb75799ddeb code=0x7ffc0000 [ 1220.751716][ T30] audit: type=1326 audit(1789832084.029:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18283 comm="syz.3.3113" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb75799ddeb code=0x7ffc0000 [ 1220.757924][T18285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.791611][ T1082] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1220.969358][ T1082] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 1220.975160][ T1082] usb 6-1: string descriptor 0 read error: -22 [ 1220.975253][ T1082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.988778][ T1082] etas_es58x 6-1:1.0: Starting (null) (null) (Serial Number (null)) [ 1220.988898][ T1082] etas_es58x 6-1:1.0: could not retrieve the product info string [ 1221.026470][T18285] kAFS: unparsable volume name [ 1221.381815][ T1082] usb 6-1: USB disconnect, device number 78 [ 1221.400632][ T1082] etas_es58x 6-1:1.0: Disconnecting (null) (null) [ 1221.908403][T18315] FAULT_INJECTION: forcing a failure. [ 1221.908403][T18315] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.908439][T18315] CPU: 1 UID: 0 PID: 18315 Comm: syz.7.3120 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.908455][T18315] Tainted: [L]=SOFTLOCKUP [ 1221.908460][T18315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1221.908466][T18315] Call Trace: [ 1221.908470][T18315] [ 1221.908476][T18315] dump_stack_lvl+0x100/0x190 [ 1221.908497][T18315] should_fail_ex.cold+0x5/0xa [ 1221.908513][T18315] ? __netlink_lookup+0x652/0x900 [ 1221.908527][T18315] should_failslab+0xc2/0x120 [ 1221.908543][T18315] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1221.908558][T18315] ? skb_clone+0x190/0x400 [ 1221.908575][T18315] skb_clone+0x190/0x400 [ 1221.908590][T18315] netlink_deliver_tap+0xaed/0xcc0 [ 1221.908605][T18315] netlink_unicast+0x62b/0x850 [ 1221.908620][T18315] ? __pfx_netlink_unicast+0x10/0x10 [ 1221.908637][T18315] netlink_sendmsg+0x8b0/0xda0 [ 1221.908653][T18315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.908667][T18315] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1221.908683][T18315] ____sys_sendmsg+0xa4d/0xbe0 [ 1221.908699][T18315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.908713][T18315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.908733][T18315] ? lock_acquire+0x1d1/0x380 [ 1221.908745][T18315] ? get_pid_task+0x2a/0x250 [ 1221.908763][T18315] ___sys_sendmsg+0x190/0x1e0 [ 1221.908774][T18315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.908785][T18315] ? get_pid_task+0x106/0x250 [ 1221.908808][T18315] ? find_held_lock+0x2b/0x80 [ 1221.908833][T18315] __sys_sendmsg+0x160/0x210 [ 1221.908848][T18315] ? __pfx___sys_sendmsg+0x10/0x10 [ 1221.908870][T18315] do_syscall_64+0x123/0x790 [ 1221.908889][T18315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.908901][T18315] RIP: 0033:0x7f86cab9e159 [ 1221.908911][T18315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.908922][T18315] RSP: 002b:00007f86cba34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.908935][T18315] RAX: ffffffffffffffda RBX: 00007f86cae25fa0 RCX: 00007f86cab9e159 [ 1221.908942][T18315] RDX: 0000000000040004 RSI: 0000200000000240 RDI: 0000000000000003 [ 1221.908949][T18315] RBP: 00007f86cba34090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.908956][T18315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.908962][T18315] R13: 00007f86cae26038 R14: 00007f86cae25fa0 R15: 00007ffe95365388 [ 1221.908977][T18315] [ 1223.033612][ C0] [CPU: 0]TIME DOES NOT MATCH expected:135187 actual:135189 delta:1 before:135188 after:135188 context:h [ 1223.033612][ C0] trace clock:trace_clock_counter+0x0/0x40 [ 1223.033659][ C0] [134957] PAGE TIME STAMP [ 1223.033667][ C0] 0x0: [134957] delta:0 hd [ 1223.033677][ C0] 0x10: [134958] delta:1 hd [ 1223.033688][ C0] 0x20: [134959] delta:1 hd [ 1223.033699][ C0] 0x30: [134960] delta:1 hd [ 1223.033709][ C0] 0x40: [134961] delta:1 hd [ 1223.033720][ C0] 0x50: [134962] delta:1 hd [ 1223.033730][ C0] 0x60: [134963] delta:1 hd [ 1223.033741][ C0] 0x70: [134964] delta:1 hd [ 1223.033751][ C0] 0x80: [134965] delta:1 hd [ 1223.033761][ C0] 0x90: [134966] delta:1 hd [ 1223.033770][ C0] 0xa0: [134967] delta:1 hd [ 1223.033776][ C0] 0xb0: [134968] delta:1 hd [ 1223.033782][ C0] 0xc0: [134969] delta:1 hd [ 1223.033788][ C0] 0xd0: [134970] delta:1 hd [ 1223.033799][ C0] 0xe0: [134971] delta:1 hd [ 1223.033805][ C0] 0xf0: [134972] delta:1 hd [ 1223.033811][ C0] 0x100: [134973] delta:1 hd [ 1223.033817][ C0] 0x110: [134974] delta:1 hd [ 1223.033826][ C0] 0x120: [134975] delta:1 hd [ 1223.033836][ C0] 0x130: [134976] delta:1 hd [ 1223.033847][ C0] 0x140: [134977] delta:1 hd [ 1223.033858][ C0] 0x150: [134978] delta:1 hd [ 1223.033868][ C0] 0x160: [134979] delta:1 hd [ 1223.033879][ C0] 0x170: [134980] delta:1 hd [ 1223.033890][ C0] 0x180: [134981] delta:1 hd [ 1223.033900][ C0] 0x190: [134982] delta:1 hd [ 1223.033910][ C0] 0x1a0: [134983] delta:1 hd [ 1223.033917][ C0] 0x1b0: [134984] delta:1 hd [ 1223.033923][ C0] 0x1c0: [134985] delta:1 hd [ 1223.033930][ C0] 0x1d0: [134986] delta:1 hd [ 1223.033936][ C0] 0x1e0: [134987] delta:1 hd [ 1223.033942][ C0] 0x1f0: [134988] delta:1 hd [ 1223.033948][ C0] 0x200: [134989] delta:1 hd [ 1223.033954][ C0] 0x210: [134990] delta:1 hd [ 1223.033960][ C0] 0x220: [134991] delta:1 hd [ 1223.033966][ C0] 0x230: [134992] delta:1 hd [ 1223.033975][ C0] 0x240: [134993] delta:1 hd [ 1223.033985][ C0] 0x250: [134994] delta:1 hd [ 1223.033996][ C0] 0x260: [134995] delta:1 hd [ 1223.034007][ C0] 0x270: [134996] delta:1 hd [ 1223.034017][ C0] 0x280: [134997] delta:1 hd [ 1223.034027][ C0] 0x290: [134998] delta:1 hd [ 1223.034037][ C0] 0x2a0: [134999] delta:1 hd [ 1223.034047][ C0] 0x2b0: [135000] delta:1 hd [ 1223.034057][ C0] 0x2c0: [135001] delta:1 hd [ 1223.034063][ C0] 0x2d0: [135002] delta:1 hd [ 1223.034070][ C0] 0x2e0: [135003] delta:1 hd [ 1223.034075][ C0] 0x2f0: [135004] delta:1 hd [ 1223.034082][ C0] 0x300: [135005] delta:1 hd [ 1223.034088][ C0] 0x310: [135006] delta:1 hd [ 1223.034094][ C0] 0x320: [135007] delta:1 hd [ 1223.034100][ C0] 0x330: [135008] delta:1 hd [ 1223.034106][ C0] 0x340: [135009] delta:1 hd [ 1223.034113][ C0] 0x350: [135010] delta:1 hd [ 1223.034122][ C0] 0x360: [135011] delta:1 hd [ 1223.034133][ C0] 0x370: [135012] delta:1 hd [ 1223.034144][ C0] 0x380: [135013] delta:1 hd [ 1223.034154][ C0] 0x390: [135014] delta:1 hd [ 1223.034164][ C0] 0x3a0: [135015] delta:1 hd [ 1223.034174][ C0] 0x3b0: [135016] delta:1 hd [ 1223.034184][ C0] 0x3c0: [135017] delta:1 hd [ 1223.034195][ C0] 0x3d0: [135018] delta:1 hd [ 1223.034204][ C0] 0x3e0: [135019] delta:1 hd [ 1223.034210][ C0] 0x3f0: [135020] delta:1 hd [ 1223.034217][ C0] 0x400: [135021] delta:1 hd [ 1223.034223][ C0] 0x410: [135022] delta:1 hd [ 1223.034229][ C0] 0x420: [135023] delta:1 hd [ 1223.034235][ C0] 0x430: [135024] delta:1 hd [ 1223.034241][ C0] 0x440: [135025] delta:1 hd [ 1223.034247][ C0] 0x450: [135026] delta:1 hd [ 1223.034253][ C0] 0x460: [135027] delta:1 hd [ 1223.034260][ C0] 0x470: [135028] delta:1 hd [ 1223.034270][ C0] 0x480: [135029] delta:1 hd [ 1223.034281][ C0] 0x490: [135030] delta:1 hd [ 1223.034292][ C0] 0x4a0: [135031] delta:1 hd [ 1223.034303][ C0] 0x4b0: [135032] delta:1 hd [ 1223.034314][ C0] 0x4c0: [135033] delta:1 hd [ 1223.034324][ C0] 0x4d0: [135034] delta:1 hd [ 1223.034335][ C0] 0x4e0: [135035] delta:1 hd [ 1223.034345][ C0] 0x4f0: [135036] delta:1 hd [ 1223.034353][ C0] 0x500: [135037] delta:1 hd [ 1223.034359][ C0] 0x510: [135038] delta:1 hd [ 1223.034365][ C0] 0x520: [135039] delta:1 hd [ 1223.034371][ C0] 0x530: [135040] delta:1 hd [ 1223.034377][ C0] 0x540: [135041] delta:1 hd [ 1223.034383][ C0] 0x550: [135042] delta:1 hd [ 1223.034390][ C0] 0x560: [135043] delta:1 hd [ 1223.034396][ C0] 0x570: [135044] delta:1 hd [ 1223.034402][ C0] 0x580: [135045] delta:1 hd [ 1223.034411][ C0] 0x590: [135046] delta:1 hd [ 1223.034421][ C0] 0x5a0: [135047] delta:1 hd [ 1223.034433][ C0] 0x5b0: [135048] delta:1 hd [ 1223.034443][ C0] 0x5c0: [135049] delta:1 hd [ 1223.034453][ C0] 0x5d0: [135050] delta:1 hd [ 1223.034463][ C0] 0x5e0: [135051] delta:1 hd [ 1223.034474][ C0] 0x5f0: [135052] delta:1 hd [ 1223.034484][ C0] 0x600: [135053] delta:1 hd [ 1223.034494][ C0] 0x610: [135054] delta:1 hd [ 1223.034500][ C0] 0x620: [135055] delta:1 hd [ 1223.034507][ C0] 0x630: [135056] delta:1 hd [ 1223.034513][ C0] 0x640: [135057] delta:1 hd [ 1223.034519][ C0] 0x650: [135058] delta:1 hd [ 1223.034525][ C0] 0x660: [135059] delta:1 hd [ 1223.034531][ C0] 0x670: [135060] delta:1 hd [ 1223.034537][ C0] 0x680: [135061] delta:1 hd [ 1223.034543][ C0] 0x690: [135062] delta:1 hd [ 1223.034549][ C0] 0x6a0: [135063] delta:1 hd [ 1223.034559][ C0] 0x6b0: [135064] delta:1 hd [ 1223.034570][ C0] 0x6c0: [135065] delta:1 hd [ 1223.034580][ C0] 0x6d0: [135066] delta:1 hd [ 1223.034591][ C0] 0x6e0: [135067] delta:1 hd [ 1223.034602][ C0] 0x6f0: [135068] delta:1 hd [ 1223.034612][ C0] 0x700: [135069] delta:1 hd [ 1223.034623][ C0] 0x710: [135070] delta:1 hd [ 1223.034633][ C0] 0x720: [135071] delta:1 hd [ 1223.034642][ C0] 0x730: [135072] delta:1 hd [ 1223.034648][ C0] 0x740: [135073] delta:1 hd [ 1223.034654][ C0] 0x750: [135074] delta:1 hd [ 1223.034660][ C0] 0x760: [135075] delta:1 hd [ 1223.034666][ C0] 0x770: [135076] delta:1 hd [ 1223.034672][ C0] 0x780: [135077] delta:1 hd [ 1223.034678][ C0] 0x790: [135078] delta:1 hd [ 1223.034684][ C0] 0x7a0: [135079] delta:1 hd [ 1223.034690][ C0] 0x7b0: [135080] delta:1 hd [ 1223.034697][ C0] 0x7c0: [135081] delta:1 hd [ 1223.034707][ C0] 0x7d0: [135082] delta:1 hd [ 1223.034718][ C0] 0x7e0: [135083] delta:1 hd [ 1223.034729][ C0] 0x7f0: [135084] delta:1 hd [ 1223.034739][ C0] 0x800: [135085] delta:1 hd [ 1223.034749][ C0] 0x810: [135086] delta:1 hd [ 1223.034759][ C0] 0x820: [135087] delta:1 hd [ 1223.034769][ C0] 0x830: [135088] delta:1 hd [ 1223.034780][ C0] 0x840: [135089] delta:1 hd [ 1223.034787][ C0] 0x850: [135090] delta:1 hd [ 1223.034798][ C0] 0x860: [135091] delta:1 hd [ 1223.034804][ C0] 0x870: [135092] delta:1 hd [ 1223.034810][ C0] 0x880: [135093] delta:1 hd [ 1223.034816][ C0] 0x890: [135094] delta:1 hd [ 1223.034822][ C0] 0x8a0: [135095] delta:1 hd [ 1223.034828][ C0] 0x8b0: [135096] delta:1 hd [ 1223.034834][ C0] 0x8c0: [135097] delta:1 hd [ 1223.034840][ C0] 0x8d0: [135098] delta:1 hd [ 1223.034849][ C0] 0x8e0: [135099] delta:1 hd [ 1223.034860][ C0] 0x8f0: [135100] delta:1 hd [ 1223.034870][ C0] 0x900: [135101] delta:1 hd [ 1223.034880][ C0] 0x910: [135102] delta:1 hd [ 1223.034890][ C0] 0x920: [135103] delta:1 hd [ 1223.034900][ C0] 0x930: [135104] delta:1 hd [ 1223.034910][ C0] 0x940: [135105] delta:1 hd [ 1223.034920][ C0] 0x950: [135106] delta:1 hd [ 1223.034930][ C0] 0x960: [135107] delta:1 hd [ 1223.034936][ C0] 0x970: [135108] delta:1 hd [ 1223.034942][ C0] 0x980: [135109] delta:1 hd [ 1223.034948][ C0] 0x990: [135110] delta:1 hd [ 1223.034954][ C0] 0x9a0: [135111] delta:1 hd [ 1223.034960][ C0] 0x9b0: [135112] delta:1 hd [ 1223.034966][ C0] 0x9c0: [135113] delta:1 hd [ 1223.034972][ C0] 0x9d0: [135114] delta:1 hd [ 1223.034978][ C0] 0x9e0: [135115] delta:1 hd [ 1223.034985][ C0] 0x9f0: [135116] delta:1 hd [ 1223.034994][ C0] 0xa00: [135117] delta:1 hd [ 1223.035004][ C0] 0xa10: [135118] delta:1 hd [ 1223.035015][ C0] 0xa20: [135119] delta:1 hd [ 1223.035026][ C0] 0xa30: [135120] delta:1 Hsd [ 1223.035036][ C0] 0xa40: [135121] delta:1 hd [ 1223.035046][ C0] 0xa50: [135122] delta:1 hd [ 1223.035057][ C0] 0xa60: [135123] delta:1 hd [ 1223.035067][ C0] 0xa70: [135124] delta:1 hd [ 1223.035076][ C0] 0xa80: [135125] delta:1 hd [ 1223.035082][ C0] 0xa90: [135126] delta:1 hd [ 1223.035089][ C0] 0xaa0: [135127] delta:1 hd [ 1223.035095][ C0] 0xab0: [135128] delta:1 hd [ 1223.035101][ C0] 0xac0: [135129] delta:1 hd [ 1223.035107][ C0] 0xad0: [135130] delta:1 hd [ 1223.035112][ C0] 0xae0: [135131] delta:1 hd [ 1223.035118][ C0] 0xaf0: [135132] delta:1 hd [ 1223.035124][ C0] 0xb00: [135133] delta:1 hd [ 1223.035130][ C0] 0xb10: [135134] delta:1 hd [ 1223.035139][ C0] 0xb20: [135135] delta:1 hd [ 1223.035150][ C0] 0xb30: [135136] delta:1 hd [ 1223.035161][ C0] 0xb40: [135137] delta:1 hd [ 1223.035171][ C0] 0xb50: [135138] delta:1 hd [ 1223.035181][ C0] 0xb60: [135139] delta:1 hd [ 1223.035191][ C0] 0xb70: [135140] delta:1 hd [ 1223.035201][ C0] 0xb80: [135141] delta:1 hd [ 1223.035211][ C0] 0xb90: [135142] delta:1 hd [ 1223.035221][ C0] 0xba0: [135143] delta:1 hd [ 1223.035228][ C0] 0xbb0: [135144] delta:1 hd [ 1223.035234][ C0] 0xbc0: [135145] delta:1 hd [ 1223.035240][ C0] 0xbd0: [135146] delta:1 hd [ 1223.035246][ C0] 0xbe0: [135147] delta:1 hd [ 1223.035252][ C0] 0xbf0: [135148] delta:1 hd [ 1223.035258][ C0] 0xc00: [135149] delta:1 hd [ 1223.035264][ C0] 0xc10: [135150] delta:1 hd [ 1223.035270][ C0] 0xc20: [135151] delta:1 hd [ 1223.035276][ C0] 0xc30: [135152] delta:1 hd [ 1223.035283][ C0] 0xc40: [135153] delta:1 hd [ 1223.035293][ C0] 0xc50: [135154] delta:1 hd [ 1223.035303][ C0] 0xc60: [135155] delta:1 hd [ 1223.035314][ C0] 0xc70: [135156] delta:1 hd [ 1223.035324][ C0] 0xc80: [135157] delta:1 hd [ 1223.035334][ C0] 0xc90: [135158] delta:1 hd [ 1223.035344][ C0] 0xca0: [135159] delta:1 hd [ 1223.035354][ C0] 0xcb0: [135160] delta:1 hd [ 1223.035364][ C0] 0xcc0: [135161] delta:1 hd [ 1223.035373][ C0] 0xcd0: [135162] delta:1 hd [ 1223.035380][ C0] 0xce0: [135163] delta:1 hd [ 1223.035386][ C0] 0xcf0: [135164] delta:1 hd [ 1223.035392][ C0] 0xd00: [135165] delta:1 hd [ 1223.035398][ C0] 0xd10: [135166] delta:1 hd [ 1223.035404][ C0] 0xd20: [135167] delta:1 hd [ 1223.035410][ C0] 0xd30: [135168] delta:1 hd [ 1223.035416][ C0] 0xd40: [135169] delta:1 hd [ 1223.035422][ C0] 0xd50: [135170] delta:1 hd [ 1223.035428][ C0] 0xd60: [135171] delta:1 hd [ 1223.035437][ C0] 0xd70: [135172] delta:1 hd [ 1223.035449][ C0] 0xd80: [135173] delta:1 hd [ 1223.035460][ C0] 0xd90: [135174] delta:1 hd [ 1223.035470][ C0] 0xda0: [135175] delta:1 hd [ 1223.035481][ C0] 0xdb0: [135176] delta:1 hd [ 1223.035491][ C0] 0xdc0: [135177] delta:1 hd [ 1223.035501][ C0] 0xdd0: [135178] delta:1 hd [ 1223.035511][ C0] 0xde0: [135179] delta:1 hd [ 1223.035520][ C0] 0xdf0: [135180] delta:1 hd [ 1223.035526][ C0] 0xe00: [135181] delta:1 hd [ 1223.035532][ C0] 0xe10: [135182] delta:1 hd [ 1223.035538][ C0] 0xe20: [135183] delta:1 hd [ 1223.035544][ C0] 0xe30: [135184] delta:1 . [ 1223.035550][ C0] 0xe40: [135185] delta:1 PADDING [ 1223.035556][ C0] 0xe64: [135186] delta:1 hd [ 1223.035562][ C0] 0xe74: [135187] delta:1 PADDING [ 1223.035568][ C0] 0xe98: [135188] delta:1 hd [ 1223.035574][ C0] expected end:0xea8 last event actually ended at:0xea8 [ 1223.035666][ C0] ------------[ cut here ]------------ [ 1223.035670][ C0] system_state != SYSTEM_BOOTING [ 1223.035675][ C0] WARNING: kernel/trace/ring_buffer.c:4783 at check_buffer.cold+0x1a2/0x1ef, CPU#0: syz.6.3124/18331 [ 1224.184263][ C0] Modules linked in: [ 1224.188160][ C0] CPU: 0 UID: 0 PID: 18331 Comm: syz.6.3124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.199160][ C0] Tainted: [L]=SOFTLOCKUP [ 1224.203461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1224.213582][ C0] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 1224.219299][ C0] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 1c ce 21 10 31 ff 89 ee e8 af f2 e8 00 85 ed 0f 84 c8 8d eb 00 e8 32 f8 e8 00 90 <0f> 0b 90 e9 73 8b eb 00 49 c7 c7 c0 5e f6 8b e9 51 fe ff ff e8 88 [ 1224.238894][ C0] RSP: 0018:ffffc900000078d0 EFLAGS: 00010046 [ 1224.244953][ C0] RAX: 8000000001000003 RBX: 1ffff92000000f20 RCX: 0000000001000003 [ 1224.252899][ C0] RDX: ffff88802d9c4b00 RSI: ffffffff8123277e RDI: ffff88802d9c4b00 [ 1224.260847][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1224.268806][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000021015 [ 1224.276750][ C0] R13: ffff88801c095000 R14: ffff88805713c000 R15: ffffffff8bf65a60 [ 1224.284724][ C0] FS: 00007ff5dabbc6c0(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 1224.293655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1224.300215][ C0] CR2: 0000001b32508ff8 CR3: 0000000084816000 CR4: 00000000003526f0 [ 1224.308176][ C0] Call Trace: [ 1224.311436][ C0] [ 1224.314267][ C0] ? __pfx_trace_clock_counter+0x10/0x10 [ 1224.319899][ C0] ? __pfx_check_buffer+0x10/0x10 [ 1224.324911][ C0] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 1224.330693][ C0] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 1224.337011][ C0] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1224.343075][ C0] ring_buffer_lock_reserve+0x49a/0x1220 [ 1224.348712][ C0] ? rb_commit+0x129/0x9d0 [ 1224.353121][ C0] ? check_buffer+0x13f/0x820 [ 1224.357800][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1224.363842][ C0] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 1224.369645][ C0] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1224.375786][ C0] trace_event_buffer_reserve+0x1f9/0x350 [ 1224.381495][ C0] eprobe_trigger_func+0x558/0x1450 [ 1224.386687][ C0] ? trace_save_cmdline+0x2d7/0x490 [ 1224.391912][ C0] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 1224.397553][ C0] ? __resched_curr+0xfc/0x500 [ 1224.402333][ C0] event_triggers_call+0x29e/0x4d0 [ 1224.407434][ C0] trace_event_buffer_commit+0x66b/0xa80 [ 1224.413140][ C0] trace_event_raw_event_msr_trace_class+0x17d/0x270 [ 1224.419801][ C0] ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10 [ 1224.426992][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1224.432177][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1224.437382][ C0] trace_read_msr+0x160/0x1f0 [ 1224.442062][ C0] __rdmsr_safe_on_cpu+0xc8/0xf0 [ 1224.447010][ C0] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1224.452651][ C0] __flush_smp_call_function_queue+0x43a/0x8c0 [ 1224.458803][ C0] __sysvec_call_function_single+0x81/0x420 [ 1224.464700][ C0] sysvec_call_function_single+0x9e/0xc0 [ 1224.470399][ C0] [ 1224.473349][ C0] [ 1224.476267][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1224.482237][ C0] RIP: 0010:vmx_set_constant_host_state+0x1d4/0x740 [ 1224.488816][ C0] Code: e8 71 ed 6b 00 b9 74 01 00 00 0f 32 48 c1 e2 20 48 89 d3 48 09 c3 e9 ba 01 00 00 e8 56 ed 6b 00 89 db b8 00 4c 00 00 0f 79 c3 <0f> 86 f5 01 00 00 e8 41 ed 6b 00 b9 76 01 00 00 0f 32 48 c1 e2 20 [ 1224.508413][ C0] RSP: 0018:ffffc90003d97828 EFLAGS: 00000202 [ 1224.514484][ C0] RAX: 0000000000004c00 RBX: 0000000000000010 RCX: ffffc9000ebc9000 [ 1224.522451][ C0] RDX: 0000000000080000 RSI: ffffffff81a0325a RDI: ffff88802d9c4b00 [ 1224.530409][ C0] RBP: 00000000003526f0 R08: 0000000000000001 R09: 0000000000000000 [ 1224.538387][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807e391f78 [ 1224.546356][ C0] R13: ffff88807e391ed8 R14: ffff888051ff8000 R15: ffff88807e391f78 [ 1224.554321][ C0] ? vmx_set_constant_host_state+0x1ca/0x740 [ 1224.560304][ C0] ? vmx_set_constant_host_state+0x1ca/0x740 [ 1224.566270][ C0] vmx_vcpu_reset+0x117b/0x3160 [ 1224.571120][ C0] ? __pfx_vmx_vcpu_reset+0x10/0x10 [ 1224.576318][ C0] kvm_vcpu_reset+0x9d1/0x1ae0 [ 1224.581066][ C0] ? kvm_set_tsc_khz+0x259/0x540 [ 1224.585988][ C0] kvm_arch_vcpu_create+0x70c/0xab0 [ 1224.591190][ C0] kvm_vm_ioctl+0x7e3/0x42d0 [ 1224.595783][ C0] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1224.600814][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1224.606173][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1224.611372][ C0] ? find_held_lock+0x2b/0x80 [ 1224.616042][ C0] ? tomoyo_path_number_perm+0x28f/0x580 [ 1224.621661][ C0] ? tomoyo_path_number_perm+0x28f/0x580 [ 1224.627280][ C0] ? tomoyo_path_number_perm+0x188/0x580 [ 1224.632916][ C0] ? __kvm_handle_async_pf+0x34/0xa0 [ 1224.638190][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1224.644165][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1224.650038][ C0] ? do_vfs_ioctl+0x226/0x13e0 [ 1224.654794][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1224.659804][ C0] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1224.666390][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1224.673226][ C0] ? __fget_files+0x34/0x3d0 [ 1224.677812][ C0] ? selinux_file_ioctl+0x13b/0x290 [ 1224.682983][ C0] ? selinux_file_ioctl+0xb6/0x290 [ 1224.688075][ C0] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1224.693092][ C0] __x64_sys_ioctl+0x18e/0x210 [ 1224.697846][ C0] do_syscall_64+0x123/0x790 [ 1224.702420][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.708299][ C0] RIP: 0033:0x7ff5d9d9e159 [ 1224.712706][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.732400][ C0] RSP: 002b:00007ff5dabbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.740800][ C0] RAX: ffffffffffffffda RBX: 00007ff5da026090 RCX: 00007ff5d9d9e159 [ 1224.748759][ C0] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1224.756716][ C0] RBP: 00007ff5d9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1224.764660][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.772616][ C0] R13: 00007ff5da026128 R14: 00007ff5da026090 R15: 00007fff730b6718 [ 1224.780670][ C0] [ 1224.783681][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1224.790955][ C0] CPU: 0 UID: 0 PID: 18331 Comm: syz.6.3124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.801870][ C0] Tainted: [L]=SOFTLOCKUP [ 1224.806174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1224.816208][ C0] Call Trace: [ 1224.819472][ C0] [ 1224.822296][ C0] dump_stack_lvl+0x100/0x190 [ 1224.826974][ C0] vpanic+0x553/0x970 [ 1224.830940][ C0] ? __pfx_vpanic+0x10/0x10 [ 1224.835444][ C0] panic+0xd1/0xe0 [ 1224.839145][ C0] ? __pfx_panic+0x10/0x10 [ 1224.843549][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1224.848909][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 1224.854004][ C0] __warn.cold+0x191/0x318 [ 1224.858424][ C0] __report_bug+0x30f/0x440 [ 1224.862925][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 1224.868033][ C0] ? __pfx___report_bug+0x10/0x10 [ 1224.873055][ C0] ? irq_work_queue+0xd1/0x100 [ 1224.877821][ C0] ? __wake_up_klogd+0xe5/0x140 [ 1224.882657][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 1224.887333][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1224.892363][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 1224.897476][ C0] report_bug+0xb3/0x220 [ 1224.901732][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 1224.906833][ C0] handle_bug+0x16a/0x2a0 [ 1224.911161][ C0] exc_invalid_op+0x17/0x50 [ 1224.915648][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1224.920480][ C0] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 1224.926187][ C0] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 1c ce 21 10 31 ff 89 ee e8 af f2 e8 00 85 ed 0f 84 c8 8d eb 00 e8 32 f8 e8 00 90 <0f> 0b 90 e9 73 8b eb 00 49 c7 c7 c0 5e f6 8b e9 51 fe ff ff e8 88 [ 1224.945874][ C0] RSP: 0018:ffffc900000078d0 EFLAGS: 00010046 [ 1224.951939][ C0] RAX: 8000000001000003 RBX: 1ffff92000000f20 RCX: 0000000001000003 [ 1224.959896][ C0] RDX: ffff88802d9c4b00 RSI: ffffffff8123277e RDI: ffff88802d9c4b00 [ 1224.967851][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1224.975809][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000021015 [ 1224.983766][ C0] R13: ffff88801c095000 R14: ffff88805713c000 R15: ffffffff8bf65a60 [ 1224.991733][ C0] ? check_buffer.cold+0x1a1/0x1ef [ 1224.996843][ C0] ? __pfx_trace_clock_counter+0x10/0x10 [ 1225.002476][ C0] ? __pfx_check_buffer+0x10/0x10 [ 1225.007485][ C0] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 1225.013285][ C0] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 1225.019592][ C0] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1225.025647][ C0] ring_buffer_lock_reserve+0x49a/0x1220 [ 1225.031269][ C0] ? rb_commit+0x129/0x9d0 [ 1225.035663][ C0] ? check_buffer+0x13f/0x820 [ 1225.040333][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1225.046382][ C0] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 1225.052196][ C0] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1225.058365][ C0] trace_event_buffer_reserve+0x1f9/0x350 [ 1225.064065][ C0] eprobe_trigger_func+0x558/0x1450 [ 1225.069266][ C0] ? trace_save_cmdline+0x2d7/0x490 [ 1225.074456][ C0] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 1225.080079][ C0] ? __resched_curr+0xfc/0x500 [ 1225.084840][ C0] event_triggers_call+0x29e/0x4d0 [ 1225.089946][ C0] trace_event_buffer_commit+0x66b/0xa80 [ 1225.095556][ C0] trace_event_raw_event_msr_trace_class+0x17d/0x270 [ 1225.102219][ C0] ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10 [ 1225.109401][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1225.114576][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1225.119776][ C0] trace_read_msr+0x160/0x1f0 [ 1225.124461][ C0] __rdmsr_safe_on_cpu+0xc8/0xf0 [ 1225.129417][ C0] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1225.135049][ C0] __flush_smp_call_function_queue+0x43a/0x8c0 [ 1225.141213][ C0] __sysvec_call_function_single+0x81/0x420 [ 1225.147101][ C0] sysvec_call_function_single+0x9e/0xc0 [ 1225.152723][ C0] [ 1225.155634][ C0] [ 1225.158552][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1225.164529][ C0] RIP: 0010:vmx_set_constant_host_state+0x1d4/0x740 [ 1225.171110][ C0] Code: e8 71 ed 6b 00 b9 74 01 00 00 0f 32 48 c1 e2 20 48 89 d3 48 09 c3 e9 ba 01 00 00 e8 56 ed 6b 00 89 db b8 00 4c 00 00 0f 79 c3 <0f> 86 f5 01 00 00 e8 41 ed 6b 00 b9 76 01 00 00 0f 32 48 c1 e2 20 [ 1225.190722][ C0] RSP: 0018:ffffc90003d97828 EFLAGS: 00000202 [ 1225.196775][ C0] RAX: 0000000000004c00 RBX: 0000000000000010 RCX: ffffc9000ebc9000 [ 1225.204733][ C0] RDX: 0000000000080000 RSI: ffffffff81a0325a RDI: ffff88802d9c4b00 [ 1225.212678][ C0] RBP: 00000000003526f0 R08: 0000000000000001 R09: 0000000000000000 [ 1225.220638][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807e391f78 [ 1225.228590][ C0] R13: ffff88807e391ed8 R14: ffff888051ff8000 R15: ffff88807e391f78 [ 1225.236552][ C0] ? vmx_set_constant_host_state+0x1ca/0x740 [ 1225.242535][ C0] ? vmx_set_constant_host_state+0x1ca/0x740 [ 1225.248513][ C0] vmx_vcpu_reset+0x117b/0x3160 [ 1225.253356][ C0] ? __pfx_vmx_vcpu_reset+0x10/0x10 [ 1225.258562][ C0] kvm_vcpu_reset+0x9d1/0x1ae0 [ 1225.263330][ C0] ? kvm_set_tsc_khz+0x259/0x540 [ 1225.268264][ C0] kvm_arch_vcpu_create+0x70c/0xab0 [ 1225.273471][ C0] kvm_vm_ioctl+0x7e3/0x42d0 [ 1225.278088][ C0] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1225.283133][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1225.288490][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1225.293686][ C0] ? find_held_lock+0x2b/0x80 [ 1225.298351][ C0] ? tomoyo_path_number_perm+0x28f/0x580 [ 1225.303965][ C0] ? tomoyo_path_number_perm+0x28f/0x580 [ 1225.309574][ C0] ? tomoyo_path_number_perm+0x188/0x580 [ 1225.315197][ C0] ? __kvm_handle_async_pf+0x34/0xa0 [ 1225.320468][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1225.326456][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1225.332343][ C0] ? do_vfs_ioctl+0x226/0x13e0 [ 1225.337100][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1225.342112][ C0] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1225.348601][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1225.355448][ C0] ? __fget_files+0x34/0x3d0 [ 1225.360043][ C0] ? selinux_file_ioctl+0x13b/0x290 [ 1225.365235][ C0] ? selinux_file_ioctl+0xb6/0x290 [ 1225.370344][ C0] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1225.375358][ C0] __x64_sys_ioctl+0x18e/0x210 [ 1225.380119][ C0] do_syscall_64+0x123/0x790 [ 1225.384709][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.390596][ C0] RIP: 0033:0x7ff5d9d9e159 [ 1225.394997][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.414586][ C0] RSP: 002b:00007ff5dabbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.422990][ C0] RAX: ffffffffffffffda RBX: 00007ff5da026090 RCX: 00007ff5d9d9e159 [ 1225.430957][ C0] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1225.438921][ C0] RBP: 00007ff5d9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1225.446881][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.454838][ C0] R13: 00007ff5da026128 R14: 00007ff5da026090 R15: 00007fff730b6718 [ 1225.462805][ C0] [ 1225.466047][ C0] Kernel Offset: disabled [ 1225.470351][ C0] Rebooting in 86400 seconds..