last executing test programs: 19m16.048035302s ago: executing program 4 (id=1416): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000014) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, 0x0, 0x4090) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000004c0)) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/mtrr\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r5, &(0x7f0000000fc0)='base=0x20000000 size=0x20000 type=write-back', 0x2c) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x40104d06, &(0x7f0000001040)="000002000000000000000200") close(r4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff, 0xff, 'rose0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xff, 'syz1\x00', {0xff}}}}, {{@ip={@remote, @empty, 0x0, 0xffffffff, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x248) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x38, 0x24, 0x66, 0x0, 0xa, 0x21, 0x0, @multicast2, @local}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x6, "8dc878", 0x9, "0ed80d"}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d12033618bafeb3926975d1b201ba9ebaf9fbe96171f710c6816f8a922913313", "817ff05ca00092003daf5a835778b7d83fa94c0efbb5874251b68892848995c46f8b736ecde1e6709962e4b4600a8f9a", "7d8f4da9806440cb89f2939c57545847262620ead257b1d79ea45e63", {"5c22878c87f7d790e5d5963195b3172a", "db5701ffac0e726159a1af1eb26adef8"}}}}}}}, 0x0) 19m13.384743548s ago: executing program 4 (id=1420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123103, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) clock_adjtime(0x0, &(0x7f0000000040)={0x66b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248a}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x0) setns(0xc9, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ptype\x00') read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0x2020) bind$inet(r1, &(0x7f0000002400)={0x2, 0x4e24, @loopback}, 0x10) syz_open_dev$usbfs(&(0x7f0000002440), 0x206, 0x20182) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xa) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000108, 0x0, 0x400000003}]}) 19m12.220778515s ago: executing program 4 (id=1422): r0 = socket$kcm(0x21, 0x2, 0x2) setpriority(0x1, 0x0, 0x6) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004", 0x31}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x44800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000002180)='devtmpfs\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000002240)={0xa, 0x4e20, 0x7, @local, 0x8}, 0x18) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000040)) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000002300)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000002380)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002400)}, 0x400000}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000002440)=0x2) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000002480)=0x9) syz_usb_connect(0x0, 0x2b, &(0x7f0000002540)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000002580)='./dev/ttyUSB0\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000025c0)={0x1, &(0x7f0000002600)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 19m9.829175951s ago: executing program 4 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000019600)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000019640)={0x7, 0x3, 0x0, 0x8, 0x7}, 0x6b) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r3 = eventfd2(0xfffffe01, 0x80001) r4 = gettid() timer_create(0x0, &(0x7f0000019cc0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000019d00)) timer_settime(0x0, 0x0, &(0x7f0000019d40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000000580)=""/102392, 0x18ff8) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000019680)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000019740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x45c, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x20, 0x1, {0x6a, 0x1, 0x5, 0x3, 0xff, {0x7, 0x1, 0xfff, 0xf3, 0xed5d, 0x2}, {0x8, 0x0, 0x2, 0x7, 0x1000}, 0x1, 0xbb0, 0x5cd1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0xb, 0xe59, 0xffff, 0xf, 0x1000, 0x8, 0x474, 0x40, 0xad7, 0x9, 0x6a, 0x9ea, 0x2, 0x4, 0x1a3c, 0x200, 0x0, 0x1, 0x9, 0xffffffff, 0x80, 0x0, 0x5, 0x80000001, 0x8000, 0x1, 0xfffffffa, 0x6, 0x9, 0xb, 0x0, 0x2, 0x6, 0x2, 0x2, 0x5, 0x2, 0x2, 0x8, 0x1, 0x3ff, 0xb2, 0x3, 0xffffffff, 0x4, 0x1, 0x80ba, 0x9, 0x1cb9, 0x8000, 0xfffff453, 0x6, 0x3, 0xffffffff, 0x7fffffff, 0xd84, 0x7, 0x3d3e199f, 0x2, 0x2, 0x8000, 0x7, 0x21, 0x10, 0x4, 0x7, 0xfffc, 0x3f30123b, 0x1, 0x2, 0x4cc4, 0x626d, 0x200, 0x9, 0x0, 0x7, 0x1000, 0x22, 0x7fff, 0x7, 0x8b, 0x4, 0x3, 0x200, 0x6, 0x3, 0x3, 0x0, 0x6, 0x2, 0x2, 0x8e, 0xd3, 0x6, 0xf98, 0xa59, 0x6, 0x3, 0x0, 0x1, 0x3, 0x7, 0x0, 0x5d97, 0x1, 0x10001, 0x9, 0xa29, 0x5, 0x5, 0x400, 0x4, 0xf3d, 0x8, 0xa, 0x6, 0x10, 0xa0000000, 0x3c5, 0x8, 0x1df, 0x1cc, 0x1, 0xb, 0x3, 0x2, 0x3, 0x2, 0x6, 0x2, 0x4, 0x1ff, 0x6, 0x7, 0x2, 0xe0, 0xe115, 0x3, 0x0, 0x6, 0x0, 0x1, 0x8, 0x2, 0xa, 0x0, 0x5, 0x7, 0x1003, 0x2, 0x1, 0x4, 0x9, 0x889, 0xfff, 0x2, 0x1, 0x3, 0x3, 0x1ff, 0x8, 0x8e20, 0x7, 0x1, 0xbe, 0x6, 0x9d7, 0x50, 0x4, 0x4, 0x6, 0x5, 0x7, 0x7, 0x512, 0x5, 0x1, 0x2, 0x1, 0xf0a3, 0x7fffffff, 0x6, 0x17, 0xfffffff5, 0x3, 0x6, 0x1, 0x6, 0x6, 0x3, 0x6, 0xffffffff, 0x2, 0x0, 0xffffffd5, 0x6, 0x101, 0x8, 0x6, 0x2, 0x4, 0x40, 0xfffffffe, 0x10, 0x0, 0x7, 0x384, 0x5, 0x9, 0xf8, 0x91d, 0x6, 0x7, 0x7, 0x100, 0x6ba, 0x1, 0xc, 0x6, 0x7, 0xb, 0x90, 0xffffffff, 0x3, 0x200, 0x2, 0x6, 0x4, 0x6, 0x40, 0x7, 0x74e1, 0x9, 0x0, 0x1, 0x8, 0x5, 0xe, 0x5, 0x3, 0x7, 0x7, 0xe, 0x1000, 0x9, 0xda4, 0x7fff, 0x3, 0x3, 0x7, 0x8c, 0x1, 0x8, 0x9]}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (fail_nth: 7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000019580)={0xa, 0x4e21, 0xffffffff, @loopback}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000195c0)=0x6, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40084}, 0x4000020) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x64) 19m8.885178815s ago: executing program 1 (id=1427): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1bb) mount$afs(0x0, &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x7044}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./mnt/@cell/foo@sys\x00') setresuid(0x0, 0xee00, 0x0) r5 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000a40)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000fc0)={r5, 0x13, 0x300}, &(0x7f0000001000)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000001040)) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') shmctl$SHM_UNLOCK(0x0, 0xc) 19m7.986597571s ago: executing program 4 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)="b063ef2f78e0b6246115a88e06c017723a24a699c828289e94e57d31ccacd0ea9cd13dbf7d8ef659ec017f2839b8508b1cb71fe10b5447d47289cafd68ba3f1536f33a813cc0e3eb35fda495166635708ce60d26e1457ec6a0ea8b84e02461b6068de234a2454ce79e435e51b92a60c54286916eb4ac58521d9191f8a27860f6fafa4afcc96f42ff56e24586426a38f07b0c711d268eb9d81a7515e2b84f3dc312be762d12f3bc", 0xb2) ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010100000000000000000700000708000a1187688d5ef9a90b5e4b2862c74740000000000900020073797a31000000000900010073797a30000000000800e53f0000002120000000140a01040000000000000000000000070900020073797a3000000000140000001000010000000000000000000084000a"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f000000bc00)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = semget(0x1, 0x4, 0x39c) semop(r7, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x7fff]) 19m6.319435311s ago: executing program 4 (id=1430): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000012c0)='proc\x00', 0x0, 0x0) select(0xff42, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f00000013c0), &(0x7f0000001400)={0x77359400}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001480), 0x0, 0x0) read$msr(r2, &(0x7f00000014c0)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0xff) r3 = semget$private(0x0, 0x7, 0x195) semtimedop(r3, &(0x7f000001a500)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f000001a580)={&(0x7f000001a5c0)}) semctl$IPC_RMID(r3, 0x0, 0x0) 19m4.233149306s ago: executing program 1 (id=1433): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x0, 0x6, 0x6, 0xfffffffffffffffb, 0x9, 0x6}, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/lru_gen\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e074f0220", @ANYRES64], 0xa) write(r2, &(0x7f0000000140)='+ 0 0 1', 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {0xfff2, 0x9}, {0xfff1, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x8, 0xb7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080050}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) 19m2.533445896s ago: executing program 1 (id=1437): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000700837359c114bd7000fb28dff32ba97299fb785d341025"], 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) r1 = gettid() migrate_pages(r1, 0x3, &(0x7f0000000340)=0x1, 0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000600)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_dump={0x47, 0x1ff, 0x7}}) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000680)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)='4', 0x1}], 0x1) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="a4000000240200012abd7000fddbdf2505000000060003000000000006000400000000002de5eadc3ef2ffcf66d18d5e0db5217cd79126569ac5e05f852a3edb428fdfd3b4d912988fd75765d49dbc3030a64df3442ff7be3133243868ce0de4a66a7116a484bceeacf199c1c596"], 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x20000010) 19m1.520899201s ago: executing program 1 (id=1438): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000680)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/167, 0xa7}], 0x1) 18m59.526129739s ago: executing program 1 (id=1442): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) prlimit64(r0, 0x6, &(0x7f0000000340)={0xffffffffffffffc5, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000) write(r3, &(0x7f0000000300)='1', 0x1) 18m57.740237279s ago: executing program 1 (id=1445): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x200000, 0x0) r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000140)='crc\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='devpts\x00', 0x0, &(0x7f0000000240)) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 18m49.968830261s ago: executing program 32 (id=1430): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000012c0)='proc\x00', 0x0, 0x0) select(0xff42, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f00000013c0), &(0x7f0000001400)={0x77359400}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001480), 0x0, 0x0) read$msr(r2, &(0x7f00000014c0)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0xff) r3 = semget$private(0x0, 0x7, 0x195) semtimedop(r3, &(0x7f000001a500)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f000001a580)={&(0x7f000001a5c0)}) semctl$IPC_RMID(r3, 0x0, 0x0) 18m40.863942489s ago: executing program 33 (id=1445): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x200000, 0x0) r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000140)='crc\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='devpts\x00', 0x0, &(0x7f0000000240)) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 12m38.140521047s ago: executing program 5 (id=2069): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000014) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000440)={0x0}, 0x7, 0x0, 0x0, 0x20040814}, 0x4090) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/mtrr\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r5, &(0x7f0000000fc0)='base=0x20000000 size=0x20000 type=write-back', 0x2c) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x40104d06, &(0x7f0000001040)="0000020000000000000002") close(r4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff, 0xff, 'rose0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xff, 'syz1\x00', {0xff}}}}, {{@ip={@remote, @empty, 0x0, 0xffffffff, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x248) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x38, 0x24, 0x66, 0x0, 0xa, 0x21, 0x0, @multicast2, @local}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x6, "8dc878", 0x9, "0ed80d"}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d12033618bafeb3926975d1b201ba9ebaf9fbe96171f710c6816f8a922913313", "817ff05ca00092003daf5a835778b7d83fa94c0efbb5874251b68892848995c46f8b736ecde1e6709962e4b4600a8f9a", "7d8f4da9806440cb89f2939c57545847262620ead257b1d79ea45e63", {"5c22878c87f7d790e5d5963195b3172a", "db5701ffac0e726159a1af1eb26adef8"}}}}}}}, 0x0) 12m35.131201302s ago: executing program 5 (id=2074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000009b40)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000022b40)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r6 = openat(0xffffffffffffff9c, &(0x7f0000022b80)='./file1\x00', 0x42, 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009965, r6, 0x0) dup(r1) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000022bc0)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000022cc0)={0x0, 0x0, &(0x7f0000022d00)={&(0x7f0000022d40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x4810) sendmsg$nl_route_sched(r8, &(0x7f0000022d80)={0x0, 0x0, &(0x7f0000022dc0)={&(0x7f0000022e00)=@newtfilter={0x2470, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x2440, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xf}, @TCA_FLOW_ACT={0x241c, 0x9, 0x0, 0x1, [@m_pedit={0xec0, 0xc, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x3, 0x2, 0x60, 0x1}, 0x0, 0xc, [{0xfffffffe, 0x4, 0x7, 0x1, 0x0, 0x7}]}, [{0xffff67b8, 0x6, 0x8, 0x0, 0x1}, {0x13, 0x8, 0x6, 0x3, 0x3}, {0x38, 0x3, 0x3ff, 0x5, 0x800, 0x9}, {0xe2ec4624, 0x5, 0x3b9, 0x0, 0x5de, 0x111de761}, {0xffffff23, 0x1, 0x7ff, 0x6, 0x4, 0x7}, {0xdc9, 0xb, 0x9, 0x4, 0x6, 0x12c}, {0x8, 0x401, 0x2, 0xfffffff9, 0x0, 0xa075}, {0x5, 0x5, 0xfffffffa, 0x6bb, 0x9, 0x4}, {0x3, 0xfffffadc, 0x3, 0x1, 0x7fff, 0x9}, {0x8, 0x8, 0x6, 0x3, 0x600000, 0x2}, {0x8, 0x40, 0xb563, 0x0, 0x2, 0x9}, {0x5, 0x8, 0x9, 0x6, 0x6, 0x2}, {0x40, 0x1, 0x1000, 0x1, 0xef, 0x1}, {0xffff, 0x6, 0x7, 0xa2, 0x1, 0xfffffffa}, {0x4800, 0x84f, 0x5, 0x100, 0x8, 0x6}, {0x1, 0xffffffff, 0x9, 0x5, 0x8, 0x7}, {0x9, 0x1, 0xa61, 0x341, 0x0, 0x8000}, {0x101, 0x4, 0x1, 0x2, 0x7ff, 0x7}, {0x40, 0xd532, 0x3, 0x400, 0x5, 0xa22}, {0xffff, 0xb, 0x8, 0x3, 0x800, 0xffffffff}, {0x5, 0x0, 0x1, 0x6d, 0x80000000, 0xfffffffa}, {0x0, 0x6, 0x359a, 0x3, 0x7, 0xfffffff9}, {0x80000000, 0x7f, 0x58, 0x7f, 0x9, 0x7}, {0x101, 0xffffffff, 0x80000000, 0xd, 0x100, 0x7}, {0x6, 0x9, 0x1000, 0x8, 0xfffffffb, 0x4}, {0x1, 0x13, 0x81, 0x6, 0x0, 0xff}, {0x4, 0x7, 0x5, 0x3, 0x6}, {0x2, 0x0, 0x80, 0x2, 0x5, 0x3}, {0x5, 0x9, 0x3ff, 0x101, 0x8, 0x8}, {0x752db12c, 0x200, 0x8, 0x6, 0x9, 0x1}, {0xc, 0xffffff01, 0x0, 0x2, 0x5, 0x3}, {0x0, 0x4, 0xca, 0x8, 0x9, 0x3d5}, {0x6, 0x7d9, 0x9, 0x89, 0x1000, 0x2}, {0x4, 0xffffff83, 0x9, 0xffff, 0xa431, 0xda60}, {0x80000001, 0xec7, 0x7, 0x8, 0x9, 0x200}, {0x5, 0x4, 0xb88, 0x4, 0x2, 0x3}, {0x1, 0x8, 0x1f, 0x3, 0xfffffff9, 0x6}, {0x0, 0x4c00e733, 0x10001, 0x9, 0x4, 0x5}, {0x9, 0x2, 0xd412, 0xffffe72d, 0x10001, 0x7}, {0xd939, 0x10000, 0xffffffff, 0x9, 0x100}, {0x4, 0x0, 0xac3, 0x0, 0x8001}, {0x3, 0x8, 0xb, 0x10100000, 0x2, 0x7}, {0x6, 0x6, 0xd6ab, 0x2, 0x5, 0x3ff}, {0x4e0f00, 0x6, 0x8, 0xa, 0x91c, 0x1}, {0x9, 0x3, 0x5, 0x800, 0x5, 0x5}, {0x0, 0xffff501b, 0xeeeb, 0xa2, 0x2, 0xefc5}, {0x51b, 0x1, 0x80, 0x5, 0x0, 0xffff}, {0x4, 0x8, 0x7a, 0x8, 0x6, 0x1}, {0x3, 0x9, 0xb, 0x9b, 0x40, 0x3}, {0x47df4562, 0x3bd8, 0x0, 0x7, 0x400, 0x2}, {0x80, 0xf5, 0xa2, 0xa, 0xad, 0x1}, {0x1000, 0x400, 0x6, 0x7, 0x7f, 0x3}, {0x0, 0x0, 0x1, 0xc60, 0x1000, 0x7}, {0x6, 0x8, 0x5, 0xd, 0x800, 0xff}, {0x8, 0x1, 0x101, 0x6, 0xfff, 0x5}, {0xff8000, 0x4, 0x2, 0x0, 0x8, 0xb}, {0x0, 0x0, 0x80000000, 0x2, 0xffffffff, 0x1}, {0x800, 0x8, 0x7, 0xc, 0x6, 0x3}, {0x401, 0x2, 0x2, 0x10001, 0x6, 0x3}, {0x8f, 0xa57, 0x401, 0x80, 0xffff, 0x5c2}, {0x4caf5d69, 0x54b8, 0x858, 0x3, 0x0, 0xff}, {0xd, 0x4, 0x326f, 0x5, 0x0, 0x6}, {0x2, 0x3, 0x7, 0x7, 0x1, 0x8}, {0xfa95, 0x80000000, 0x3, 0x7, 0x0, 0x8}, {0x6, 0x8, 0x2, 0x8, 0x3, 0x80000000}, {0x6, 0x0, 0xe, 0x0, 0x7, 0x26}, {0x1, 0x2, 0x1, 0x3, 0xfffffff7, 0x5}, {0x9, 0x9, 0xfffffff7, 0x2, 0x4}, {0x8, 0x1000, 0x1, 0xbf, 0x6, 0xff}, {0x7, 0x7fffffff, 0x8, 0x7, 0x8001, 0x10001}, {0x8, 0x401, 0x0, 0xfffffca2, 0x10, 0xb3f}, {0x521, 0x3ff, 0x1, 0x6, 0x56e, 0x800}, {0x2, 0x9b, 0x8, 0xeef, 0x2, 0x3}, {0x7, 0x5, 0xe7800000, 0x3, 0x7, 0xffff}, {0x7, 0x0, 0x10, 0xd, 0x2, 0x1}, {0x9, 0xffffffff, 0x1, 0x8, 0xd, 0xd18e}, {0xc, 0x9, 0x5, 0x4, 0x4, 0x4369}, {0xb, 0x1, 0x4e, 0x6, 0x1000, 0x1000}, {0x0, 0x8, 0x8, 0x6, 0x0, 0xcf3}, {0x0, 0x7fff, 0x8322, 0xff, 0x5}, {0x0, 0x5, 0x205, 0xffffffff, 0x2, 0x264}, {0x5, 0x3, 0xc, 0x7ff, 0x6, 0xfffffff7}, {0x24, 0x3fc, 0x5, 0x6, 0x3, 0x4e1}, {0x6, 0x2, 0xa, 0xe7, 0xc0, 0x3}, {0x101, 0x8, 0x6, 0x6, 0x210, 0x4}, {0x200, 0xfffffffe, 0x100, 0x5}, {0x23, 0x0, 0x7, 0x2, 0x7, 0x53634089}, {0x0, 0x2, 0x6b700ff8, 0x7ff, 0x5, 0x40}, {0x8, 0x3, 0x8, 0xffff5d3d, 0x9, 0x6}, {0x2, 0x0, 0x10000, 0x5, 0x6, 0x3}, {0x2, 0x8, 0x5, 0x8, 0x9, 0x9}, {0x9d, 0x10000, 0xea, 0x6, 0xfde, 0x6}, {0xab, 0x1, 0x7, 0x110, 0x1, 0x6}, {0xfffffffe, 0x1, 0x8, 0x88, 0x82b, 0x80000000}, {0x5, 0x0, 0x1, 0x80000000, 0x800, 0x6}, {0x1000, 0x3, 0x8, 0x1, 0x3}, {0x8, 0x2, 0x5, 0x1000, 0xfffffffa}, {0x1, 0x8000, 0xffffffff, 0x2, 0x9, 0x5}, {0x1ff, 0x56, 0x8, 0x5, 0x5}, {0x86b, 0x0, 0x8, 0x40, 0x9c, 0x3}, {0x4, 0xffff, 0x1, 0x6, 0x7, 0x93d}, {0x1, 0x6, 0x4ff1e92f, 0x6, 0x400, 0x3}, {0xff, 0x6, 0x1, 0xe, 0xfff}, {0x5, 0x8, 0x69, 0x1, 0xff, 0x100}, {0x3ae45953, 0x4, 0x80000000, 0x5, 0x3, 0xa67}, {0x3ff, 0x0, 0x4, 0x7, 0x3, 0x9}, {0x80000000, 0xfff, 0x3, 0x3, 0x9, 0x8}, {0x7, 0xbf98, 0x3b, 0x6, 0x5cca}, {0x4, 0x8, 0xc3, 0x1, 0xfffffff7, 0x635}, {0x60000, 0x2, 0x5, 0x2, 0x2029, 0x1000}, {0x800, 0x8, 0x4, 0x8, 0x2, 0x2}, {0xa, 0x81, 0xd0a, 0xb4c, 0x2, 0xffffff1b}, {0x6, 0x7, 0xb054, 0xffff, 0x9, 0x9}, {0x3, 0x7, 0x3, 0x8, 0x2, 0x400000}, {0x8000, 0x2716, 0x3, 0x621, 0x10000, 0x8}, {0x4, 0x2, 0x5, 0xd6, 0x1b22, 0x4b70}, {0x40, 0x56e6373a, 0x8, 0x10000, 0x0, 0x9}, {0xef, 0x6, 0xf6, 0x401, 0xb, 0x6}, {0x1, 0x3ff, 0x4, 0x80, 0x5, 0x1f3}, {0x402b22e6, 0x4, 0x7ff, 0x4f, 0x8}, {0x9, 0x4, 0x7, 0x6, 0xbd, 0x8}, {0x5, 0x4d9, 0x2, 0x2, 0x800, 0x3}, {0x7, 0xfffffff0, 0x7, 0x4, 0x3ff, 0x1}, {0x80000000, 0x400, 0x1, 0xd, 0xc1740000}, {0x6, 0x720000, 0x6, 0x4, 0xfffffffe, 0xb7e462e6}, {0x1, 0x4, 0x400, 0x3, 0x704, 0x1}, {0x719, 0xd, 0x4, 0x2, 0x8, 0x2}, {0x7, 0x5, 0x2, 0x10000, 0x1, 0x9}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x71d672ca7d47040d}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0xcaaa7b9a7e42a48b}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x6}, {0x1, 0x1}, {0x1, 0x1}, {0xbec2f3b6f65cf372, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}]}}]}, {0x5b, 0x6, "c1910bd2fd7622818ac3cab63bf2b2ca9dc8da2093dc0e79e025aab4e5144eed46c64b0dc9030aff7a6ecd63516374882a46a3cbdc80f11aff4e35d321cf6dcd401498e50847f6da6f37b78bce3bfe8883bea99b5f705e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1164, 0xf, 0x0, 0x0, {{0x7}, {0x13c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x5b, 0x6, {0x4, 'security\x00', 0x0, 0x2, "e8a376f3594c16eab71f6e1cce23725628dcdcb0f3787dbeaa68e65862f49572167addbb867ac33074446d0ec7916ffc70"}}, @TCA_IPT_TARG={0x52, 0x6, {0x3, 'mangle\x00', 0xf, 0x6, "9fe99bd3c7dd6ca2bad9327dd5fc4c9b6c5a0fa554be47c6af1ed766e9d686d6eee8d9adf5301c95"}}, @TCA_IPT_TARG={0x49, 0x6, {0x1, 'raw\x00', 0x0, 0x8, "220f7d9a07f431648df53a2b2a453841a2846a4b2097d561af8e5030897878"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x150, 0xf, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x52b8, 0x4, 0x3, 0x5, 0x8}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaab}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x20}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xe7, 0x6, "130e3b4e148ce253d8f4c4c27f59b763ba9923b9605e26e6242121df9ae3ee54186a45bf57a1e1be0a9e71401b97fc9681d0f7e35ae180c18fd270c2f54d8d22f3b8aca7c4f57fa63ff58bc6055e7d39b1c6a81265fc3359c84f5681f4bd39cbe2cf71c51ebe304ce246a4f97624392c512504e02d6efa91786aa4a1c4a6efd9249c8eac79986b7c176444906ad54e79b69cdb9cc525a75ce40c7da1805b0f2ce227744090eb4d592c591a750fd52eae8aa1d7356e96cb2cd6ee80c403ef9b43068e66b4a97ead86415766d5e9393e1fc483d48e990fed83583c872a1e45311a3415c0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xa4, 0xc, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x21}]}, {0x74, 0x6, "1a32e440c0c6f7adc636626e8a12f51705e18857b71f2fac083c6991ad01f050450214aca5b4c0ded07bc329e581ed6b96327fcc79142914e1d6785f220fc8d3032e3bdfbeeee49918c50ea62b89dce6f339918a8cd8484d3d0e8957bac6860064ef183024f5594ec2d4a81d3b8bf75e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0xdc, 0x7, 0x0, 0x0, {{0xa}, {0x4}, {0xb0, 0x6, "2acfc93f942d1f44488118f3b27874f4f54725052d92866e299a8cbf9b310ee2b3e06b74b7ac464e10bc80b532030119d8ee1aa58b7e24ebbb5da08b5bf3fbacd6dd9ed7388ba14934216812c7ef61044c4215a8f732426d81ae496f1254620ef5645f15f01cf41a8989c98d67d040042bef06d76edee73746f32d1223a2e40f1e2a9a0e2680d46c71ef524ee456a1f73f83487a95bfa839bff6f0ce513867d2653c1dba5f3c3c03722b1906"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x124, 0x7, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xff71}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe}}]}, {0xc6, 0x6, "214ccbfa63878bf83576c01c1c2899a83f9a76d0ab078beae6f6b56a9ad66c6c419570ea5b8ce558bd3a65e7e549b478b728ebf59d140159efdc580f514c2e0bf0d43ae7636ea4cf3bd51f0c5117d30c0db75a19d327e471f38a3784fbaf9b29b70708ed840c698cd5ac7842e9ef152a72aabcc0d3d362c611aa707c7a77096f8f909037775c9b161a8ea0979c6e61df06ed07cf61ca6ae6b39d6a2be4ef008ea1f70af7dda0142852e2ac6d1fc94c1c46f50c2c758d6359d1385f0c471e5a6c4bd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x10c43}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x2470}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000025280)='oom_adj\x00') writev(r9, &(0x7f00000252c0)=[{&(0x7f0000025300)='15', 0x2}], 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) 12m32.660128576s ago: executing program 5 (id=2078): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socket(0xa, 0x3, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) setreuid(0x0, 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setreuid(0x0, 0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x400, 0x0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) r1 = io_uring_setup(0x68a0, &(0x7f0000000100)={0x0, 0xfb6e, 0x38c1, 0x2, 0xf0}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000380), 0x400006d, 0x20000004) recvmmsg(r3, &(0x7f0000001740)=[{{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/129, 0x81}], 0x1, &(0x7f0000000500)=""/40, 0x28}, 0x1}, {{&(0x7f0000000540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000980)=""/157, 0x9d}, 0x101}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000001c00)=""/227, 0xe3}, {&(0x7f0000000a80)=""/65, 0x41}, {&(0x7f0000000b00)=""/66, 0x42}, {&(0x7f0000000b80)=""/240, 0xf0}, {&(0x7f0000000c80)=""/111, 0x6f}, {&(0x7f0000000d00)=""/9, 0x9}, {&(0x7f0000000d40)=""/247, 0xf7}], 0x8, &(0x7f0000000ec0)=""/208, 0xd0}, 0xc750}, {{&(0x7f0000000fc0)=@phonet, 0x80, &(0x7f0000001180)=[{&(0x7f0000001040)=""/40, 0x28}, {&(0x7f0000001080)=""/215, 0xd7}], 0x2, &(0x7f00000011c0)=""/213, 0xd5}}, {{&(0x7f00000012c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001340)=""/89, 0x59}, {&(0x7f00000013c0)=""/84, 0x54}, {&(0x7f0000001b40)=""/132, 0x84}, {&(0x7f0000001500)=""/232, 0xe8}, {&(0x7f0000001880)=""/228, 0xe4}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000001a00)=""/134, 0x86}], 0x7, &(0x7f0000001640)=""/212, 0xd4}, 0x40}], 0x5, 0x0, 0x0) shutdown(r3, 0x2) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000240)=[r1], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 12m27.135843331s ago: executing program 5 (id=2084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000440), &(0x7f0000000480)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @initial, @from_mac, {0x0, 0xaa}}, @a_msdu=[{@broadcast, @device_a, 0xf4, "c291e9119f12d62f23a5beb1ff8d8b938d5f4640efe0e54d6226ab8bf54d1427a316aba047e37bce05e8581d25959504d4bb5436f5ea90632db93149ca1c94d392a6402c136a0d705154194c2ca8ff012c12b93e01a39ac031161b71a1d6495fc90578403f03a8e74ec3841a57c8012a19c69e6f876716ebc15fccbaac6493f2411e2e0ccdae0ef84c260687f5331bfd5cedfae8c63188c0d40d0a39bf81daba3acbe5d1799d1dac1479df8f98ceb0afa08dd4e55d50d3b6b2827dd588508caa2928f964c4e9debdb5b2e71ff49161602b4d4f320878d898746bd38200411a9798006f71325f3eb0977529d967b658052fce0cfd"}, {@device_a, @broadcast, 0xb3, "ab1276f1cb18158d16d6f7018db27915f219a8f9d1685c3b337f9be10e09e4e88ba7320e385ac784c0f661c4239a8f8d903dc41980daeea044c7ce00ec8e4b977f0c0ac0d92f6c562e6b868580fb142854a3f010c4a49331a8d4883307ef258171d3d0ec50b2ae2e727bfdbe7a06532bbac90a7f6df6a669d579430e17e5312feab7fbff66134bb320ab1f442bdb85d54a7673e9071f08cf08929d5c80baf5c922729d759aad7af36e1e7a8cfe8c2e208a9e40"}, {@broadcast, @broadcast, 0x7a, "5d829ab902c7fbc006ee0415c7344e07e80464ef181c44f49492c558593291e2a8760e635a6d565d710c0207ec02aaa26b74ab381fb12490850baf6852b5b429800826515a605856d200f16f3992b60139bfaee90b8e7103b4d15cceaebf34c6cef06bf3c947495705472389f4b3eb821626aabddbe1a4e55623"}, {@device_a, @broadcast, 0x4d, "5bc5c5b8f12e7955a586f0e2015b29d0b70586357c4347e75f622b95e43271615c7fdd12f56f625be20bb327520c1bf11d38dd2cfeb6b0161fa7110c520a1d5cbfdd1dcd894c104d90043acf9f"}, {@device_b, @device_a, 0x9a, "a75995b61e149207bd9ac648fb1cfcaaccd20f0f164f1a9c77c6bf333170c1144d2fa249912c75890558640198d5602b8107c54c1518ceef2f2e8dd3be8e501b4fb077e9fea0f926b79978609daf568406af8073de52a4270063dafd92699dfc6b0d2cbc5d5007e569a21d9b86a31e25d265d440e7eea1b1a10fc7679c5e8992649b8e0b478b055e06f7d6b8998ab8cf29a87c2f684c96a884b5"}]}, 0x36c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, r2, 0x3, 0x70bd23, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8850) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x20004890) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r0, 0x0, 0xdb, 0x85, &(0x7f0000000bc0)="8623596eddf1f88e8eeabdab1792fce00172224a5357a40971fcba9fedd13aec80f176b6bb05681884bf19c21115854b12704d97cdfc3b78431fee37fee390c371977eaa9e3796aa058e457bcd903aa07c9a4621eb183d871cec234c22c3fe4d492f975d536bedb8a524f28343abb1a90c324eb8f9eb5abac1105c939ae98cfda23ae046a0e8ed61215e8d9776d21819e53d4c2f49e041f47d31d1893c83c5b02c19c8a211620bf188c7da5e087c000fea6e76fdadafb7721ca24f7f29176e8122358c478c76a0cc667280f81860819fa534b08fc4c1cae526fb12", &(0x7f0000000cc0)=""/133, 0x6, 0x0, 0xb7, 0x9d, &(0x7f0000000d80)="f4a5f4afce3c84ace1034ec1db7c6b63d938b21cc03d7ee38fc2a40a8664b7b014e33814c9bbe411e9e1733177b857a98cb13593d949de1e31eb2a5a3cdd522d88b5cdf85f391973c20fa3b72d2487cdd81608838fa2b060771c84995d82c1e34954107f1828584a799281ef05df0f53cc557fee12fc27225a011c8a49803cbb464af6f58afd9cf7ca97da66236e45b99b9adffacff47d0ac57a385976e031b3e670257941cb0c3f8b7c182f41bfaaa141076eab857ce0", &(0x7f0000000e40)="ea3195031f43f362c5bcc4ada5b2cbc7eea2b73ebe76088897c7765e6a48eefd3b6ee8e7cd145290d75fe5c08cc7dd571b9bb91c0f27c730c10e04a671fe98408ee6c6f0a7152ce0c9d215aca4b7a7e3261f07c2dd9d0ce5fa0340063596352e2e08bbef7fa00716b1171a47c73d6d08122545464d9d58a8b47fbb433016accad689e89c568b70f9c8dcbc38739544cd5055a62a81e722be73137842ca", 0x4, 0x0, 0x5}, 0x50) socket(0x10, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000a80)='\x00', 0x9801) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x267) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000f80)={0x2, 0x6, 0x0, 'queue0\x00', 0x2}) prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000010c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000001100), 0x2, 0x141102) writev(r4, &(0x7f0000001140)=[{&(0x7f0000001180)="94", 0xf000}, {0x0}], 0x2) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="9c0000000906030000000000000000000000000a5c0008801c0007801800168014000240ff0100000000000000000000000000010c00078008000a4000000007100007800c001940000000e8324cb6bfea070b800900120073797a3100000000100007800c001b4000000000000000082400078005001500fb000000050015007839a30f2dcaf5ea4e22000005001500fd000000050001000700000099a6bd87b0cb96531815f053de17"], 0x9c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffc, 0x17, 0x8, 0x2000, 0x2, 0x4, 0x900d]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20008080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={0x68, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f00000015c0)={'wlan0\x00'}) openat$vnet(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) 12m26.116331948s ago: executing program 5 (id=2088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001a00130700000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000001000000000101000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000104d232000000ac141438000000000000000000000000050000000000000000000000000000000008000000000000910e00000000000001000000ffffffff0000001000000000010000800000000043050000000000000400000000000100ffffffffffffff7f00010000000000000c0000000000000000000000000000000000000026bd7000053500000a000440540000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000740)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000780)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000019800)=0x80000000000003) fsmount(0xffffffffffffffff, 0x0, 0x2) open(&(0x7f0000019900)='.\x00', 0x100000, 0x115) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x100000) 12m25.244812781s ago: executing program 5 (id=2089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x101}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x67, &(0x7f0000000400)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000440)="340000001a0001000100e000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000480), 0x3, 0x1) write$P9_RVERSION(r6, &(0x7f00000004c0)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0xffffffffffffff48, 0x0, 0x0}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x200, 0x3, 0x6, 0x70}, {0x2, 0x1, 0x40, 0x8}, {0x6, 0x4, 0x35, 0x4}]}) 12m8.567103238s ago: executing program 34 (id=2089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x101}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x67, &(0x7f0000000400)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000440)="340000001a0001000100e000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000480), 0x3, 0x1) write$P9_RVERSION(r6, &(0x7f00000004c0)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0xffffffffffffff48, 0x0, 0x0}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x200, 0x3, 0x6, 0x70}, {0x2, 0x1, 0x40, 0x8}, {0x6, 0x4, 0x35, 0x4}]}) 10m54.781147341s ago: executing program 3 (id=2234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001300)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000014c0), 0x2, 0x143102) writev(r1, &(0x7f0000001500)=[{&(0x7f0000001540)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000001580)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000015c0)='sour\x01\x00\x00\x00U8C\x83\xeb\xf0T\x85\xd0\xb1\x16\x90\xd5\xd1\'', &(0x7f0000001600)='c:::\x00', 0x0) socket(0x10, 0x803, 0x0) io_setup(0xd0b, &(0x7f0000001640)=0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f00000016c0)=[&(0x7f0000001700)={0x0, 0x0, 0x0, 0x8, 0xe, r4, &(0x7f0000001740)='-5', 0x13, 0x0, 0x0, 0x4}]) userfaultfd(0x80001) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) fchdir(r5) mkdirat(r5, &(0x7f0000001780)='./file0\x00', 0x0) epoll_create1(0x0) r6 = syz_open_dev$evdev(&(0x7f00000017c0), 0x2, 0x862b01) write$char_usb(r6, &(0x7f0000001800)="e2", 0x2250) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) iopl(0x3) r7 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) 10m52.811173716s ago: executing program 3 (id=2237): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000740)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000780)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000800)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000019800)=0x80000000000003) fsmount(0xffffffffffffffff, 0x0, 0x2) open(&(0x7f0000019900)='.\x00', 0x100000, 0x115) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x100000) 10m49.873139921s ago: executing program 3 (id=2245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/zswap/parameters/compressor\x00', 0xa002, 0x0) write(r0, &(0x7f0000000700)='lz4hc', 0x5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x3, 'batadv_slave_0\x00', {}, 0x8555}) 10m43.504886321s ago: executing program 3 (id=2255): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000740)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000780)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000800)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000019800)=0x80000000000003) fsmount(0xffffffffffffffff, 0x0, 0x2) open(&(0x7f0000019900)='.\x00', 0x100000, 0x115) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x100000) 10m40.386684744s ago: executing program 3 (id=2261): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000180)="67ba", 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x0, 0x0, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) (async) ioprio_get$pid(0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2002, 0xc0) (async) mkdir(&(0x7f0000000340)='./myproc\x00', 0x1ef) (async) mount(0x0, &(0x7f0000000380)='./myproc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myproc/scsi/device_info\x00', 0x1, 0x0) writev(r3, 0x0, 0x0) (async) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000500)=0xc) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x400, 0x4, 0x3}, &(0x7f0000000580)=0x14) (async) write(r2, &(0x7f00000005c0)='7', 0x1) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000d80)) 10m36.589327555s ago: executing program 3 (id=2272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup2(r0, r3) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f00000008c0)={0x2, "310b1bef48e5b24ffd49a5aaac104a03bdf1130ee9a361593bf3572ae3f54dab", 0x2, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x3, 0x8, 0x4, 0x6, 0x5, 0xfa, 0x101, 0x4, 0x5, 0xffffffff, 0x70f11a29, 0x332afdda, 0x1, 0x6, 0x4, 0x800, 0x1eb, 0xa0, 0x9, 0x0, 0x8b1d, 0x7, 0xfc8c, 0x10, 0xaa2, 0x608, 0x0, 0x38, 0x4, 0xfffffffd, 0x2, 0x8, 0x1, 0x10, 0xfffffff7, 0x62, 0x1, 0xa24, 0x0, 0x9, 0x4, 0x3, 0x7fff, 0x0, 0x7, 0x0, 0xfffffffb, 0x3116, 0x1, 0xfffffff3, 0xc85, 0x4, 0x4, 0x9, 0x8, 0xf, 0x8, 0x3a02, 0xe, 0x523, 0x7, 0x9, 0x8, 0x81, 0x9, 0xfffffff8, 0x6, 0xdb, 0x8, 0x0, 0xd8f, 0x8, 0x4, 0x200000, 0xffff, 0xfffff3ae, 0x0, 0x8, 0x7ff, 0x7, 0x5, 0x6, 0x0, 0x800, 0x1fe679e7, 0x1, 0x8, 0x2, 0xb, 0x7fff, 0xe, 0xfff, 0x0, 0x3, 0xffffff53, 0x5c, 0x1, 0x0, 0x76b, 0x9, 0x1, 0x8001, 0xfff, 0xffff, 0xbe7c, 0x3, 0x40, 0x4, 0xa, 0x0, 0x3d9b, 0x4, 0x5, 0x4, 0x8001, 0x8001, 0xfffffb63, 0x2, 0x1, 0x7, 0x9, 0x2d87, 0xfff, 0x7fffffff, 0x7fff, 0x7, 0x3ff, 0xae38, 0x8, 0x923, 0x0, 0x4, 0xffffff81, 0xca, 0x6, 0x1, 0x9, 0x200, 0x401, 0x5, 0xc7, 0x1000, 0x0, 0x48e, 0x1, 0x400, 0x5, 0x0, 0x80000008, 0x40400000, 0x2ac, 0x2, 0x80000000, 0x40, 0x6, 0x200, 0x8, 0x7, 0x0, 0x976, 0x9, 0x4, 0x1c0000, 0x9ee, 0x6, 0xe3, 0x5, 0x8000, 0x5, 0x9, 0xfc, 0x67, 0x2d, 0x3, 0x9, 0x3, 0x8, 0xed43, 0x5, 0x1000, 0xffff, 0x9, 0x1, 0x8, 0xfffffff9, 0x8, 0x10, 0x384a, 0x7, 0x2, 0x23ed, 0x4, 0x8, 0x7fff, 0x1, 0xfffffff9, 0x80, 0xc83, 0x8f, 0x7, 0x9, 0xc5b, 0x3, 0x3, 0x7, 0x4, 0x40, 0x5, 0xb, 0x0, 0x1000, 0xfffffffa, 0x5, 0x81, 0x1, 0x3, 0x3, 0x800, 0x1, 0x0, 0xfffffffa, 0x28, 0x80000001, 0x2, 0xffffffff, 0x661, 0x1, 0x8, 0x872, 0xb, 0x82, 0x726, 0x0, 0x0, 0x8000, 0xffffffff, 0x83, 0x4, 0x6, 0x81, 0x7, 0x9, 0x9, 0x4, 0x7, 0x4, 0xb0, 0xffffffff, 0x7, 0x7fffffff, 0xf, 0xf90, 0x7, 0x8586, 0x3d7]}]}]}}]}, 0x43c}}, 0x40844) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000780), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r10, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1b40, 0x18e0, 0xffffff80, 0x178, 0x0, 0x178, 0x1a70, 0x22b, 0x258, 0x1a70, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x18b8, 0x18e0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@u32={{0x7e0}, {[], 0x70}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @private1}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1ba0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000a80)=@vmx={0x306, 0x0, 0x2080, {0x26000, 0x1ffc, {0x2}}, {"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", "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"}}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = dup(r11) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r14 = syz_open_dev$video4linux(&(0x7f0000000080), 0x20000005, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r14, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) syz_kvm_setup_cpu$x86(r12, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000a00)="b9800000c00f3235000400000f30440f20c03508000000440f22c036746665f36526f24c22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30470f013848b80010000000000045808023c00f21f83500000b00c40238f76600c481e57dcd", 0x6c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 10m20.319393723s ago: executing program 35 (id=2272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup2(r0, r3) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f00000008c0)={0x2, "310b1bef48e5b24ffd49a5aaac104a03bdf1130ee9a361593bf3572ae3f54dab", 0x2, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x3, 0x8, 0x4, 0x6, 0x5, 0xfa, 0x101, 0x4, 0x5, 0xffffffff, 0x70f11a29, 0x332afdda, 0x1, 0x6, 0x4, 0x800, 0x1eb, 0xa0, 0x9, 0x0, 0x8b1d, 0x7, 0xfc8c, 0x10, 0xaa2, 0x608, 0x0, 0x38, 0x4, 0xfffffffd, 0x2, 0x8, 0x1, 0x10, 0xfffffff7, 0x62, 0x1, 0xa24, 0x0, 0x9, 0x4, 0x3, 0x7fff, 0x0, 0x7, 0x0, 0xfffffffb, 0x3116, 0x1, 0xfffffff3, 0xc85, 0x4, 0x4, 0x9, 0x8, 0xf, 0x8, 0x3a02, 0xe, 0x523, 0x7, 0x9, 0x8, 0x81, 0x9, 0xfffffff8, 0x6, 0xdb, 0x8, 0x0, 0xd8f, 0x8, 0x4, 0x200000, 0xffff, 0xfffff3ae, 0x0, 0x8, 0x7ff, 0x7, 0x5, 0x6, 0x0, 0x800, 0x1fe679e7, 0x1, 0x8, 0x2, 0xb, 0x7fff, 0xe, 0xfff, 0x0, 0x3, 0xffffff53, 0x5c, 0x1, 0x0, 0x76b, 0x9, 0x1, 0x8001, 0xfff, 0xffff, 0xbe7c, 0x3, 0x40, 0x4, 0xa, 0x0, 0x3d9b, 0x4, 0x5, 0x4, 0x8001, 0x8001, 0xfffffb63, 0x2, 0x1, 0x7, 0x9, 0x2d87, 0xfff, 0x7fffffff, 0x7fff, 0x7, 0x3ff, 0xae38, 0x8, 0x923, 0x0, 0x4, 0xffffff81, 0xca, 0x6, 0x1, 0x9, 0x200, 0x401, 0x5, 0xc7, 0x1000, 0x0, 0x48e, 0x1, 0x400, 0x5, 0x0, 0x80000008, 0x40400000, 0x2ac, 0x2, 0x80000000, 0x40, 0x6, 0x200, 0x8, 0x7, 0x0, 0x976, 0x9, 0x4, 0x1c0000, 0x9ee, 0x6, 0xe3, 0x5, 0x8000, 0x5, 0x9, 0xfc, 0x67, 0x2d, 0x3, 0x9, 0x3, 0x8, 0xed43, 0x5, 0x1000, 0xffff, 0x9, 0x1, 0x8, 0xfffffff9, 0x8, 0x10, 0x384a, 0x7, 0x2, 0x23ed, 0x4, 0x8, 0x7fff, 0x1, 0xfffffff9, 0x80, 0xc83, 0x8f, 0x7, 0x9, 0xc5b, 0x3, 0x3, 0x7, 0x4, 0x40, 0x5, 0xb, 0x0, 0x1000, 0xfffffffa, 0x5, 0x81, 0x1, 0x3, 0x3, 0x800, 0x1, 0x0, 0xfffffffa, 0x28, 0x80000001, 0x2, 0xffffffff, 0x661, 0x1, 0x8, 0x872, 0xb, 0x82, 0x726, 0x0, 0x0, 0x8000, 0xffffffff, 0x83, 0x4, 0x6, 0x81, 0x7, 0x9, 0x9, 0x4, 0x7, 0x4, 0xb0, 0xffffffff, 0x7, 0x7fffffff, 0xf, 0xf90, 0x7, 0x8586, 0x3d7]}]}]}}]}, 0x43c}}, 0x40844) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000780), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r10, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1b40, 0x18e0, 0xffffff80, 0x178, 0x0, 0x178, 0x1a70, 0x22b, 0x258, 0x1a70, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x18b8, 0x18e0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@u32={{0x7e0}, {[], 0x70}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @private1}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1ba0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000a80)=@vmx={0x306, 0x0, 0x2080, {0x26000, 0x1ffc, {0x2}}, {"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", "2cd15bfd79e6028d6d0f9a1fe1274a5a95354cb78d07947c7acef67441cf9e230f1c4c80e2050db4e149a6734333a0b73b35ee1e3b44ac758f0fe54d7814db51b154a85c88c7c7db8aaed852cf698122c7d9b3ba8ea69ee7746a67766449d30237c8800a83cf86e5b0ddc36f01eea71a256d30abc55eead29c9ebbab45bb43e7bfd883647ec54a6d0e46eda6485d83a1c4046fc52cbe2f161f0711b171ba6348fa7ee2c9be99fc759dde14df3326b79587730a22deced0851d1f87bf5b71f833252ecd404678db8f5abfafca0906b45149840719201ddab6a48c75889f8ad765cdef5a10670444e434f30af9fd80d360f3e84ad9044e2bfbf28dc3d4e766e66c8b0aa8379e8319381d988771f69e2979486bd7e71bed1a50c6d9dafd9505428d55c7bf8e9c234c5ce2020da29bac924396cb052bd1a6c253197f540a2741f958ce63f399252d604bd2ad3a8b6c6d9be2b08d660ee55a6fa2fdf195445642b555952fa60688a153160a6089e51dac32d693710c0b4738c701d8f31d9503fa4d5193d2537a9c8658fb93b26cb6dbe311b735ee9382cb09e93f9f26a7d485459d98f644f0517f9e6f2258d0882791b96a5ec348cc261d1bb79e91e38a1b72b9410e810154822ff5622e95b2d2ec6d9ce9cab7e11a57b724375af345f223562ae955ab9c45fe4b5cc38d8b9a99dade7bbefd4dab797740c1899b6bef5f0183b0fdaaf68e617137f9bf5208e0e87a01724259a0a97e5c7b832d9cdda019b0c251b0e4986c6f969d34f77eb92ede3c3ca06a1e95ce935f102750df9edc8df4fbf9bd7ec0d28b569ba3dc930cbe7ef4f224e86154de88441b2273276ffa11de99da52c8b40b8be0f4e7e7dcb19710766ca19c4a8be2e7340d1c1dcee501d5cab5bbcf41f3e0f2ef1054eda84b7f6661c9a4b2888781f08ebf48fbe80b79ffe4cbb635c20bde4b1c4a93e473ee7778773d07676471aaff7ef81d86e48dbf47ed7065bca22644534ff5a300687b54528b091ad3677bb1ad19e01ac8ffcc505d17a8b084a8a23b46991c029246a0e0ec3a81d9cbae591b6271bd7b72e3949d4b0a9441c3b87c2f7438103d37267980ce93273a46841e00b13f40087fdd72909f44ebfaa667886de9c5d45713875c8c6a22b776a2fa68a0868fb477eb9b0a2fb77ec61306380eefdffa63540b84d3a8d58a75ce5ab0670bab90a4c69ecf20d093655bd891736cfc1626c7355a91c0f76b087cc2539b338bf2a6cd0e38adb68c95a67caf2ff1124a7084575a7900d0f2a3717647fe650df90bc495d2a806289f8a8ea3c3fd81eb7b1a16bb1f93ce9545056b516799e55072ec3076b935e26583bccfb9f35cfc9317b087204c34904516a5649aa23b5013334f9a87bca5d95b99ea5685566c6739cf2c499f38165cb1380738fab967ba9736be11a30641316c48b4727f1e71c1f24a6de1102d9ecab41dc4ddc4ffa0870148569153c7dbc909039b414d6948c8867282e035a236148f447d0ce0d4c45e49a2c5a1ea0bb106cd4eb0c14da0cb4d96ad9fd2eb77047736a30996f9841153e3876620bcedf0777432aa583b7279503fc87de38a6419a6af094a95d89d31311ceb5892aaf4d23832d9a82d592ca6eb08a22290dbc58cf1dc95c8d147e7cdc4c0a5aa80aba73917dc5de79e6a34c6bf38994fa6677266b5c5a6947cb38b25525f73bf36382f4703c8a7239e45a32f4df1db52e1175e96e77a76fa2871563ee7de7b4bbea43d1a19911ae15a2069e42e3006235fef7465f058c2fbb3fb37def3e82a5eeb929b2021d6b01dd3ee2f7c7398e25208a5877a2fa9e5bff279e782e36bf1c866ff96112b8afb0a354280a1c7cc54974c35532f571d5c8fa55b20d0c47a338c62fbfda10364ed5b25bd657d67998f3ce1a37c5152e6b989319a184e2569f91f5c4e5e5b981481ae9ed7bd3d8e8357bf765df4136af743c6d19381f79751f008bdec09418b364f4d358f7e05b99f06b02ce9bd7c2fc59dfc5fa4fc270f8c8e31d607c661972193138fe54d1fdbb4a0a00ed5b62c0dc0b2e85c6cc5e52ecbe329f46d05418685590cef5444fe924e769a876c93c007fa33afa061993e62d9e48120f0500b4d740f1d76d7a14751324fffa3181d3eeb0c358b58a21fcff1283ccab932987b8d90e2519e77f8b8ca6f0341190a2569b667db1c6e3a8815cce58512c8c2da6adfb266b479e6d6e416fb1c79e8b2332756423060a4d77ed0b5fa1bef1f09da2c8bf108b314fbc8880a93a67d2b9a1159523c6c2556df251f149d57a1dfe7e5aebe9a9b2c09500cda406fd6da2f8aec2810b5d95f729e78443ed6d9e9123e38bd1d6e9384133bdc4a7e0ad3d13d5f231dd1cfb35b2e0a54dc4e5c64a79b389bc34a7e755e49ff6f4abdbd2b611d4e0b3d973b2a290d14f6a002631ac05cfbc62ea0406a0a23cfe51524f748c6b45887acf18fd0eee48d86761b7da708447c3ecbf2e0a36109cd07854604fc745ce57d41e7e23de1645ea56508f6ddcfaa4b52341b49f4d3f68d68df078a77e3312b984d4134245f042a9c4b183d2f397a495128315d8b7a611269d606a837662a2759c2e456ad8e26cf25bec39146da1d26cd4db971248b810ebcad00bc1d7bdf946eca854eecbcae4cdabb7035f1920fc6bb322f03593f14865b98b7f6f05f4667611457a35a8ea5f0d2f04632373cdac69b18b30bc00ea2f2403f11926e261f666e90db7afd39e0340ba0c4b29736cc3a012682be2bd9199487bb76de99464b178aedaa0307a7f9624e94b3b7dc88af7baaa45219e9c901ca5185245a23901d500f3026e3063c9ea5c77d6615ff05b3bd9a13e340dd067d63924015222ed4f201f86d908fdd020505f41711d536d27b234614637bf6ccc6b27d811aa897eba561785ff5cd325140bb7296aaebb46b51376d1fd39a4014b449292e998fd7b6a60d095823650c2bdbfb51ccb0eb2957577a32a636f4732466c71776f01290eaf33a65b959eefc7c2da0deadd53c86d6ae7710fc5a67a08b33a705a42b73760b9d353071990b1fc8799d9b287d3d09b92121d241c7bd58d4747cd4e8eb62ab20ef0eedf15be36c65e620c3f6392c828e2ff993fa81e32d1235a8bc16346b30c2d1dd945463eee481b83eb39b58cd80792d30c54888453010f7053d8f0389920c129ca4ba5a2b785c68790f8f5bfe4436cf560e2d9fba6819777aef46883ae63c65d6db6be3979c0c10d13fe09d7ac9c90d8dc442ec06ed2702754fb2d43d3654218761dd4f8ea404e1bd537fe43468f3e76b8f199f60d8552026d1978df2b268c4d8e35eafa38824a13abf44ac41981b32e4d9fc39c6c616f9e38098d0ac5f863dd4bc1a8973d5d8820b2d206ccde23a35466f80024ec2f30a957fe6384d20b80246c551307fc7a5b6cff21ee25aadf054ef5d61ce258581dae373a2d0b5a334e07ae3b697744c7ea4993a9779313dc847bc5ba7627f6eed73a2cec4b257a861239dc418496e9fdb5f0f642d4b26fd3f898c10c357bd2ef90714d66b92492dc7e08f451dece3d4d501caf583c23bc66cd2aeb558c61a391a4fa8b82022ca24639c3de6e9a79df3494e831bb3f81f70b37766fd5d2a0e70b5a0988db6bf36c015e1977a6f46f3aee78a50090269b1c5e6d0cb2bb3f73957a6cf334277da08c58644f69cb6fda69c76fbe8a437ac8cf765255eecc79e8ca90587337bd567da168a1d2b52698b17c8cc1beefa926d077fdaaa83e81f967f409b8aff8c47c904b9879caea6644e349f03af7c2b29d1ecb871ef6f6698eb70937beedffe8caeba1053fe5e4880c6db51607c2caf238dfa0dfaaf12211aaa0b98b246bc102baa091c3103ad75b5955ffc9b8d524fa300392e56d9339a1f80e9fad38365b48fa0c1329b74b9fdaacf7685a896a33c54a89c024fe8b2d00cdb44b74952d6b3e1e66d5cb57ac09f103c32801f3b129ff24da559535d2f3767cdd4af28f10a99501f28e241910bba604c0f9028f45433e6833fafee45a7e003b47604a6edc7e00d8cfbbdd882748686de6f95c01fdec39e751e3e94dc53233b7065c014f1ea2e2d7293c95d3b00cacf5e3b98bad7c714195031a42317e26e3e6f793fcb416aa0cfcfa45ba1620b6138ad3a842258dd7f717b32f7a0f22bc746c5268ac0298013b91b83547d49d3cd153c739535b6ad24aace46d64338d75a82478df14a44fcc480d0ec814acf6c2daa8e7fe31abe73dd7cf98c445277722e7803585306310d3888f021f1319d9e84ca9e478eb0a2768397e94eb2878ad21bcccf54f7608b09450d0a4cd0e2cacc69688127c35ce38c6e2c122336a472d6670290ab20f3c209d6514af5077cf1214880d66cb00f375637e5761d686ccea1cf111d7a08983ccabfc62fb107907d8ac4cce6894c0570e34ba2495368908637cd4ca0188ae568d8ffe5689981dbd2c23ccbd963af0e980d9e264de24740c4385ef4decef03952657dd34f104686ba9251b5321d60c91b4a6d0a80958b2b6c8dbe587205e053559a54597a41b83c978fe1c4ec629d85a8ceb8c04513e87adb369a6ca1e6791d6831838b85e4d0f36e8b41e69910590d383f8e32874fc72bceb88bc32ace1b6d1a4bbba680b214e0001dd77cada25b02835d360974a992e1a003376f3b32c27d8fa0023252faa2b0e5d353e1a820b5738c3b2dd30817477ff5ece713731ada0a18f3b818362f543951e88cfd628c47ae4512add78a784be0af8b41c86ad0403474ece6d8a6a9b8dd26cb4b9e88a3229f3b791f68633101ef434e97a0119ed29edb23c4310fa509e3512648097f2038c6f707ca4d8bc1edde0b092a099f888ba119325dbd4f3024d84c7e99ab036ff6e48d864b0113ffff8c2d9b95062b36c44d91fc58fa063e6e0ea0f2149dc808c500321838c978b9d59490bbcb5229ac768f70d7fb2a540e71247ba505f8a73aa050e47d4ad3bc2a07e8d5dcc9b05fd9db9a77d90e5ed6e3f029362ff039feaef0734a99bd37d87852070cc7639ca3376385829716528dc926dcb46e1873e2d068792bb34bd178283ddb883f559a6f9a6bfa7050bbfdbf8a6216eb229675935635987ef570b1a47b81ccac80609056b59378bb7e9a9ef87ba9e97e3356e00ff981e2aaf883d027593043af41981bf37f03aea8818729b53313cbbcacb618c7d5fbb52b4950d754464a7bb9b929d8b49f14fad0ce591442923dde00538a00765098c3f75117d4dab79cf2791b90b6250c0733af4c4d7ab31a907d17f2687c8f783b3430dc9ea14d6fcff4466d3fb4b553ed2ed831fea163f994a757cc86a4b5d8bb0f9c0efd480d9b4f355cda99e4c79873f3b562519ae403b0c27a2791fccebfa3f7e5e5e48ef3610e5db7f588623fdf01450e9ef3377891b5ea96ee8b50fe41bd0b543b575b66764302124fdbba5a5bedd0abae3fd0b5491cab66c925efaac8a7a439fe82434d87b530ce77e6c143aec34fe4399cf163b95c81e984fc0d33b1b716d5f2870e488a5d4aecb5a29113d2761083ad2ad6cac90a15160223403ba8f290e9d6549041fcb308b7a3c02a32a2df14a8e3628706a9809c6446b68b65fc4d5a0c7da6e38d8e72ed6a411cf5d1b7840cafdd29be7d9394c3bec5ba185a48ab43adcfb5b0abb40ad4cbae927a1b62171758f40eae475652201b8e77bed5ee19e536a37f896350d8a0b181d6252d4079d442facc4d7931739bb4f5859d53bd7d00790164659ae48fde5d102dbd32930d34f33de0ebcd6170af50cb92516a05e0345e47686bf04e2545a56140b5fd75d02de24f66ab6a"}}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = dup(r11) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r14 = syz_open_dev$video4linux(&(0x7f0000000080), 0x20000005, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r14, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) syz_kvm_setup_cpu$x86(r12, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000a00)="b9800000c00f3235000400000f30440f20c03508000000440f22c036746665f36526f24c22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30470f013848b80010000000000045808023c00f21f83500000b00c40238f76600c481e57dcd", 0x6c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 2m36.848464108s ago: executing program 7 (id=3435): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) wait4(0x0, 0x0, 0x40000000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0xfffffffffffffffa, 0x1, 0x56, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x80000) r4 = io_uring_setup(0x3ebd, &(0x7f0000000180)={0x0, 0x773, 0x8000, 0x1, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) epoll_pwait2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) 2m34.038402906s ago: executing program 7 (id=3439): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m33.707513203s ago: executing program 7 (id=3440): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={0x0}) dup(r0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0xc, 0xb, 0x5, 0x5, 0x1, 0xd, 0x1, 0x8, 0xa, 0x4, 0xb, 0xa, 0x10, 0x6, 0x2], 0x9, [0x78ec, 0x400, 0x3c09, 0x8733, 0x4, 0x4054, 0x4, 0x24, 0x1, 0xbe7, 0x9, 0x8, 0x1, 0x6, 0x1, 0xfffa], [0x1, 0x3, 0x8000, 0x6, 0x7, 0x4692, 0x7, 0x7fff, 0x2, 0x6, 0x9a, 0x3, 0x8, 0x7f, 0x6, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) 2m32.826691486s ago: executing program 7 (id=3445): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r6, &(0x7f0000002880)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="26001b19572cc33d9b2a3a58510000360001002bfd708c1a870ffd01714b00a92a7babbbac1b2259b9be440de07ec6c737e9edc3b6954228535636aa9ec04dab1f61887eb229b7b15f75b0adae21c320b8a251ec29483bc8f84357c863ef4e4c3418bddbdc0d4051b2acb388be9deeeb034e38979616dc8192"], 0x24}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="070000000400000000010000040001002c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="cec153e80000e9fff7bbc14d149a778e25c4"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m31.774770633s ago: executing program 7 (id=3448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./trace/set_event\x00', 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x208c81, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000800)="10") socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000840)=0xfff, 0x4) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) sendmmsg(r1, &(0x7f0000000940)=[{{&(0x7f0000000980)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000a40)='O', 0x36}], 0x1}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m30.880125272s ago: executing program 7 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x1, 0xffbfffff, 0x400000, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e25}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x2c}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r4, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000280)=[{0x30, 0x1, 0x0, 0x8001}, {0x28, 0x1, 0x50, 0xfffff034}, {0x6, 0xfd, 0x4, 0x1579}]}, 0x10) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0x9ffc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000400)={0x5, 0x0, 0x0, 0x0, 0x132, 0xff80}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x6}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) 2m14.744504058s ago: executing program 36 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x1, 0xffbfffff, 0x400000, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e25}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x2c}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r4, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000280)=[{0x30, 0x1, 0x0, 0x8001}, {0x28, 0x1, 0x50, 0xfffff034}, {0x6, 0xfd, 0x4, 0x1579}]}, 0x10) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0x9ffc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000400)={0x5, 0x0, 0x0, 0x0, 0x132, 0xff80}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x6}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) 24.572413862s ago: executing program 0 (id=3762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000340)={0x1ff, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250600000040000680060001000a0000000500020005000000050002000300000008000700", @ANYRES32=r3, @ANYBLOB="14000400fc000000000080000000000000000000060005004e24000008000200080000000800020008000000"], 0x64}, 0x1, 0x0, 0x0, 0x8c0}, 0xc080) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0, 0x0) ioctl$int_out(r5, 0x5460, &(0x7f0000000580)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x1, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="eeff1a0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 22.785892818s ago: executing program 0 (id=3768): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000acc0)={0x0, 0x0, &(0x7f000000ac80)={&(0x7f000000ad00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x194, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x144, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0x3230, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x321c, 0x3, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1f8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xed}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x13c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x12c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0x15, 0x3, "97a131d101153c9f3bb98922990329eb55"}, @NFTA_TARGET_INFO={0x29, 0x3, "56bd1d1fb576fa8d04fdf1feb4845c00b6aec3f5066bdfa9518dd58889f5e1b0db0ae71bcd"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TOS\x00'}, @NFTA_TARGET_INFO={0xbb, 0x3, "fa5e117e7a390972351cb174e15adbec6c4336a4afbecf5d94d0afe876abacb5fc439860fd7b70d0cc0cbb9a3a434effe569636d16815858fce4b2c665617ff609ba64db11f9ce7df2e1bfcf0061e15c442b49a5ea4f59a4acb0400ca4107f5c0de4f51c2086156e0b62a23ce9fe47567e7626a45f34f0153b8eed4fb7582474e83cc63f3d661132288f6e9da54b10fe540e89a844be5ba37b74bed2c0f10eb3519ad34798fc61087773d3e36344d75ce3479848720e92"}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x50, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_ELEM_KEY={0x117c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "c634afe1e1eb7c91edd8da415563a90ceadd"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x18, 0x1, "0690e960d3c70440e904e1344f17c16dc331bc60"}, @NFTA_DATA_VALUE={0xce, 0x1, "2f4fd9fc144d3ad94f90183e97241993cecb80c76d1f3d3c3ee336e8dbe82326d8b792d23db3acb1137b6271ddda2fcee9b62ea487e36e28d729ae7827f32bf79a94690e592fc97213ddf638330bdb189ab9977a56f34bd3b375a40a42fb7afae065d2aa7574ad570e2064bc5aca5118783156af9c83985c3a28b28dd115c46ff1689743f84e87ac9aaac92030b79933be4ba7e845db9139f5c139e541e4112a6449cbb19ee8aec349d9be7988c21861bcf923331eaf103cea572e90dfd26073e190dc9647d13c3022ba"}, @NFTA_DATA_VALUE={0x28, 0x1, "c074e1ca99dc3aafbff37cf6e6309b8987d46abc37b4414b2fec886118449f274c196cd9"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffff}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x38c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x24c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x50, 0x1, "007f2297d0a0318291b38d9a44ec15d7488159b36605aae8c197303a22d63e0ec2d8600e0bd77ce652c2668015f5415aa35f46d60c8990917f0d6ead8ae7e5d8dbcd856c7bec33514f90b28c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "cce3a36ea9aaff1bc7ee90db68964a613c858cd225a69e9c7073d2bce999a63cecde18c1f41a5e86683860be6a1c24937b5ac9488f1a77ca64564aff2f186db26c57c88472d782896d6eafbc893d63930e285f29fade43e05e2ee51f0d23537a4cf098e93d958898b46221d0dd4fdf18f202aba8df2637ddf598eb7594cd87b97a1a4108b8515c25852bd7cef0d51b223f0b3f87f1b10c0f226a4ca1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x43, 0x1, "3f8c346463b56ff45be3c2eee720c9dae2100668550da63f66df1a964fd1906f9f8a1320283e81f1b3e8aa1053b9fad6383fe762df50dba28c0554561a4aaa"}]}]}, {0x3c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x110, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3b, 0x1, "aea6d867e646771acf0d84b7d51356a5669ec5a842dad1b6db0c2f692b88c064019e0b6b987d8a656a121df6016963f31ced58b8575917"}, @NFTA_DATA_VALUE={0xce, 0x1, "9c6cb1d0d8d78db4e9db0ecfd5c97f87a818db6ff7cec7be1f2af06f20d3ce6747fe252bfd652ea65ac21d04d68c501a4b0c337a2c40292761710ed44b907ecaa120c5dfa78bb773bca5469989dbda32df0ff21d91820a4ce0bfb45bac5991ed450943395659e9d1aae1639149567b8b5c445692930d7c10b56d6ff4b5289f627c9a755e8f54764ccf5daeb66d700a7465f020c64dd4c16c042210b4940da90c03bbd6c300993c205d29ecab76e3c37c0c121a41b109d32feab4b2afc51d3fd2cb6ed51cbc6e1fda6d0b"}]}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "9a33ea3528c32bb4380bcf10ba409d2f5bd179a44c6054024b14d74d20389722a9692bcb1469da20db2c1c8db0"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "a3833e227a02b25769d52e7dfe11e93ea19c4042ce03929353a11fe24baf3dba6ef2a1e3cd5108ebf6242b061a0fd06290cc0a1bef0c6725308336d85aae00959e13e652357d222c"}, @NFTA_DATA_VALUE={0x16, 0x1, "a5ffadaee0384f33f4c33069a851b5563d88"}, @NFTA_DATA_VALUE={0xe1, 0x1, "5cc52a7351c063fab6ffce437777e1f8ce7632c0fd9d82715697dbe44140a197f9456df470ee497a26dbc924500bc9dea32739e31c082d4ba0437e88534a73340176043978500690411c60d57cccfe9708d4664d309efda874b1535b63b25740b9ed9a0cc8e0ad9e259b2de9e9843f03acd0ab8fa257348eb2f3040121e3dd9e192ecbc355c2fc42402fd4ecc988e604ee7acf0de5ec6d23dc79cb416c416fdb0a672b797f9eae4b69d19573e1ecd8e773bccbcec54e434ce6aaaba5be50f663103b9f575df6a64c4879dbcc1b8d8f4334cc6702364648cb19a4917b81"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}]}, {0x218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x214, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d4"}, @NFTA_DATA_VALUE={0xe1, 0x1, "860efb3d33801cc59333d5b9e13bdcbbe1418e44e7a4767bd539f979e532d47f0cb541c626422577cf34ed07609bd5fb9ac60709714c637d7ec85f6d11b3b59cdc2cffdbaad5417399e311f1d7856b2ffbb360102ae3f25ee7b5e7d4d74df62ab04d1b1c5d053512853b0ba8f69ee89feafcbbe983e68a046a50f09d39906120f44fd56b6fc3616addab740f4546763993069516d3185abdce60234f31e5c27e2b04080dda27b01093418e871f1a49ddec4f8b610021d6268d87e56dfdddc6144586a4a263f6a79e927d258b204bae1f505fc0a3ae2d98f55c018ddea1"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "1cac0f2386b69ae8c05baf5c8c30ee60e1ee3c241ff3aa709869622237e72abd9562bd1c85d602d4955f615820fecfb29a954b80e92e5c4bf4fa1f6bae3626f27407e31cea76d86cde500661c6cfe655d67d856036acd1020feecaf1df7a41cbf4cba470a7796a14fc40452146a578e1075c906550e4210d3eb73eced88e0a95a5a330ce221ba223cb4681d826f4145f2f347f0057585d6a9f0bb3f1891a50311e090a2fbd054e29c20c51dde2168c1e1c23772a8807db150857f353e94beaf0bf51e50fa46583a9faa89f0bbef9fa8822f533849b06806818cd5ca3f045"}]}]}, {0x14bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "0ec77ab2cc7ab06ff280fb16611f0171d38de124fd8db82d162f60bef133e0bd363e529c3accd013c782f616702baa860a26ccdccb96b484d1386e2c4532d7f5e2788473d3c52ea3613b30314686ba8fc58cbd35eeb13a6439b00a0c429831413d81b127e41a6429d6b1810afb88d4fdc55f87f60dbbf2e6951f489e0203a0e0f742403ee810ceddc8cd63e96cacc8f283746a3694804d061095b48535bc1e064355efc8bf3f5f62f3b63f125174e300e7b3cb9d4c3b660f64cf8b89356b03efc6810189d905a75eb48d72"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x88, 0x1, "1c81221a735dab0ce4f01c1c59cad777bc98f3defe635bc1dfc7f5dad43491b70b251857e38b177628aa67df3e779d387ce90293d63b1de4d629abc646459f950ec4b84e011c65c27b287fbf69f0ac0e89cee487c97b8d4a943e6209e56a6bf843d69ab0e344746912bf9fe4ddf6fae4c513320e759fe114da9657bc369d391fa33cc375"}, @NFTA_DATA_VALUE={0xb9, 0x1, "9f9066e382a42032b4715696963848d5a5d22fe3320316ce6c5bb71448d14b7c13cc523d7e820c9a3a0d21dbf8ff461a7b01361825d8ed4775a42fa872c52823f220c0dee57110c025a9c5ee118796b383f8e6eae86ab0f1137cdb6ea5091d1d2f6de7592fed64e6645777373522e03bf268679a2bebf07a928afe48ae2afbc4c81c5fe5330706139892461ee4b533b1cde7b30e4fa8af2ac43910d5593e39633ac8a002d7f2f33b565fdd9e1bdc03e5df569078db"}]}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3a, 0x1, "2c8981890ca58d1b32ff2252e7dee558565eaf4a7a39b9bcc02f25ee760a9dfcd35637ba4989e16cfa791622eb9bae332af8377e72fb"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_EXPRESSIONS={0x114, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x100, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xf0, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_EXPR={0xd4, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "fb5ee1782d1571d5bc58dadcec8fcd640121f00f2793e7fae090541c82644c6013d061604fb5752f608e2c4e0b592b58cd4340421485448771ccd86a3d441580309a3fd021ddf3c1bd6c90dfe38e40fe8fb0f2211866dd83a3b925e21ef21829ca506f6abc8d36546b4a0cf9d9bacc8d54ec822d44c0cc211147"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3440}, 0x1, 0x0, 0x0, 0x85d}, 0x24008881) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 21.054172133s ago: executing program 0 (id=3772): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000700837359c114bd7000fb28dff32ba97299fb785d341025"], 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) r1 = gettid() migrate_pages(r1, 0x3, &(0x7f0000000340)=0x1, 0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000600)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_dump={0x47, 0x1ff, 0x7}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000680)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r5, &(0x7f0000000800), 0x3b, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000002c0)=[{&(0x7f0000000300)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) writev(r7, &(0x7f00000000c0), 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="a4000000240200012abd7000fddbdf2505000000060003000000000006000400000000002de5eadc3ef2ffcf66d18d5e0db5217cd79126569ac5e05f852a3edb428fdfd3b4d912988fd75765d49dbc3030a64df3442ff7be3133243868ce0de4a66a7116a484bceeacf199c1c596"], 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x20000010) 19.972630453s ago: executing program 0 (id=3775): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) getpgrp(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000300)={0x0, 0x759, 0x80, 0x2, 0x158, 0x0, r0}, 0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000400)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, 0x0) syz_ublk_setup_queues(r0, r6, &(0x7f0000000500)={0x0, 0x5, 0x0, 0x43, 0x345}, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x4, 0x0, 0x8}]}, &(0x7f0000000740)='GPL\x00'}, 0x94) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 11.036720762s ago: executing program 8 (id=3794): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, 0x0, 0x8004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000a00)={0x5, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000b00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x14, r5, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c00078008001240001000001200030068617368"], 0x58}}, 0x4000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000d80)={0x3, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x7}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000f40)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000f80)=[@text32={0x20, &(0x7f0000000fc0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x78, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0xc00, 0x24) lseek(r9, 0x0, 0x3) 10.754207547s ago: executing program 8 (id=3796): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405000000ffffff8910180000000000ce050000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0xfd90, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0xfffffee3, 0x10, &(0x7f0000000400), 0x2b2}, 0x48) r0 = fsopen(&(0x7f0000000440)='nfs\x00', 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000008c0)={0x1d, r2, 0x2, {0x0, 0x1, 0x1}, 0xff}, 0x18) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x20000000, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='source', &(0x7f00000006c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000580), &(0x7f0000000600)) r5 = mmap$IORING_OFF_CQ_RING(0x0, 0x2, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000f80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000000fc0)={&(0x7f0000001000)=[r9], &(0x7f0000001040)=[0x3], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01864c2, &(0x7f0000001080)={0x0, 0x1, r7}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000010c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01864c2, &(0x7f0000001100)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000001180)={&(0x7f0000001140)=[r9, r10, r11, r12], 0x4}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000c00)=r7, 0x4) r13 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x158, 0x0, r7}, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0) syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f00000009c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a40)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000a80)) r17 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, r16, &(0x7f0000000b00)=@IORING_OP_OPENAT={0x12, 0x6, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000ac0)='./dev\x00', 0x80, 0x41c002, 0x72dc, {0x0, r17}}) r18 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r18, &(0x7f0000000380)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 8.993210287s ago: executing program 8 (id=3800): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x123000, 0x0) pread64(r0, &(0x7f00000001c0)=""/89, 0x59, 0x8008) 8.648719631s ago: executing program 6 (id=3801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000005817ae939bddcc6432b8a30dcf0b9e599486e69955849954", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001980)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="fb4c319e9390a8d97a25a2a18d243ee0ab56ab66d2a7644de11358466dcc21215eb9f359cfea52b0418908bc2f30d416ee4eab33055c5b15f77f75b50a45dbdb7af81606b1d43f76634a8b5b70d131fbdcf7755140bf0653d0eac9a15c37356879c2e514d5a3f96d8e96d301fb5454128e3d490404259d9307a4a71dcf3e79750c3cd7e27e0c2d0acdb79f4604dce7229f4213c41328e727b077f35f8c4edbfc6093cd2901bc01bb80698bf197b998ba143b5985512aea65916e4c082bff970734531aee3305ff376e", @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000001880)=r4}, 0x20) sendmsg$inet(r3, &(0x7f00000018c0)={0x0, 0x6000, &(0x7f0000001900)=[{&(0x7f0000001940)='U', 0xa00120}], 0x1}, 0x3) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0xfffffffffffffd7f, &(0x7f00000003c0)={&(0x7f0000001b00)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) (async, rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000001bc0)=0x6) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) mount$9p_xen(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x44000, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r7], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000017c0)={@fallback=r11, r11, 0x2f}, 0x20) (async) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000001800), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001840)={@cgroup=r11, r12, 0x2f, 0x10, 0x4, @void, @value=r12}, 0x20) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000140)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32) 8.640524981s ago: executing program 8 (id=3803): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xeaa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000400)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff000000070581020002000705010200020007058202000200070502"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f00000198c0)=ANY=[@ANYBLOB="e40100002100100027bd7000fbdbdf25fc010000000000000000000000000001fc0200"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000197c0), 0x88b02, 0x0) write$P9_RSTATu(r3, &(0x7f0000019800)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x230) 7.653036546s ago: executing program 6 (id=3805): socket$inet6_sctp(0xa, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000200)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f00000000c0)={0x0, 0x4800000, 0x520000, 0x9, 0x7, 0x0, 0x686, 0x1}) connect$unix(r3, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) 6.662790253s ago: executing program 6 (id=3807): mkdir(&(0x7f0000000380)='./file0\x00', 0x4) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000004c0)='./bus\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_open_dev$usbfs(0x0, 0x8000000000000001, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000800)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x1, 0x2}, {0x5}}}}, 0xf) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) setns(0xc9, 0x0) socketpair(0x9, 0x5, 0x0, &(0x7f0000000880)) mount_setattr(0xffffffffffffff9c, 0x0, 0x9900, &(0x7f0000000900)={0x4, 0xf5, 0x80000}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='3', 0x4e) ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, 0x0) 5.737081717s ago: executing program 8 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004810}, 0x20004890) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.661191989s ago: executing program 6 (id=3811): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2010030, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/225, 0xe1}], 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x118000, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/zswap/parameters/compressor\x00', 0xa002, 0x0) write(r2, &(0x7f0000000700)='lz4hc', 0x5) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x3, 'batadv_slave_0\x00', {}, 0x8555}) write(r4, 0x0, 0x0) read(r3, &(0x7f0000000780)=""/64, 0x40) write(r4, 0x0, 0x0) read(r3, &(0x7f00000007c0)=""/64, 0x40) write(r4, 0x0, 0x0) read(r3, &(0x7f0000000800)=""/64, 0x40) write(r4, &(0x7f0000000840)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x3e) read(r3, &(0x7f0000000880)=""/64, 0x40) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0xc) mlock(&(0x7f0000000000/0x900000)=nil, 0x900000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) 5.637451139s ago: executing program 9 (id=3812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000007600)=[{{0x0, 0xf400, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="b18a475fbe26449b4d5863d6c14cb918827f3c3cebb00d7a50d1549dee4383e0dbc03e7b7e0287817f65131d63e357edc7c59a73e745b9361e3621189def49561be2c8bf85458ef048e0363b41fd5ddbdcac5c327c3220b10a4bcb0217698ed011023491e41ccce22f8b6e2e5717edc97157", 0x72}, {&(0x7f0000000780)="54649a7e5c4d1190b5aba18b62be5bae78f79058de38e6618a648eafc44a5a4be1cc9f0ad5bb9c000083e6f91055e8c411d593c80600000000000000183a38d136aa5a14b10320643243de4790d8ebe892c60d16bf1048ff7ea7d62042d9d78642663ba18903b1eb024086227b70b815d9c957a2b594e9f53b0f99f7275c591fd7c5707fd3b064f0e838618c8e1328cc3f249db250de1b2430dd52f1865dc8121535fefcd088f62bbcafe4015effc9abbb58ea1a418edd8f408ca7fb4d382941376653a86daabcb342c2e5cd02", 0xcd}, {&(0x7f0000000140)="9c0f", 0x2}], 0x3, 0x0, 0x0, 0x4004001}}], 0x1, 0x4040011) 5.470241316s ago: executing program 2 (id=3813): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000000)={0xfffffffffffffffc, 0x5910b1bd4185930c, 0x800, 0xdfffffff}, 0x20) 5.300939762s ago: executing program 9 (id=3814): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)=' 2 4 67 -5 -\\000 0000 0\n', 0x18) 5.300226531s ago: executing program 2 (id=3815): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000005c0)={0x0}) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"537d107bcfc4af0a7bf6e461b660ff13", 0x0, 0x0, {0x3, 0x4}, {0xffffffffffffffff, 0x5}, 0x2, [0x3, 0x3d2, 0x4, 0x700, 0x3, 0x7, 0xffffffffffff7fff, 0x7, 0x3, 0x1, 0x9, 0x8, 0xec5, 0x9, 0xfffffffffffffc7c, 0x9]}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={0x0, 0x7, 0x0, [0x2, 0x4, 0x5, 0xfbf, 0xff], [0x4, 0x401, 0x85ca, 0x5, 0x9, 0x5, 0x7, 0x3, 0xfffffffffffffffe, 0x45f0, 0x7, 0x1, 0x8, 0x6, 0x0, 0x2, 0x200, 0x400, 0x218, 0x2, 0xfff, 0x1c0, 0x6, 0x100, 0x8, 0x0, 0x2, 0x5, 0x10000, 0x8, 0x0, 0x2, 0x6fc4, 0x8, 0xffff, 0x7, 0xffffffffffffffff, 0x3, 0x8, 0x80000001, 0x4, 0x7fff, 0x0, 0x4, 0x8, 0xf7, 0xfff, 0x8, 0x4, 0x4, 0x81, 0xb, 0xfff, 0x6, 0x7, 0x1, 0x2, 0x5df7, 0x6, 0x40, 0x8, 0x284, 0x8, 0x10001, 0x8, 0x8, 0x1, 0x8000000000000003, 0x4, 0xc, 0x200, 0xfffffffffffffff7, 0x5, 0x7, 0x6, 0x3, 0x7, 0x40, 0x7, 0x7d92, 0x7, 0xff, 0x570a, 0x8, 0x2, 0x8, 0x4, 0x3, 0xfd2, 0x9, 0x84, 0x4, 0x1, 0x200, 0xaa, 0x6, 0x6, 0x6, 0x200, 0x4, 0xb, 0x10f8, 0x7, 0x8, 0x1, 0x8, 0xdac, 0x3ea, 0x8, 0x3d7, 0xfff, 0x2, 0x7, 0x6, 0xfffffffffffeffff, 0x7, 0x6, 0x3, 0x7, 0x8000000000000000, 0x8]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000a40)={{r1}, r2, 0x10, @inherit={0x78, &(0x7f0000000100)={0x1, 0x6, 0x0, 0x7, {0x18, 0x3, 0x2, 0x7f, 0x2f7}, [0x58, 0x6, 0xf548, 0x4, 0x4, 0x51]}}, @devid=r4}) 5.280141272s ago: executing program 0 (id=3816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff40) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000240)='j@', 0x2, 0x2404c081, &(0x7f0000000340)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='bic', 0x3) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) 4.196586323s ago: executing program 0 (id=3817): socket$inet6_sctp(0xa, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000200)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f00000000c0)={0x0, 0x4800000, 0x520000, 0x9, 0x7, 0x0, 0x686, 0x1}) connect$unix(r3, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) 4.001087415s ago: executing program 9 (id=3818): r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'rose0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x1, 0x7, "906c4ed4ad51"}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x78, r2, 0x401, 0x70bd2c, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x210a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x389e7653}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2030}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x545da4ad}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000280)) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000380)='ext3\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0xb4, 0x40, 0x1, 0x4, @empty, @local, 0x8, 0x7800, 0xd42, 0x91af}}) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv6_getaddrlabel={0xa8, 0x4a, 0x10, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, r4, 0xe}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0x3, 0x8000000000007fff, 0xc72, 0xf, [0xeaed, 0x4, 0x2, 0x8, 0x67d609dc, 0x3e7600000000000]}) 4.000434695s ago: executing program 2 (id=3819): bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x11, 0xc, &(0x7f0000002640)=ANY=[@ANYBLOB="18000000000000000000000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000005000000850000000f00000095"], &(0x7f00000026c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68f00, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5e9eab2762921d5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000007c0)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xd, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000007110b9000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x8002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="370000000400000000000000", @ANYRES32=r6, @ANYBLOB="9fc5e71c1218fbae49ba55ba17b85527dbb66e5207f3013179a22d365ec9c8798f08e5dbc21b3f7266837512b8dfad3d7a443f2bb2bb7d4ff2304c19ec0ee3eef4e2975c843b", @ANYRES64=0x0], 0x20) r7 = syz_open_dev$MSR(&(0x7f0000000a80), 0x0, 0x0) read$msr(r7, &(0x7f0000002780)=""/102392, 0x18ff8) mkdir(&(0x7f000001b780)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f000001b7c0)='./cgroup/../file0\x00') recvmmsg(r0, &(0x7f000001e980)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/57, 0x39}], 0x4, &(0x7f0000000c40)=""/138, 0x8a}}, {{&(0x7f0000000d00)=@un=@abs, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d80)=""/171, 0xab}, {&(0x7f0000000e40)=""/132, 0x84}, {&(0x7f0000000f00)=""/234, 0xea}, {&(0x7f0000001000)=""/150, 0x96}], 0x4, &(0x7f0000001100)=""/246, 0xf6}, 0x8}, {{&(0x7f0000001200)=@sco={0x1f, @none}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001280)=""/120, 0x78}, {&(0x7f0000001300)=""/35, 0x23}, {&(0x7f0000001340)=""/250, 0xfa}], 0x3, &(0x7f0000001480)=""/19, 0x13}, 0xd}, {{&(0x7f00000014c0)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f0000001540)=""/86, 0x56}, {&(0x7f00000015c0)=""/84, 0x54}, {&(0x7f0000001640)=""/252, 0xfc}, {&(0x7f0000001740)=""/224, 0xe0}, {&(0x7f0000001840)}], 0x5, &(0x7f0000001900)=""/167, 0xa7}, 0x7}, {{&(0x7f00000019c0)=@nfc, 0x80, &(0x7f000001cc40)=[{&(0x7f000001b800)=""/4096, 0x1000}, {&(0x7f000001c800)=""/166, 0xa6}, {&(0x7f000001c8c0)=""/170, 0xaa}, {&(0x7f000001c980)=""/122, 0x7a}, {&(0x7f000001ca00)=""/200, 0xc8}, {&(0x7f000001cb00)=""/15, 0xf}, {&(0x7f000001cb40)=""/219, 0xdb}], 0x7, &(0x7f000001ccc0)=""/162, 0xa2}, 0x7}, {{&(0x7f000001cd80)=@pppoe, 0x80, &(0x7f000001e0c0)=[{&(0x7f000001ce00)=""/70, 0x46}, {&(0x7f000001ce80)=""/91, 0x5b}, {&(0x7f000001cf00)=""/113, 0x71}, {&(0x7f000001cf80)=""/206, 0xce}, {&(0x7f000001d080)=""/4096, 0x1000}, {&(0x7f000001e080)=""/50, 0x32}], 0x6, 0xfffffffffffffffc}, 0x5a}, {{&(0x7f000001e140)=@x25, 0x80, &(0x7f000001e340)=[{&(0x7f000001e1c0)=""/116, 0x74}, {&(0x7f000001e240)=""/161, 0xa1}, {&(0x7f000001e300)=""/19, 0x13}], 0x3, &(0x7f000001e380)}, 0x6}, {{&(0x7f000001e3c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000001e900)=[{&(0x7f000001e440)=""/230, 0xe6}, {&(0x7f000001e540)=""/171, 0xab}, {&(0x7f000001e600)=""/167, 0xa7}, {&(0x7f000001e6c0)=""/106, 0x6a}, {&(0x7f000001e740)=""/190, 0xbe}, {&(0x7f000001e800)=""/72, 0x48}, {&(0x7f000001e880)=""/42, 0x2a}, {&(0x7f000001e8c0)=""/42, 0x2a}], 0x8}, 0xbeb}], 0x8, 0x10100, &(0x7f000001ebc0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) r8 = getpgrp(0x0) sched_setaffinity(r8, 0x0, 0x0) 3.531055505s ago: executing program 6 (id=3820): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xeaa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000400)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff000000070581020002000705010200020007058202000200070502"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f00000198c0)=ANY=[@ANYBLOB="e40100002100100027bd7000fbdbdf25fc010000000000000000000000000001fc0200"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000197c0), 0x88b02, 0x0) write$P9_RSTATu(r3, &(0x7f0000019800)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x230) 3.373806193s ago: executing program 9 (id=3821): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf21090002007379"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0xc0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000480)={0x7f, 0xfffffffc, 0x2}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000006c0)={{0x100, 0x2}, 'syz1\x00', 0x27}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) write(0xffffffffffffffff, &(0x7f0000000280)='252:0 1', 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={r0, 0x48343a01, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtclass={0x68, 0x28, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x8, 0xfff1}, {0x2, 0xa}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x0, 0x0, 0x3f1, 0x2, 0x9}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x5, 0xffff, 0x18, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x68}}, 0x20000000) 1.69755644s ago: executing program 9 (id=3822): mkdir(&(0x7f0000000380)='./file0\x00', 0x4) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000004c0)='./bus\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_open_dev$usbfs(0x0, 0x8000000000000001, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000800)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x1, 0x2}, {0x5}}}}, 0xf) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) setns(0xc9, 0x0) socketpair(0x9, 0x5, 0x0, &(0x7f0000000880)) mount_setattr(0xffffffffffffff9c, 0x0, 0x9900, &(0x7f0000000900)={0x4, 0xf5, 0x80000}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='3', 0x4e) ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, 0x0) 1.448183313s ago: executing program 2 (id=3823): openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) 1.383143159s ago: executing program 6 (id=3824): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000700837359c114bd7000fb28dff32ba97299fb785d341025"], 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) r1 = gettid() migrate_pages(r1, 0x3, &(0x7f0000000340)=0x1, 0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000600)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_dump={0x47, 0x1ff, 0x7}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000680)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r5, &(0x7f0000000800), 0x3b, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000002c0)=[{&(0x7f0000000300)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) writev(r7, &(0x7f00000000c0), 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="a4000000240200012abd7000fddbdf2505000000060003000000000006000400000000002de5eadc3ef2ffcf66d18d5e0db5217cd79126569ac5e05f852a3edb428fdfd3b4d912988fd75765d49dbc3030a64df3442ff7be3133243868ce0de4a66a7116a484bceeacf199c1c596"], 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x20000010) 1.204933277s ago: executing program 2 (id=3825): r0 = io_uring_setup(0x277a, &(0x7f00000000c0)={0x0, 0x7, 0x400, 0x2, 0x3dd}) r1 = io_uring_setup(0x1aa7, &(0x7f0000000000)={0x0, 0xfb6f, 0x38c1, 0x7, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000080), 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) fchdir(r3) accept4(r2, 0x0, 0x0, 0x80800) 643.975229ms ago: executing program 9 (id=3826): rt_sigtimedwait(&(0x7f0000000600)={[0x8000000000000001]}, 0x0, &(0x7f0000000640)={0x77359400}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0xb7, 0x4, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x9a}, @ldst={0x3, 0x3, 0x3, 0xb, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@arena={0x21, 0x0, 0x0, 0x14, 0x20000, r0, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0xfffffffb}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r1, r2}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000580)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl(r3, 0x3b94, &(0x7f0000000540)='(') r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x69c001, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='6'], 0x20) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x3c, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9c3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4001) 236.272229ms ago: executing program 8 (id=3827): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES32, @ANYRESDEC=r0], 0x10}], 0x1, 0x0, 0x0, 0xb305e06d8ab482f7}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[], 0x47) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x800, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r5, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000400)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 0s ago: executing program 2 (id=3828): r0 = socket(0x10, 0x803, 0x2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250600000040000680060001000a0000000500020005000000050002000300000008000700", @ANYRES32, @ANYBLOB="14000400fc000000000080000000000000000000060005004e24000008000200080000000800020008000000"], 0x64}, 0x1, 0x0, 0x0, 0x8c0}, 0xc080) kernel console output (not intermixed with test programs): 0/0x400 [ 1761.959673][T20546] skb_clone+0x190/0x400 [ 1761.959695][T20546] netlink_deliver_tap+0xaed/0xcc0 [ 1761.959725][T20546] ? netlink_unicast+0x4f2/0x950 [ 1761.959757][T20546] netlink_unicast+0x6ff/0x950 [ 1761.959790][T20546] ? __pfx_netlink_unicast+0x10/0x10 [ 1761.959828][T20546] netlink_sendmsg+0x8b0/0xda0 [ 1761.959863][T20546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.959895][T20546] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1761.959929][T20546] ____sys_sendmsg+0xa4d/0xbe0 [ 1761.959952][T20546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.959983][T20546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1761.960015][T20546] ? __pfx___schedule+0x10/0x10 [ 1761.960047][T20546] ___sys_sendmsg+0x190/0x1e0 [ 1761.960075][T20546] ? __pfx____sys_sendmsg+0x10/0x10 [ 1761.960114][T20546] ? __rcu_read_unlock+0x26a/0x5e0 [ 1761.960161][T20546] __sys_sendmsg+0x160/0x210 [ 1761.960182][T20546] ? __pfx___sys_sendmsg+0x10/0x10 [ 1761.960220][T20546] do_syscall_64+0x123/0x790 [ 1761.960252][T20546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.960273][T20546] RIP: 0033:0x7fd14b99e559 [ 1761.960290][T20546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.960308][T20546] RSP: 002b:00007fd14c911028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1761.960329][T20546] RAX: ffffffffffffffda RBX: 00007fd14bc26180 RCX: 00007fd14b99e559 [ 1761.960342][T20546] RDX: 0000000000000000 RSI: 0000200000001800 RDI: 000000000000000a [ 1761.960354][T20546] RBP: 00007fd14c911090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.960367][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.960379][T20546] R13: 00007fd14bc26218 R14: 00007fd14bc26180 R15: 00007ffdfbce7228 [ 1761.960410][T20546] [ 1762.444209][T20553] fuse: Unknown parameter '0x000000000000000b0x000000000000000bÿ00000000000000000000' [ 1763.806667][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1763.837444][T19550] net_ratelimit: 140 callbacks suppressed [ 1763.954905][T20567] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 1763.999854][T20567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1764.085107][T20567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1764.085466][T20567] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1764.086450][T20567] bond1: (slave gre1): Error -95 calling set_mac_address [ 1764.148443][T20571] ip_tables: iptables: counters copy to user failed while replacing table [ 1765.128112][T20586] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3468'. [ 1765.205634][T20567] gretap1: entered promiscuous mode [ 1765.214942][T20567] bond1: (slave gretap1): making interface the new active one [ 1765.215609][T20567] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1765.383705][T20567] macvlan2: entered promiscuous mode [ 1765.383722][T20567] macvlan2: entered allmulticast mode [ 1765.384400][T20567] bond1: entered promiscuous mode [ 1765.445294][T20567] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1765.470345][T20567] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1765.493530][T20567] bond1: left promiscuous mode [ 1765.510409][T14243] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1765.742508][T20594] FAULT_INJECTION: forcing a failure. [ 1765.742508][T20594] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.742558][T20594] CPU: 0 UID: 0 PID: 20594 Comm: syz.0.3470 Tainted: G L syzkaller #0 PREEMPT(full) [ 1765.742590][T20594] Tainted: [L]=SOFTLOCKUP [ 1765.742598][T20594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1765.742612][T20594] Call Trace: [ 1765.742620][T20594] [ 1765.742630][T20594] dump_stack_lvl+0x100/0x190 [ 1765.742665][T20594] should_fail_ex.cold+0x5/0xa [ 1765.742696][T20594] should_failslab+0xc2/0x120 [ 1765.742734][T20594] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1765.742763][T20594] ? security_inode_alloc+0x3b/0x2c0 [ 1765.742796][T20594] security_inode_alloc+0x3b/0x2c0 [ 1765.742824][T20594] inode_init_always_gfp+0xc6f/0xfb0 [ 1765.742860][T20594] alloc_inode+0x8e/0x250 [ 1765.742886][T20594] sock_alloc+0x44/0x280 [ 1765.742907][T20594] ? security_socket_create+0x7f/0x250 [ 1765.742935][T20594] __sock_create+0xc2/0x860 [ 1765.742967][T20594] __sys_socketpair+0x1e4/0x5b0 [ 1765.742997][T20594] ? __pfx___sys_socketpair+0x10/0x10 [ 1765.743027][T20594] ? xfd_validate_state+0x129/0x190 [ 1765.743059][T20594] __x64_sys_socketpair+0x96/0x100 [ 1765.743087][T20594] ? lockdep_hardirqs_on+0x7d/0x110 [ 1765.743117][T20594] do_syscall_64+0x123/0x790 [ 1765.743149][T20594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.743171][T20594] RIP: 0033:0x7f9e0c19e559 [ 1765.743189][T20594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.743209][T20594] RSP: 002b:00007f9e0d103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1765.743230][T20594] RAX: ffffffffffffffda RBX: 00007f9e0c426180 RCX: 00007f9e0c19e559 [ 1765.743245][T20594] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1765.743258][T20594] RBP: 00007f9e0c2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1765.743271][T20594] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 1765.743285][T20594] R13: 00007f9e0c426218 R14: 00007f9e0c426180 R15: 00007ffcb3c488e8 [ 1765.743316][T20594] [ 1766.917878][ T31] kauditd_printk_skb: 755 callbacks suppressed [ 1766.917896][ T31] audit: type=1400 audit(1792187523.887:5871): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.918207][ T31] audit: type=1400 audit(1792187523.887:5872): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.918517][ T31] audit: type=1400 audit(1792187523.887:5873): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.920793][ T31] audit: type=1400 audit(1792187523.887:5874): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.922774][ T31] audit: type=1400 audit(1792187523.887:5875): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.923111][ T31] audit: type=1400 audit(1792187523.887:5876): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.923419][ T31] audit: type=1400 audit(1792187523.887:5877): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.923741][ T31] audit: type=1400 audit(1792187523.887:5878): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.925658][ T31] audit: type=1400 audit(1792187523.887:5879): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1766.925993][ T31] audit: type=1400 audit(1792187523.887:5880): avc: denied { write } for pid=14745 comm="syz-executor" name="inst1" dev="tracefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1767.188004][T20602] netlink: 5260 bytes leftover after parsing attributes in process `syz.0.3472'. [ 1768.217286][T20611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3473'. [ 1768.467242][T20613] i2c i2c-0: delete_device: Can't find device in list [ 1768.574180][T19810] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1768.748951][T19810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1768.751447][T19810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1768.751472][T19810] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1768.752943][T19810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1768.752963][T19810] usb 1-1: SerialNumber: syz [ 1768.802273][T20608] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1769.048250][T20608] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1769.493392][ C1] net_ratelimit: 170 callbacks suppressed [ 1770.752586][T19810] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1770.891631][T19829] usb 1-1: USB disconnect, device number 113 [ 1770.914424][T19829] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1771.701751][T20632] FAULT_INJECTION: forcing a failure. [ 1771.701751][T20632] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.701771][T20632] CPU: 1 UID: 0 PID: 20632 Comm: syz.6.3476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.701787][T20632] Tainted: [L]=SOFTLOCKUP [ 1771.701792][T20632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1771.701799][T20632] Call Trace: [ 1771.701804][T20632] [ 1771.701809][T20632] dump_stack_lvl+0x100/0x190 [ 1771.701832][T20632] should_fail_ex.cold+0x5/0xa [ 1771.701851][T20632] should_failslab+0xc2/0x120 [ 1771.701869][T20632] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1771.701883][T20632] ? __pfx_map_id_range_down+0x10/0x10 [ 1771.701898][T20632] ? rcu_is_watching+0x13/0xc0 [ 1771.701914][T20632] ? security_inode_alloc+0x3b/0x2c0 [ 1771.701933][T20632] security_inode_alloc+0x3b/0x2c0 [ 1771.701948][T20632] inode_init_always_gfp+0xc6f/0xfb0 [ 1771.701968][T20632] alloc_inode+0x8e/0x250 [ 1771.701983][T20632] sock_alloc+0x44/0x280 [ 1771.701995][T20632] ? security_socket_create+0x7f/0x250 [ 1771.702010][T20632] __sock_create+0xc2/0x860 [ 1771.702028][T20632] __sys_socket+0x14d/0x260 [ 1771.702043][T20632] ? __pfx___sys_socket+0x10/0x10 [ 1771.702064][T20632] __x64_sys_socket+0x72/0xb0 [ 1771.702081][T20632] ? lockdep_hardirqs_on+0x7d/0x110 [ 1771.702099][T20632] do_syscall_64+0x123/0x790 [ 1771.702118][T20632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.702131][T20632] RIP: 0033:0x7fbd3639e559 [ 1771.702141][T20632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1771.702152][T20632] RSP: 002b:00007fbd3722f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1771.702164][T20632] RAX: ffffffffffffffda RBX: 00007fbd36625fa0 RCX: 00007fbd3639e559 [ 1771.702176][T20632] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1771.702186][T20632] RBP: 00007fbd364358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1771.702199][T20632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1771.702210][T20632] R13: 00007fbd36626038 R14: 00007fbd36625fa0 R15: 00007ffe415c4068 [ 1771.702232][T20632] [ 1773.554382][T19550] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.590579][T16427] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.591789][T16427] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.629213][T16427] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.654243][T20646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1773.669627][T20646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1773.680232][T20646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1773.695993][T20646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1773.703997][T20646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1774.184307][T14745] tipc: Disabling bearer [ 1774.405393][T16253] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1774.596201][T16253] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1774.804886][T16253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.804907][T16253] usb 3-1: Product: syz [ 1774.804921][T16253] usb 3-1: Manufacturer: syz [ 1774.804936][T16253] usb 3-1: SerialNumber: syz [ 1774.816058][T16253] usb 3-1: config 0 descriptor?? [ 1774.877771][T15982] net_ratelimit: 138 callbacks suppressed [ 1775.169174][T20655] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1775.368490][T20666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.368907][T20666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.479393][T20668] netlink: 5260 bytes leftover after parsing attributes in process `syz.8.3491'. [ 1775.479623][T20668] FAULT_INJECTION: forcing a failure. [ 1775.479623][T20668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.479651][T20668] CPU: 0 UID: 0 PID: 20668 Comm: syz.8.3491 Tainted: G L syzkaller #0 PREEMPT(full) [ 1775.479678][T20668] Tainted: [L]=SOFTLOCKUP [ 1775.479686][T20668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1775.479698][T20668] Call Trace: [ 1775.479706][T20668] [ 1775.479714][T20668] dump_stack_lvl+0x100/0x190 [ 1775.479748][T20668] should_fail_ex.cold+0x5/0xa [ 1775.479777][T20668] _copy_to_user+0x32/0xd0 [ 1775.479816][T20668] simple_read_from_buffer+0xcb/0x170 [ 1775.479848][T20668] proc_fail_nth_read+0x1af/0x230 [ 1775.479879][T20668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1775.479909][T20668] ? rw_verify_area+0xce/0x6d0 [ 1775.479931][T20668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1775.479959][T20668] vfs_read+0x1e4/0xb40 [ 1775.479984][T20668] ? lock_acquire+0x1d1/0x380 [ 1775.480006][T20668] ? __fget_files+0x34/0x3d0 [ 1775.480033][T20668] ? __pfx_vfs_read+0x10/0x10 [ 1775.480054][T20668] ? find_held_lock+0x2b/0x80 [ 1775.480080][T20668] ? __fget_files+0x215/0x3d0 [ 1775.480109][T20668] ? __fget_files+0x21f/0x3d0 [ 1775.480144][T20668] ksys_read+0x12a/0x250 [ 1775.480167][T20668] ? __pfx_ksys_read+0x10/0x10 [ 1775.480199][T20668] do_syscall_64+0x123/0x790 [ 1775.480230][T20668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.480251][T20668] RIP: 0033:0x7fd14b95ed8e [ 1775.480268][T20668] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1775.480285][T20668] RSP: 002b:00007fd14c952fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1775.480304][T20668] RAX: ffffffffffffffda RBX: 00007fd14c9536c0 RCX: 00007fd14b95ed8e [ 1775.480318][T20668] RDX: 000000000000000f RSI: 00007fd14c9530a0 RDI: 0000000000000004 [ 1775.480330][T20668] RBP: 00007fd14c953090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.480342][T20668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1775.480354][T20668] R13: 00007fd14bc26038 R14: 00007fd14bc25fa0 R15: 00007ffdfbce7228 [ 1775.480385][T20668] [ 1776.816910][T14243] Bluetooth: hci3: command tx timeout [ 1776.819804][T16253] usb 3-1: Firmware version (0.0) predates our first public release. [ 1776.819823][T16253] usb 3-1: Please update to version 0.2 or newer [ 1777.154234][T16253] usb 3-1: USB disconnect, device number 105 [ 1778.135693][T20687] FAULT_INJECTION: forcing a failure. [ 1778.135693][T20687] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.135734][T20687] CPU: 1 UID: 0 PID: 20687 Comm: syz.2.3496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.135762][T20687] Tainted: [L]=SOFTLOCKUP [ 1778.135770][T20687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1778.135783][T20687] Call Trace: [ 1778.135790][T20687] [ 1778.135799][T20687] dump_stack_lvl+0x100/0x190 [ 1778.135833][T20687] should_fail_ex.cold+0x5/0xa [ 1778.135863][T20687] should_failslab+0xc2/0x120 [ 1778.135892][T20687] __kvmalloc_node_noprof+0x113/0x9b0 [ 1778.135922][T20687] ? seq_read_iter+0x819/0x1270 [ 1778.135955][T20687] seq_read_iter+0x819/0x1270 [ 1778.135981][T20687] ? register_lock_class+0x3f/0x7b0 [ 1778.136006][T20687] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1778.136031][T20687] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1778.136072][T20687] seq_read+0x344/0x4d0 [ 1778.136099][T20687] ? __pfx_seq_read+0x10/0x10 [ 1778.136131][T20687] ? lock_acquire+0x1d1/0x380 [ 1778.136169][T20687] full_proxy_read+0x135/0x1a0 [ 1778.136200][T20687] ? __pfx_full_proxy_read+0x10/0x10 [ 1778.136233][T20687] vfs_read+0x1e4/0xb40 [ 1778.136258][T20687] ? lock_acquire+0x1d1/0x380 [ 1778.136281][T20687] ? __fget_files+0x34/0x3d0 [ 1778.136307][T20687] ? __pfx_vfs_read+0x10/0x10 [ 1778.136329][T20687] ? find_held_lock+0x2b/0x80 [ 1778.136358][T20687] ? __fget_files+0x215/0x3d0 [ 1778.136390][T20687] ? __fget_files+0x21f/0x3d0 [ 1778.136426][T20687] ksys_read+0x12a/0x250 [ 1778.136450][T20687] ? __pfx_ksys_read+0x10/0x10 [ 1778.136472][T20687] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1778.136510][T20687] do_syscall_64+0x123/0x790 [ 1778.136541][T20687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.136562][T20687] RIP: 0033:0x7f22b979e559 [ 1778.136579][T20687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.136597][T20687] RSP: 002b:00007f22ba636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1778.136617][T20687] RAX: ffffffffffffffda RBX: 00007f22b9a26090 RCX: 00007f22b979e559 [ 1778.136631][T20687] RDX: 0000000000002020 RSI: 0000200000001240 RDI: 000000000000000a [ 1778.136643][T20687] RBP: 00007f22ba636090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.136655][T20687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.136667][T20687] R13: 00007f22b9a26128 R14: 00007f22b9a26090 R15: 00007ffea52d2198 [ 1778.136698][T20687] [ 1778.986699][T14243] Bluetooth: hci3: command tx timeout [ 1780.093798][T20645] rxe_eth0 speed is unknown, defaulting to 1000 [ 1780.293275][T16253] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1780.355035][ C1] net_ratelimit: 127 callbacks suppressed [ 1780.429920][T16253] usb 3-1: device descriptor read/64, error -71 [ 1780.433654][T20645] lo speed is unknown, defaulting to 1000 [ 1780.709420][T16253] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1780.846885][T16253] usb 3-1: device descriptor read/64, error -71 [ 1780.943089][T19803] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1780.965599][T16253] usb usb3-port1: attempt power cycle [ 1781.125917][T19803] usb 1-1: Using ep0 maxpacket: 16 [ 1781.133288][T19803] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1781.138580][T19803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.138606][T19803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1781.138661][T19803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.141298][T19803] usb 1-1: config 0 descriptor?? [ 1781.210515][T14243] Bluetooth: hci3: command tx timeout [ 1781.233962][T16427] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.330399][T16253] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 1781.335758][T20702] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3501'. [ 1781.358197][T16253] usb 3-1: device descriptor read/8, error -71 [ 1781.368653][T20701] netlink: 102776 bytes leftover after parsing attributes in process `syz.8.3501'. [ 1781.506071][ T144] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.607846][T16253] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 1781.648865][T16253] usb 3-1: device descriptor read/8, error -71 [ 1781.657152][T19803] microsoft 0003:045E:07DA.0026: unknown main item tag 0x5 [ 1781.657171][T19803] microsoft 0003:045E:07DA.0026: item fetching failed at offset 26/34 [ 1781.657532][T19803] microsoft 0003:045E:07DA.0026: parse failed [ 1781.657581][T19803] microsoft 0003:045E:07DA.0026: probe with driver microsoft failed with error -22 [ 1781.767178][T16253] usb usb3-port1: unable to enumerate USB device [ 1781.789273][T20710] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3502'. [ 1782.038135][T20715] netlink: 102776 bytes leftover after parsing attributes in process `syz.6.3502'. [ 1782.108457][T20716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.108985][T20716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.114198][T20716] x_tables: duplicate underflow at hook 1 [ 1782.224188][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1782.247868][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.262272][ T12] bond0 (unregistering): Released all slaves [ 1782.356471][T16427] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.366802][T19550] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.476775][ T12] tipc: Left network mode [ 1783.434004][T14243] Bluetooth: hci3: command tx timeout [ 1784.332784][ T31] kauditd_printk_skb: 832 callbacks suppressed [ 1784.332799][ T31] audit: type=1400 audit(1792187540.182:6713): avc: denied { write } for pid=20724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1784.469172][T19829] usb 1-1: USB disconnect, device number 114 [ 1784.538330][T20645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.538410][T20645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.538575][T20645] bridge_slave_0: entered allmulticast mode [ 1784.574674][T20645] bridge_slave_0: entered promiscuous mode [ 1784.576997][T20645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.577080][T20645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.577232][T20645] bridge_slave_1: entered allmulticast mode [ 1784.585175][T20645] bridge_slave_1: entered promiscuous mode [ 1784.609618][ T31] audit: type=1400 audit(1792187540.435:6714): avc: denied { write } for pid=20751 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.743162][ C1] net_ratelimit: 119 callbacks suppressed [ 1785.877301][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1786.664014][T20645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.670160][T20645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.977533][T20771] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3512'. [ 1787.015373][T20645] team0: Port device team_slave_0 added [ 1787.041109][T20645] team0: Port device team_slave_1 added [ 1787.095980][ T12] hsr_slave_0: left promiscuous mode [ 1787.100990][ T12] hsr_slave_1: left promiscuous mode [ 1787.106400][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.110107][T20767] netlink: 102776 bytes leftover after parsing attributes in process `syz.6.3512'. [ 1787.131116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.340951][ T31] audit: type=1400 audit(1792187542.988:6715): avc: denied { write } for pid=20773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.461144][ T31] audit: type=1400 audit(1792187543.100:6716): avc: denied { write } for pid=20784 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.893591][T20646] Bluetooth: hci2: command 0x0406 tx timeout [ 1788.072396][T20790] CIFS: Attempting to mount //127.0.0.1/share [ 1788.083277][T20790] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1788.083365][T20790] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1788.163989][T20792] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 1788.385820][T16427] Bluetooth: hci0: Frame reassembly failed (-90) [ 1788.385881][T16427] Bluetooth: hci0: Frame reassembly failed (-84) [ 1788.385937][T16427] Bluetooth: hci0: Frame reassembly failed (-84) [ 1788.507058][ T5267] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1788.604438][T20645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.604445][T20645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.604459][T20645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.613115][T20645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.613126][T20645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.613148][T20645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.864618][T20645] hsr_slave_0: entered promiscuous mode [ 1788.871908][T20645] hsr_slave_1: entered promiscuous mode [ 1788.902947][T20802] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3518'. [ 1789.216815][ T12] IPVS: stop unused estimator thread 0... [ 1790.028016][T19829] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1790.195188][T19829] usb 1-1: Using ep0 maxpacket: 16 [ 1790.196497][T19829] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1790.197798][T19829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.197826][T19829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1790.197885][T19829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.202318][T19829] usb 1-1: config 0 descriptor?? [ 1790.343781][ T31] audit: type=1400 audit(1792187545.804:6717): avc: denied { write } for pid=20803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1790.477246][ T31] audit: type=1400 audit(1792187545.925:6718): avc: denied { write } for pid=20822 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1790.533189][T20646] Bluetooth: hci0: command 0x1003 tx timeout [ 1790.533310][T14243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1790.613015][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1790.719343][T19829] microsoft 0003:045E:07DA.0027: unknown main item tag 0x5 [ 1790.719371][T19829] microsoft 0003:045E:07DA.0027: item fetching failed at offset 26/34 [ 1790.719789][T19829] microsoft 0003:045E:07DA.0027: parse failed [ 1790.721523][T19829] microsoft 0003:045E:07DA.0027: probe with driver microsoft failed with error -22 [ 1790.951594][T20645] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1790.985067][T20645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1790.990628][T20645] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1791.027168][T20645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1791.081056][T20645] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1791.111132][T20809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.113645][T20809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.119844][T20645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1791.123877][T20645] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1791.126560][T20809] x_tables: duplicate underflow at hook 1 [ 1791.143247][ C1] net_ratelimit: 130 callbacks suppressed [ 1791.157766][T20645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1791.451469][T20645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1791.512315][T20645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1791.536071][T16427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.536127][T16427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.579828][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.579906][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.607480][ T31] audit: type=1400 audit(1792187546.982:6719): avc: denied { write } for pid=20827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.740347][ T31] audit: type=1400 audit(1792187547.104:6720): avc: denied { write } for pid=20850 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.875300][ T5267] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1792.295702][T20868] ptp ptp0: new virtual clock ptp1 [ 1792.309370][T20868] ptp ptp0: new virtual clock ptp2 [ 1792.317277][T20868] ptp ptp0: new virtual clock ptp3 [ 1792.330173][T20868] ptp ptp0: new virtual clock ptp4 [ 1792.357848][T20868] ptp ptp0: new virtual clock ptp5 [ 1792.357859][T20868] ptp ptp0: guarantee physical clock free running [ 1793.520140][ T5825] usb 1-1: USB disconnect, device number 115 [ 1793.645948][T20888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1793.658245][T20890] fuse: Bad value for 'fd' [ 1793.667896][T20893] fuse: Bad value for 'fd' [ 1794.049821][T19785] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1794.142365][T20645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.210768][T19785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1794.211664][T19785] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1794.211678][T19785] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1794.212887][T19785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1794.212898][T19785] usb 3-1: SerialNumber: syz [ 1794.217997][T20885] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1794.435553][T20885] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1794.480477][T20645] veth0_vlan: entered promiscuous mode [ 1794.503747][T20645] veth1_vlan: entered promiscuous mode [ 1794.575275][T20645] veth0_macvtap: entered promiscuous mode [ 1794.584985][T20645] veth1_macvtap: entered promiscuous mode [ 1794.698878][T20645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1794.744248][T20645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1794.830302][ T758] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.907397][ T144] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.907608][ T144] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.907757][ T144] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.977472][T19785] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1795.166749][T20885] netlink: 102776 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1795.172508][T12604] usb 3-1: USB disconnect, device number 110 [ 1795.251579][T12604] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1795.885405][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3533'. [ 1795.967793][T20916] ipvlan2: entered allmulticast mode [ 1796.077630][T13336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.077639][T13336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.242198][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.242208][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.947166][ C0] net_ratelimit: 278 callbacks suppressed [ 1797.348943][T20941] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3486'. [ 1802.046351][T20979] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3549'. [ 1802.532871][T15979] net_ratelimit: 214 callbacks suppressed [ 1803.867964][T20991] trusted_key: encrypted_key: insufficient parameters specified [ 1803.896127][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3554'. [ 1805.072624][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3548'. [ 1805.074930][ T31] audit: type=1400 audit(1792187559.582:6721): avc: denied { setopt } for pid=21004 comm="syz.9.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1805.189540][T21009] batadv_slave_1: entered promiscuous mode [ 1805.190871][T21009] batadv_slave_1: left promiscuous mode [ 1805.223495][ T31] audit: type=1400 audit(1792187559.723:6722): avc: denied { ioctl } for pid=21004 comm="syz.9.3557" path="socket:[68423]" dev="sockfs" ino=68423 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1805.329817][ T31] audit: type=1400 audit(1792187559.816:6723): avc: denied { accept } for pid=21004 comm="syz.9.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1805.392469][T19789] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1805.515486][ T31] audit: type=1400 audit(1792187559.994:6724): avc: denied { write } for pid=20998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1805.573993][T19789] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1805.584458][T19789] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1805.584483][T19789] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1805.610088][T19789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1805.610108][T19789] usb 3-1: SerialNumber: syz [ 1805.613729][T21001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1805.753669][T21023] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3558'. [ 1805.775875][ T31] audit: type=1400 audit(1792187560.228:6725): avc: denied { write } for pid=21027 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1805.836694][T21001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1805.909095][ T30] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1805.913491][T21033] FAULT_INJECTION: forcing a failure. [ 1805.913491][T21033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1805.913520][T21033] CPU: 0 UID: 0 PID: 21033 Comm: syz.0.3552 Tainted: G L syzkaller #0 PREEMPT(full) [ 1805.913548][T21033] Tainted: [L]=SOFTLOCKUP [ 1805.913555][T21033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1805.913567][T21033] Call Trace: [ 1805.913574][T21033] [ 1805.913582][T21033] dump_stack_lvl+0x100/0x190 [ 1805.913615][T21033] should_fail_ex.cold+0x5/0xa [ 1805.913644][T21033] _copy_from_user+0x2e/0xd0 [ 1805.913674][T21033] copy_msghdr_from_user+0x9f/0x4c0 [ 1805.913701][T21033] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1805.913735][T21033] ? lock_acquire+0x1d1/0x380 [ 1805.913758][T21033] ? get_pid_task+0x2a/0x250 [ 1805.913787][T21033] ___sys_sendmsg+0x106/0x1e0 [ 1805.913817][T21033] ? __pfx____sys_sendmsg+0x10/0x10 [ 1805.913843][T21033] ? get_pid_task+0x106/0x250 [ 1805.913881][T21033] ? find_held_lock+0x2b/0x80 [ 1805.913928][T21033] __sys_sendmsg+0x160/0x210 [ 1805.913950][T21033] ? __pfx___sys_sendmsg+0x10/0x10 [ 1805.913988][T21033] do_syscall_64+0x123/0x790 [ 1805.914019][T21033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.914039][T21033] RIP: 0033:0x7f9e0c19e559 [ 1805.914057][T21033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1805.914074][T21033] RSP: 002b:00007f9e0d145028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1805.914093][T21033] RAX: ffffffffffffffda RBX: 00007f9e0c425fa0 RCX: 00007f9e0c19e559 [ 1805.914107][T21033] RDX: 0000000002000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1805.914120][T21033] RBP: 00007f9e0d145090 R08: 0000000000000000 R09: 0000000000000000 [ 1805.914132][T21033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1805.914144][T21033] R13: 00007f9e0c426038 R14: 00007f9e0c425fa0 R15: 00007ffcb3c488e8 [ 1805.914174][T21033] [ 1806.172956][ T30] usb 10-1: Using ep0 maxpacket: 16 [ 1806.173744][ T30] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1806.258935][ T30] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.258963][ T30] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1806.259042][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.701764][T21042] netlink: 132732 bytes leftover after parsing attributes in process `syz.2.3548'. [ 1807.050458][ T30] usb 10-1: config 0 descriptor?? [ 1807.086506][T19789] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1807.410729][T21051] FAULT_INJECTION: forcing a failure. [ 1807.410729][T21051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.410784][T21051] CPU: 1 UID: 0 PID: 21051 Comm: syz.6.3562 Tainted: G L syzkaller #0 PREEMPT(full) [ 1807.410802][T21051] Tainted: [L]=SOFTLOCKUP [ 1807.410806][T21051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1807.410814][T21051] Call Trace: [ 1807.410818][T21051] [ 1807.410823][T21051] dump_stack_lvl+0x100/0x190 [ 1807.410847][T21051] should_fail_ex.cold+0x5/0xa [ 1807.410877][T21051] strncpy_from_user+0x3b/0x2d0 [ 1807.410912][T21051] do_getname+0x78/0x390 [ 1807.410934][T21051] user_path_at+0x26/0x60 [ 1807.410951][T21051] __x64_sys_mount+0x1fb/0x310 [ 1807.410964][T21051] ? __pfx___x64_sys_mount+0x10/0x10 [ 1807.410982][T21051] do_syscall_64+0x123/0x790 [ 1807.411007][T21051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.411028][T21051] RIP: 0033:0x7fbd3639e559 [ 1807.411044][T21051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.411062][T21051] RSP: 002b:00007fbd3722f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1807.411079][T21051] RAX: ffffffffffffffda RBX: 00007fbd36625fa0 RCX: 00007fbd3639e559 [ 1807.411087][T21051] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 00002000000002c0 [ 1807.411095][T21051] RBP: 00007fbd3722f090 R08: 0000200000000380 R09: 0000000000000000 [ 1807.411103][T21051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.411110][T21051] R13: 00007fbd36626038 R14: 00007fbd36625fa0 R15: 00007ffe415c4068 [ 1807.411126][T21051] [ 1807.684567][T21052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1807.784438][T21052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1807.933369][T19789] usb 3-1: USB disconnect, device number 111 [ 1807.957759][T19789] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1808.046519][ T30] microsoft 0003:045E:07DA.0028: unknown main item tag 0x5 [ 1808.046553][ T30] microsoft 0003:045E:07DA.0028: item fetching failed at offset 26/34 [ 1808.047134][ T30] microsoft 0003:045E:07DA.0028: parse failed [ 1808.047224][ T30] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22 [ 1808.150644][ C1] net_ratelimit: 142 callbacks suppressed [ 1808.153320][ T31] audit: type=1400 audit(1792187562.463:6726): avc: denied { write } for pid=21034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1808.286834][ T31] audit: type=1400 audit(1792187562.585:6727): avc: denied { write } for pid=21064 comm="syz.0.3564" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1808.352631][ T31] audit: type=1400 audit(1792187562.641:6728): avc: denied { write } for pid=21066 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1808.466887][T21025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.468468][T21025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.484526][T21025] x_tables: duplicate underflow at hook 1 [ 1808.486697][T21065] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3563'. [ 1808.584630][T21063] netlink: 102776 bytes leftover after parsing attributes in process `syz.6.3563'. [ 1808.602718][T14243] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1808.747271][T21070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.747806][T21070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.930472][T21083] FAULT_INJECTION: forcing a failure. [ 1808.930472][T21083] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.930543][T21083] CPU: 0 UID: 0 PID: 21083 Comm: syz.0.3566 Tainted: G L syzkaller #0 PREEMPT(full) [ 1808.930573][T21083] Tainted: [L]=SOFTLOCKUP [ 1808.930582][T21083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1808.930594][T21083] Call Trace: [ 1808.930602][T21083] [ 1808.930611][T21083] dump_stack_lvl+0x100/0x190 [ 1808.930648][T21083] should_fail_ex.cold+0x5/0xa [ 1808.930678][T21083] should_failslab+0xc2/0x120 [ 1808.930709][T21083] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1808.930735][T21083] ? __pfx_map_id_range_down+0x10/0x10 [ 1808.930762][T21083] ? rcu_is_watching+0x13/0xc0 [ 1808.930791][T21083] ? security_inode_alloc+0x3b/0x2c0 [ 1808.930825][T21083] security_inode_alloc+0x3b/0x2c0 [ 1808.930853][T21083] inode_init_always_gfp+0xc6f/0xfb0 [ 1808.930888][T21083] alloc_inode+0x8e/0x250 [ 1808.930913][T21083] sock_alloc+0x44/0x280 [ 1808.930934][T21083] ? security_socket_create+0x7f/0x250 [ 1808.930963][T21083] __sock_create+0xc2/0x860 [ 1808.930992][T21083] __sys_socketpair+0x1e4/0x5b0 [ 1808.931029][T21083] ? __pfx___sys_socketpair+0x10/0x10 [ 1808.931061][T21083] ? xfd_validate_state+0x129/0x190 [ 1808.931094][T21083] __x64_sys_socketpair+0x96/0x100 [ 1808.931125][T21083] ? lockdep_hardirqs_on+0x7d/0x110 [ 1808.931154][T21083] do_syscall_64+0x123/0x790 [ 1808.931186][T21083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.931208][T21083] RIP: 0033:0x7f9e0c19e559 [ 1808.931227][T21083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.931246][T21083] RSP: 002b:00007f9e0d103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1808.931267][T21083] RAX: ffffffffffffffda RBX: 00007f9e0c426180 RCX: 00007f9e0c19e559 [ 1808.931282][T21083] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1808.931295][T21083] RBP: 00007f9e0c2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1808.931308][T21083] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 1808.931321][T21083] R13: 00007f9e0c426218 R14: 00007f9e0c426180 R15: 00007ffcb3c488e8 [ 1808.931353][T21083] [ 1809.474739][T21070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.492033][T21070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.636700][T19789] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1809.776662][ T144] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1809.776692][ T144] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.778962][T13335] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1809.778991][T13335] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.779024][T13335] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1809.779048][T13335] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.779080][T13335] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1809.779104][T13335] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.815394][T19789] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1809.843808][T19789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1809.891174][T19789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.891195][T19789] usb 3-1: Product: syz [ 1809.891208][T19789] usb 3-1: Manufacturer: syz [ 1809.891222][T19789] usb 3-1: SerialNumber: syz [ 1809.921995][T19789] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1809.940227][T19789] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1810.037659][ T5807] usb 10-1: USB disconnect, device number 2 [ 1810.480126][T21082] tmpfs: Bad value for 'nr_inodes' [ 1810.934354][ T5807] usb 3-1: USB disconnect, device number 112 [ 1810.950998][ T5807] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1810.957186][ T5807] cyberjack 3-1:1.0: device disconnected [ 1811.078145][T14243] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1811.149063][ T31] audit: type=1400 audit(1792187565.260:6729): avc: denied { write } for pid=21089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1811.427363][ T31] audit: type=1400 audit(1792187565.522:6730): avc: denied { write } for pid=21128 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1811.465934][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3576'. [ 1812.798877][T16253] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1813.189836][T16253] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1813.194936][T16253] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1813.194951][T16253] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1813.196418][T16253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1813.196430][T16253] usb 1-1: SerialNumber: syz [ 1813.260151][T21126] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1813.624260][ C1] net_ratelimit: 242 callbacks suppressed [ 1813.624282][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1814.155688][T21126] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1814.300338][T21161] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1814.341723][T19786] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1814.348040][T21161] netlink: 102776 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1814.425046][ T31] audit: type=1400 audit(1792187568.319:6731): avc: denied { write } for pid=21136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1814.533106][T19786] usb 3-1: Using ep0 maxpacket: 16 [ 1814.534034][T19786] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 1814.535356][T19786] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 1814.535378][T19786] usb 3-1: config 0 has no interface number 0 [ 1814.535415][T19786] usb 3-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1814.535468][T19786] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1814.538339][T19786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.538360][T19786] usb 3-1: Product: syz [ 1814.538403][T19786] usb 3-1: Manufacturer: syz [ 1814.538420][T19786] usb 3-1: SerialNumber: syz [ 1814.542551][T19786] usb 3-1: config 0 descriptor?? [ 1814.645311][T19786] usbtest 3-1:0.99: usb test device [ 1814.645327][T19786] usbtest 3-1:0.99: high-speed {control in/out iso-out} tests (+alt) [ 1814.686724][T16253] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1814.755740][ T31] audit: type=1400 audit(1792187568.628:6732): avc: denied { write } for pid=21171 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1814.849326][T16253] usb 3-1: USB disconnect, device number 113 [ 1814.903181][ T31] audit: type=1400 audit(1792187568.768:6733): avc: denied { ioctl } for pid=21174 comm="syz.8.3586" path="socket:[69573]" dev="sockfs" ino=69573 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1814.981361][T19786] usb 1-1: USB disconnect, device number 116 [ 1815.022254][T19786] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1815.108320][T14243] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1815.414041][T21186] FAULT_INJECTION: forcing a failure. [ 1815.414041][T21186] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.414103][T21186] CPU: 0 UID: 0 PID: 21186 Comm: syz.6.3587 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.414134][T21186] Tainted: [L]=SOFTLOCKUP [ 1815.414142][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1815.414156][T21186] Call Trace: [ 1815.414164][T21186] [ 1815.414173][T21186] dump_stack_lvl+0x100/0x190 [ 1815.414209][T21186] should_fail_ex.cold+0x5/0xa [ 1815.414239][T21186] should_failslab+0xc2/0x120 [ 1815.414270][T21186] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1815.414298][T21186] ? security_inode_alloc+0x3b/0x2c0 [ 1815.414332][T21186] security_inode_alloc+0x3b/0x2c0 [ 1815.414359][T21186] inode_init_always_gfp+0xc6f/0xfb0 [ 1815.414394][T21186] alloc_inode+0x8e/0x250 [ 1815.414419][T21186] sock_alloc+0x44/0x280 [ 1815.414441][T21186] ? security_socket_create+0x7f/0x250 [ 1815.414469][T21186] __sock_create+0xc2/0x860 [ 1815.414501][T21186] __sys_socketpair+0x1e4/0x5b0 [ 1815.414532][T21186] ? __pfx___sys_socketpair+0x10/0x10 [ 1815.414562][T21186] ? xfd_validate_state+0x129/0x190 [ 1815.414593][T21186] __x64_sys_socketpair+0x96/0x100 [ 1815.414621][T21186] ? lockdep_hardirqs_on+0x7d/0x110 [ 1815.414651][T21186] do_syscall_64+0x123/0x790 [ 1815.414683][T21186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.414705][T21186] RIP: 0033:0x7fbd3639e559 [ 1815.414723][T21186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.414743][T21186] RSP: 002b:00007fbd371ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1815.414764][T21186] RAX: ffffffffffffffda RBX: 00007fbd36626180 RCX: 00007fbd3639e559 [ 1815.414778][T21186] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1815.414791][T21186] RBP: 00007fbd364358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1815.414805][T21186] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 1815.414818][T21186] R13: 00007fbd36626218 R14: 00007fbd36626180 R15: 00007ffe415c4068 [ 1815.414849][T21186] [ 1816.721333][ T31] audit: type=1807 audit(1792187570.452:6734): action=measure res=1 [ 1819.012353][ C1] net_ratelimit: 101 callbacks suppressed [ 1819.026994][T21196] ima: policy update completed [ 1819.027631][ T31] audit: type=1802 audit(1792187572.631:6735): pid=21196 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.2.3588" res=1 errno=0 [ 1819.343346][T21211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3594'. [ 1819.528038][ T31] audit: type=1800 audit(1792187573.099:6736): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31148 res=0 errno=0 [ 1819.578318][ T31] audit: type=1800 audit(1792187573.146:6737): pid=21217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31171 res=0 errno=0 [ 1819.653885][ T5807] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1819.717019][ T31] audit: type=1400 audit(1792187573.267:6738): avc: denied { read } for pid=21218 comm="syz.2.3598" path="/120/nfsd/v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1819.862606][ T5807] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1819.884642][ T5807] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1819.884667][ T5807] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1819.992189][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1819.992220][ T5807] usb 1-1: SerialNumber: syz [ 1820.220511][ T30] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1820.381140][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 1820.382321][ T30] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1820.410484][ T30] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1820.410523][ T30] usb 3-1: config 0 has no interface number 0 [ 1820.410773][ T30] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1820.479808][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.479887][ T30] usb 3-1: Product: syz [ 1820.479931][ T30] usb 3-1: Manufacturer: syz [ 1820.479973][ T30] usb 3-1: SerialNumber: syz [ 1820.594267][ T31] audit: type=1800 audit(1792187574.062:6739): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31248 res=0 errno=0 [ 1820.620531][T21211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1820.750670][ T30] usb 3-1: config 0 descriptor?? [ 1820.811549][ T31] audit: type=1800 audit(1792187574.287:6740): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31271 res=0 errno=0 [ 1821.125874][T21211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1821.350206][ T31] audit: type=1800 audit(1792187574.801:6741): pid=21217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=331978 res=0 errno=0 [ 1821.429019][ T30] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1821.429085][ T30] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1821.658725][ T31] audit: type=1800 audit(1792187575.091:6742): pid=21217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=332008 res=0 errno=0 [ 1821.764935][ T31] audit: type=1800 audit(1792187575.194:6743): pid=21217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=331985 res=0 errno=0 [ 1822.287456][T21227] netlink: 102776 bytes leftover after parsing attributes in process `syz.0.3594'. [ 1822.322880][ T5807] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1822.340259][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1822.340275][ T31] audit: type=1800 audit(1792187575.727:6746): pid=21217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=332007 res=0 errno=0 [ 1822.344954][ T31] audit: type=1800 audit(1792187575.727:6747): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332021 res=0 errno=0 [ 1822.400710][ T31] audit: type=1800 audit(1792187575.783:6748): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=332060 res=0 errno=0 [ 1822.401761][ T31] audit: type=1800 audit(1792187575.793:6749): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=332035 res=0 errno=0 [ 1822.402429][ T30] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1822.402457][ T30] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1822.402478][ T30] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1822.402677][ T30] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1822.423399][ T31] audit: type=1800 audit(1792187575.802:6750): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=332036 res=0 errno=0 [ 1822.446610][ T30] usb 3-1: USB disconnect, device number 114 [ 1822.513235][ T31] audit: type=1800 audit(1792187575.877:6751): pid=21205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332078 res=0 errno=0 [ 1822.527235][T21230] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1822.537908][ T31] audit: type=1400 audit(1792187575.905:6752): avc: denied { relabelto } for pid=21229 comm="syz.9.3599" name="13" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1822.537957][ T31] audit: type=1800 audit(1792187575.914:6753): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=332057 res=0 errno=0 [ 1822.552186][ T31] audit: type=1400 audit(1792187575.924:6754): avc: denied { associate } for pid=21229 comm="syz.9.3599" name="13" dev="tmpfs" ino=84 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1822.561269][ T31] audit: type=1800 audit(1792187575.933:6755): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332193 res=0 errno=0 [ 1823.732308][T19786] usb 1-1: USB disconnect, device number 117 [ 1823.735558][T19786] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1824.022943][T21243] bridge1: entered promiscuous mode [ 1824.022960][T21243] bridge1: entered allmulticast mode [ 1824.423493][T21250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3603'. [ 1824.485900][ C1] net_ratelimit: 125 callbacks suppressed [ 1826.689547][T19786] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1826.850696][T19786] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1826.853826][T19786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.853844][T19786] usb 3-1: Product: syz [ 1826.853858][T19786] usb 3-1: Manufacturer: syz [ 1826.853871][T19786] usb 3-1: SerialNumber: syz [ 1826.882752][T19786] usb 3-1: config 0 descriptor?? [ 1827.252408][T21298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.255384][T21298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.902760][T21316] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3615'. [ 1827.938151][ T31] kauditd_printk_skb: 71 callbacks suppressed [ 1827.938170][ T31] audit: type=1400 audit(1792187580.956:6827): avc: denied { read } for pid=21317 comm="syz.9.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1827.994029][T19786] usb 3-1: Firmware version (0.0) predates our first public release. [ 1827.994049][T19786] usb 3-1: Please update to version 0.2 or newer [ 1828.014457][ T31] audit: type=1400 audit(1792187581.031:6828): avc: denied { setopt } for pid=21317 comm="syz.9.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1828.101214][ T31] audit: type=1800 audit(1792187581.124:6829): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=332699 res=0 errno=0 [ 1828.104779][ T31] audit: type=1800 audit(1792187581.124:6830): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=332700 res=0 errno=0 [ 1828.104828][ T31] audit: type=1800 audit(1792187581.124:6831): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=332679 res=0 errno=0 [ 1828.107255][ T31] audit: type=1800 audit(1792187581.124:6832): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=332701 res=0 errno=0 [ 1828.217216][ T31] audit: type=1800 audit(1792187581.218:6833): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332745 res=0 errno=0 [ 1828.217999][ T31] audit: type=1800 audit(1792187581.227:6834): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332722 res=0 errno=0 [ 1828.250977][ T31] audit: type=1800 audit(1792187581.265:6835): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332759 res=0 errno=0 [ 1828.311216][ T31] audit: type=1400 audit(1792187581.312:6836): avc: denied { map } for pid=21317 comm="syz.9.3616" path="socket:[69952]" dev="sockfs" ino=69952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1828.342693][T16253] usb 3-1: USB disconnect, device number 115 [ 1828.446858][T21332] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1828.881269][T21337] FAULT_INJECTION: forcing a failure. [ 1828.881269][T21337] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.881292][T21337] CPU: 0 UID: 0 PID: 21337 Comm: syz.6.3620 Tainted: G L syzkaller #0 PREEMPT(full) [ 1828.881309][T21337] Tainted: [L]=SOFTLOCKUP [ 1828.881313][T21337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1828.881320][T21337] Call Trace: [ 1828.881325][T21337] [ 1828.881330][T21337] dump_stack_lvl+0x100/0x190 [ 1828.881351][T21337] should_fail_ex.cold+0x5/0xa [ 1828.881373][T21337] should_failslab+0xc2/0x120 [ 1828.881401][T21337] __kmalloc_noprof+0xfc/0x840 [ 1828.881416][T21337] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1828.881428][T21337] ? lockdep_hardirqs_on+0x7d/0x110 [ 1828.881445][T21337] ? __io_timeout_prep+0x3ef/0x9c0 [ 1828.881466][T21337] __io_timeout_prep+0x3ef/0x9c0 [ 1828.881485][T21337] io_submit_sqes+0xa03/0x2480 [ 1828.881511][T21337] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1828.881535][T21337] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1828.881563][T21337] ? __fget_files+0x21f/0x3d0 [ 1828.881596][T21337] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1828.881626][T21337] ? fput+0x7c/0x100 [ 1828.881652][T21337] ? ksys_write+0x1ac/0x250 [ 1828.881666][T21337] ? __pfx_ksys_write+0x10/0x10 [ 1828.881685][T21337] do_syscall_64+0x123/0x790 [ 1828.881704][T21337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.881716][T21337] RIP: 0033:0x7fbd3639e559 [ 1828.881727][T21337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1828.881738][T21337] RSP: 002b:00007fbd3722f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1828.881751][T21337] RAX: ffffffffffffffda RBX: 00007fbd36625fa0 RCX: 00007fbd3639e559 [ 1828.881758][T21337] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 1828.881765][T21337] RBP: 00007fbd3722f090 R08: 0000000000000000 R09: 0000000000000000 [ 1828.881773][T21337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1828.881780][T21337] R13: 00007fbd36626038 R14: 00007fbd36625fa0 R15: 00007ffe415c4068 [ 1828.881797][T21337] [ 1828.883786][T21337] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3620'. [ 1829.408291][T21346] netlink: 'syz.9.3624': attribute type 10 has an invalid length. [ 1829.459231][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1830.216066][ C1] net_ratelimit: 327 callbacks suppressed [ 1830.290983][T16057] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1830.337336][T21364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1830.474604][T16057] usb 3-1: Using ep0 maxpacket: 8 [ 1830.475164][T16057] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1830.478294][T16057] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1830.478308][T16057] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1830.478321][T16057] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1830.480400][T16057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.480412][T16057] usb 3-1: Product: syz [ 1830.480420][T16057] usb 3-1: Manufacturer: syz [ 1830.480429][T16057] usb 3-1: SerialNumber: syz [ 1830.488313][T21354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1830.493396][T16057] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1830.494687][T16057] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1830.510474][T16057] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1830.791052][T21372] ip_tables: iptables: counters copy to user failed while replacing table [ 1831.093749][T16253] usb 3-1: USB disconnect, device number 116 [ 1831.176979][T21375] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3632'. [ 1831.637971][T12604] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1831.649231][ T5807] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1831.798964][T12604] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1831.800182][T12604] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1831.800207][T12604] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1831.801375][T12604] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1831.801395][T12604] usb 10-1: SerialNumber: syz [ 1831.805554][T21371] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1831.812365][ T5807] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1831.813942][ T5807] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.813983][ T5807] usb 1-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1831.814720][ T5807] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1831.817629][ T5807] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.817672][ T5807] usb 1-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1831.817695][ T5807] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1831.820373][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.820393][ T5807] usb 1-1: Product: syz [ 1831.820408][ T5807] usb 1-1: Manufacturer: syz [ 1831.820424][ T5807] usb 1-1: SerialNumber: syz [ 1831.844446][T21391] fuse: Bad value for 'fd' [ 1831.845068][ T5807] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1831.845465][ T5807] ti_usb_3410_5052 1-1:2.0: missing endpoints [ 1831.850868][T21391] sctp: [Deprecated]: syz.6.3637 (pid 21391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1831.850868][T21391] Use struct sctp_sack_info instead [ 1831.855376][T14243] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1832.030266][T21371] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1832.971502][ T5807] usb 1-1: USB disconnect, device number 118 [ 1833.093331][T12604] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1833.263034][T19786] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1833.424612][T19786] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1833.426172][T19786] usb 3-1: config index 0 descriptor too short (expected 64763, got 45) [ 1833.440361][T19786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.440380][T19786] usb 3-1: Product: syz [ 1833.440394][T19786] usb 3-1: Manufacturer: syz [ 1833.440410][T19786] usb 3-1: SerialNumber: syz [ 1833.444163][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 1833.444177][ T31] audit: type=1800 audit(1792187586.110:6879): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=333533 res=0 errno=0 [ 1833.514892][ T31] audit: type=1800 audit(1792187586.185:6880): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=333537 res=0 errno=0 [ 1833.525283][ T31] audit: type=1800 audit(1792187586.194:6881): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=333607 res=0 errno=0 [ 1833.564463][ T31] audit: type=1800 audit(1792187586.232:6882): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=333639 res=0 errno=0 [ 1833.588164][ T31] audit: type=1800 audit(1792187586.250:6883): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=333614 res=0 errno=0 [ 1833.649033][T12604] usb 10-1: USB disconnect, device number 3 [ 1833.666509][T12604] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 1833.679244][ T31] audit: type=1800 audit(1792187586.335:6884): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=333615 res=0 errno=0 [ 1834.734870][T21414] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1834.734886][T21414] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1834.753444][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1834.877528][ T31] audit: type=1400 audit(1792187587.457:6885): avc: denied { write } for pid=21398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1835.281125][ T31] audit: type=1800 audit(1792187587.831:6886): pid=21427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.3644" name="compressor" dev="sysfs" ino=55445 res=0 errno=0 [ 1835.284836][T19786] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1835.319269][T19786] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1835.324763][T19786] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1835.346137][ T31] audit: type=1400 audit(1792187587.878:6887): avc: denied { write } for pid=21430 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1835.380672][T19786] usb 3-1: USB disconnect, device number 117 [ 1835.402818][ T31] audit: type=1800 audit(1792187587.953:6888): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=333636 res=0 errno=0 [ 1835.614890][ T144] net_ratelimit: 153 callbacks suppressed [ 1837.582485][T19786] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1837.603395][ T5807] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1838.060462][ T5807] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1838.061557][ T5807] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.061600][ T5807] usb 10-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1838.061617][ T5807] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1838.064034][ T5807] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.064073][ T5807] usb 10-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1838.064096][ T5807] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1838.081449][ T5807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.081470][ T5807] usb 10-1: Product: syz [ 1838.081485][ T5807] usb 10-1: Manufacturer: syz [ 1838.081500][ T5807] usb 10-1: SerialNumber: syz [ 1838.130263][T19786] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1838.160918][ T5807] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 1838.161326][ T5807] ti_usb_3410_5052 10-1:2.0: missing endpoints [ 1838.195801][T19786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.195820][T19786] usb 3-1: Product: syz [ 1838.195833][T19786] usb 3-1: Manufacturer: syz [ 1838.195848][T19786] usb 3-1: SerialNumber: syz [ 1838.200576][T19786] usb 3-1: config 0 descriptor?? [ 1839.289334][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 1839.289344][ T31] audit: type=1800 audit(1792187591.578:6906): pid=21480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3652" name="level" dev="sysfs" ino=26411 res=0 errno=0 [ 1839.364199][ T5807] usb 10-1: USB disconnect, device number 4 [ 1839.375356][T19786] usb 3-1: Firmware version (0.0) predates our first public release. [ 1839.375374][T19786] usb 3-1: Please update to version 0.2 or newer [ 1839.477283][ T31] audit: type=1800 audit(1792187591.765:6907): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=334154 res=0 errno=0 [ 1839.480223][ T31] audit: type=1800 audit(1792187591.765:6908): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=334155 res=0 errno=0 [ 1839.483856][ T31] audit: type=1800 audit(1792187591.765:6909): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=334134 res=0 errno=0 [ 1839.485368][ T31] audit: type=1800 audit(1792187591.765:6910): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=334156 res=0 errno=0 [ 1839.530224][ T31] audit: type=1800 audit(1792187591.793:6911): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334212 res=0 errno=0 [ 1839.531557][ T31] audit: type=1800 audit(1792187591.793:6912): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334195 res=0 errno=0 [ 1839.576879][ T31] audit: type=1800 audit(1792187591.840:6913): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334226 res=0 errno=0 [ 1839.643568][ T31] audit: type=1800 audit(1792187591.896:6914): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=334231 res=0 errno=0 [ 1840.331050][ T5807] usb 3-1: USB disconnect, device number 118 [ 1840.530308][ T31] audit: type=1800 audit(1792187592.738:6915): pid=21501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3661" name="compressor" dev="sysfs" ino=55445 res=0 errno=0 [ 1840.555909][T21498] bridge0: port 3(syz_tun) entered blocking state [ 1840.567559][T21498] bridge0: port 3(syz_tun) entered disabled state [ 1840.571313][T21498] syz_tun: entered promiscuous mode [ 1840.571883][T21498] bridge0: port 3(syz_tun) entered blocking state [ 1840.572022][T21498] bridge0: port 3(syz_tun) entered forwarding state [ 1840.583204][T21498] syz_tun: left promiscuous mode [ 1840.583376][T21498] bridge0: port 3(syz_tun) entered disabled state [ 1840.603360][T21498] bridge_slave_1: left allmulticast mode [ 1840.603378][T21498] bridge_slave_1: left promiscuous mode [ 1840.603555][T21498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.620977][T21498] bridge_slave_0: left allmulticast mode [ 1840.620995][T21498] bridge_slave_0: left promiscuous mode [ 1840.621163][T21498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.997891][T13336] net_ratelimit: 94 callbacks suppressed [ 1841.652991][T21528] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3666'. [ 1841.658116][T21528] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3666'. [ 1841.663077][T21528] 9p: Bad value for 'rfdno' [ 1842.150940][T21545] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1843.420965][T19786] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1843.581239][T19786] usb 1-1: Using ep0 maxpacket: 8 [ 1843.581812][T19786] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1843.582846][T19786] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1843.582860][T19786] usb 1-1: config 179 has no interface number 0 [ 1843.582882][T19786] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1843.582898][T19786] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1843.582914][T19786] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1843.582929][T19786] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1843.582958][T19786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.671673][T19786] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input49 [ 1843.729280][ T4957] input input49: unable to receive magic message: -110 [ 1843.736564][ T4957] input input49: unable to receive magic message: -32 [ 1843.783014][ T4957] input input49: unable to receive magic message: -32 [ 1843.788012][ T4957] input input49: unable to receive magic message: -32 [ 1843.865670][ T4957] input input49: unable to receive magic message: -32 [ 1843.907088][ T4957] input input49: unable to receive magic message: -32 [ 1843.912076][T21549] fuse: fd is not a fuse device [ 1843.930906][T19786] usb 1-1: USB disconnect, device number 119 [ 1843.931750][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1844.565518][T21573] Cannot find set identified by id 0 to match [ 1844.958479][ T5807] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1845.115009][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 1845.115018][ T31] audit: type=1400 audit(1792187597.031:6945): avc: denied { write } for pid=21580 comm="syz.9.3680" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1845.148032][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 1845.148591][ T5807] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1845.164094][ T5807] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1845.164118][ T5807] usb 3-1: config 0 has no interface number 0 [ 1845.164162][ T5807] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1845.190889][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.190908][ T5807] usb 3-1: Product: syz [ 1845.190921][ T5807] usb 3-1: Manufacturer: syz [ 1845.190933][ T5807] usb 3-1: SerialNumber: syz [ 1845.216214][ T5807] usb 3-1: config 0 descriptor?? [ 1845.218212][ T31] audit: type=1800 audit(1792187597.134:6946): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334654 res=0 errno=0 [ 1845.227863][ T31] audit: type=1800 audit(1792187597.143:6947): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=334686 res=0 errno=0 [ 1845.231025][ T31] audit: type=1800 audit(1792187597.143:6948): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=334661 res=0 errno=0 [ 1845.231343][ T31] audit: type=1800 audit(1792187597.143:6949): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=334662 res=0 errno=0 [ 1845.309486][T21585] syzkaller0: entered promiscuous mode [ 1845.309499][T21585] syzkaller0: entered allmulticast mode [ 1845.311338][ T30] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1845.326898][T21585] FAULT_INJECTION: forcing a failure. [ 1845.326898][T21585] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.326929][T21585] CPU: 1 UID: 0 PID: 21585 Comm: syz.9.3683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.326964][T21585] Tainted: [L]=SOFTLOCKUP [ 1845.326972][T21585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1845.326984][T21585] Call Trace: [ 1845.326991][T21585] [ 1845.326999][T21585] dump_stack_lvl+0x100/0x190 [ 1845.327033][T21585] should_fail_ex.cold+0x5/0xa [ 1845.327063][T21585] should_failslab+0xc2/0x120 [ 1845.327091][T21585] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1845.327116][T21585] ? __fget_files+0x215/0x3d0 [ 1845.327144][T21585] ? create_new_namespaces+0x30/0xac0 [ 1845.327174][T21585] create_new_namespaces+0x30/0xac0 [ 1845.327205][T21585] __do_sys_setns+0x213/0x1d90 [ 1845.327232][T21585] ? __pfx___do_sys_setns+0x10/0x10 [ 1845.327267][T21585] do_syscall_64+0x123/0x790 [ 1845.327298][T21585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.327318][T21585] RIP: 0033:0x7f937bd9e559 [ 1845.327335][T21585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.327353][T21585] RSP: 002b:00007f937cd53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1845.327373][T21585] RAX: ffffffffffffffda RBX: 00007f937c025fa0 RCX: 00007f937bd9e559 [ 1845.327387][T21585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 1845.327398][T21585] RBP: 00007f937be358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1845.327410][T21585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.327423][T21585] R13: 00007f937c026038 R14: 00007f937c025fa0 R15: 00007ffc41d33a78 [ 1845.327451][T21585] [ 1845.486600][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1845.486640][ T30] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1845.487716][ T30] usb 1-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 1845.487743][ T30] usb 1-1: config 66 interface 0 has no altsetting 0 [ 1845.490682][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.490701][ T30] usb 1-1: Product: syz [ 1845.490716][ T30] usb 1-1: Manufacturer: syz [ 1845.490730][ T30] usb 1-1: SerialNumber: syz [ 1845.499493][T21579] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1845.504622][ T31] audit: type=1800 audit(1792187597.387:6950): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334800 res=0 errno=0 [ 1845.511054][ T31] audit: type=1800 audit(1792187597.405:6951): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=334832 res=0 errno=0 [ 1845.520178][ T31] audit: type=1800 audit(1792187597.415:6952): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=334807 res=0 errno=0 [ 1845.520239][ T31] audit: type=1800 audit(1792187597.415:6953): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=334808 res=0 errno=0 [ 1846.637534][ C1] net_ratelimit: 145 callbacks suppressed [ 1846.643996][T21587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3684'. [ 1846.654590][T21587] ipvlan2: entered allmulticast mode [ 1846.668591][ T31] audit: type=1800 audit(1792187598.462:6954): pid=21587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3684" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1846.898520][ T5807] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1846.898545][ T5807] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1847.286872][T21593] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3687'. [ 1847.652767][T21086] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1847.761085][ T5807] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1847.761111][ T5807] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1847.761125][ T5807] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1847.761325][ T5807] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1847.790800][ T5807] usb 3-1: USB disconnect, device number 119 [ 1847.841030][T21086] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1847.852716][T21086] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1847.852740][T21086] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1847.856057][T21086] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1847.856077][T21086] usb 10-1: SerialNumber: syz [ 1847.877622][T21593] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1848.104795][T21593] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1848.310799][ T30] ati_remote2 1-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 1848.356826][ T30] usb 1-1: USB disconnect, device number 120 [ 1849.117686][T21624] netlink: 102776 bytes leftover after parsing attributes in process `syz.9.3687'. [ 1849.121214][T21086] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1849.210540][ T30] usb 10-1: USB disconnect, device number 5 [ 1849.296275][ T30] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 1851.260563][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 1851.260580][ T31] audit: type=1800 audit(1792187602.784:6975): pid=21635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3694" name="level" dev="sysfs" ino=26411 res=0 errno=0 [ 1852.025174][ C1] net_ratelimit: 185 callbacks suppressed [ 1852.281588][ C1] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 1852.591863][T19786] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1852.961221][T19786] usb 10-1: Using ep0 maxpacket: 8 [ 1852.987191][T19786] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1853.139965][T19786] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.139991][T19786] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1853.236443][T19786] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.236462][T19786] usb 10-1: Product: syz [ 1853.236478][T19786] usb 10-1: Manufacturer: syz [ 1853.236491][T19786] usb 10-1: SerialNumber: syz [ 1853.392820][ T31] audit: type=1400 audit(1792187604.748:6976): avc: denied { write } for pid=21640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1853.398153][ T31] audit: type=1800 audit(1792187604.776:6977): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335356 res=0 errno=0 [ 1853.400677][ T31] audit: type=1800 audit(1792187604.776:6978): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=335388 res=0 errno=0 [ 1853.401879][ T31] audit: type=1800 audit(1792187604.776:6979): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=335363 res=0 errno=0 [ 1853.404644][ T31] audit: type=1800 audit(1792187604.795:6980): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=335364 res=0 errno=0 [ 1853.525719][T19786] usb 10-1: 0:1 : does not exist [ 1853.525805][T19786] usb 10-1: unit 1 not found! [ 1853.525826][T19786] usb 10-1: unit 9 not found! [ 1853.685401][T21670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3699'. [ 1853.731091][ T31] audit: type=1400 audit(1792187605.066:6981): avc: denied { ioctl } for pid=21641 comm="syz.9.3697" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1853.860978][ T31] audit: type=1400 audit(1792187605.207:6982): avc: denied { write } for pid=21677 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1853.962659][ T31] audit: type=1800 audit(1792187605.309:6983): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=335385 res=0 errno=0 [ 1853.965850][ T31] audit: type=1800 audit(1792187605.309:6984): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=335386 res=0 errno=0 [ 1853.966759][T21680] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3701'. [ 1853.972724][T19786] usb 10-1: USB disconnect, device number 6 [ 1854.220176][T21231] udevd[21231]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1854.387783][T12604] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1855.231604][T12604] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1855.359821][T12604] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1855.359845][T12604] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1855.391387][T12604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1855.391399][T12604] usb 1-1: SerialNumber: syz [ 1855.401825][T21669] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1856.070003][T12604] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1856.111653][T12604] usb 1-1: USB disconnect, device number 121 [ 1857.414834][ C0] net_ratelimit: 107 callbacks suppressed [ 1857.565394][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1857.565410][ T31] audit: type=1400 audit(1792187608.677:6995): avc: denied { write } for pid=21683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1857.721645][T21722] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3711'. [ 1857.857058][T21722] netlink: 102776 bytes leftover after parsing attributes in process `syz.8.3711'. [ 1858.036094][ T31] audit: type=1400 audit(1792187609.098:6996): avc: denied { write } for pid=21725 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1858.234827][ T31] audit: type=1400 audit(1792187609.304:6997): avc: denied { bind } for pid=21729 comm="syz.9.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1858.812709][T21735] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3707'. [ 1859.224614][ T31] audit: type=1800 audit(1792187610.230:6998): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335750 res=0 errno=0 [ 1859.325835][T21750] FAULT_INJECTION: forcing a failure. [ 1859.325835][T21750] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.325859][T21750] CPU: 0 UID: 0 PID: 21750 Comm: syz.2.3716 Tainted: G L syzkaller #0 PREEMPT(full) [ 1859.325876][T21750] Tainted: [L]=SOFTLOCKUP [ 1859.325881][T21750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1859.325889][T21750] Call Trace: [ 1859.325894][T21750] [ 1859.325900][T21750] dump_stack_lvl+0x100/0x190 [ 1859.325922][T21750] should_fail_ex.cold+0x5/0xa [ 1859.325941][T21750] should_failslab+0xc2/0x120 [ 1859.325959][T21750] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1859.325977][T21750] ? do_getname+0x35/0x390 [ 1859.325993][T21750] do_getname+0x35/0x390 [ 1859.326006][T21750] __x64_sys_mkdirat+0x78/0xc0 [ 1859.326024][T21750] do_syscall_64+0x123/0x790 [ 1859.326043][T21750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.326056][T21750] RIP: 0033:0x7f22b979e559 [ 1859.326067][T21750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.326078][T21750] RSP: 002b:00007f22ba657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1859.326090][T21750] RAX: ffffffffffffffda RBX: 00007f22b9a25fa0 RCX: 00007f22b979e559 [ 1859.326102][T21750] RDX: 0000000000000178 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 1859.326118][T21750] RBP: 00007f22b98358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1859.326126][T21750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1859.326134][T21750] R13: 00007f22b9a26038 R14: 00007f22b9a25fa0 R15: 00007ffea52d2198 [ 1859.326151][T21750] [ 1859.433730][ T5807] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1859.434232][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1859.575543][ T5807] usb 1-1: device descriptor read/64, error -32 [ 1859.641861][ T31] audit: type=1800 audit(1792187610.623:6999): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335773 res=0 errno=0 [ 1859.861263][ T5807] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1860.943885][ T5807] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1860.950328][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.950349][ T5807] usb 1-1: Product: syz [ 1860.950364][ T5807] usb 1-1: Manufacturer: syz [ 1860.950380][ T5807] usb 1-1: SerialNumber: syz [ 1860.955727][ T5807] usb 1-1: config 0 descriptor?? [ 1860.992491][ T31] audit: type=1800 audit(1792187611.885:7000): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335788 res=0 errno=0 [ 1861.018544][ T31] audit: type=1800 audit(1792187611.913:7001): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=335820 res=0 errno=0 [ 1862.184139][ T31] audit: type=1800 audit(1792187611.941:7002): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=335795 res=0 errno=0 [ 1862.184191][ T31] audit: type=1800 audit(1792187611.941:7003): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=335796 res=0 errno=0 [ 1862.194152][ T5807] usb 1-1: Firmware version (0.0) predates our first public release. [ 1862.194173][ T5807] usb 1-1: Please update to version 0.2 or newer [ 1862.355126][T21747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.360188][T21747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.431724][ T31] audit: type=1800 audit(1792187613.232:7004): pid=21747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3710" name="level" dev="sysfs" ino=26411 res=0 errno=0 [ 1862.592459][ T5807] usb 1-1: USB disconnect, device number 123 [ 1862.801094][ C0] net_ratelimit: 133 callbacks suppressed [ 1866.159015][T21790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3726'. [ 1868.445863][ C0] net_ratelimit: 122 callbacks suppressed [ 1870.626733][T21087] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1870.733778][T12604] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1870.815734][T21087] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1870.830419][T21087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.830439][T21087] usb 1-1: Product: syz [ 1870.830453][T21087] usb 1-1: Manufacturer: syz [ 1870.830468][T21087] usb 1-1: SerialNumber: syz [ 1870.832862][T21087] usb 1-1: config 0 descriptor?? [ 1870.834878][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1870.834892][ T31] audit: type=1800 audit(1792187621.090:7013): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336149 res=0 errno=0 [ 1870.835997][ T31] audit: type=1800 audit(1792187621.090:7014): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=336181 res=0 errno=0 [ 1870.837586][ T31] audit: type=1800 audit(1792187621.090:7015): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=336156 res=0 errno=0 [ 1870.839449][ T31] audit: type=1800 audit(1792187621.090:7016): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=336157 res=0 errno=0 [ 1870.917659][T12604] usb 3-1: Using ep0 maxpacket: 16 [ 1870.918191][T12604] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1870.963101][T12604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.963128][T12604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1870.963149][T12604] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1870.963181][T12604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.022959][T12604] usb 3-1: config 0 descriptor?? [ 1871.025123][ T31] audit: type=1800 audit(1792187621.267:7017): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336217 res=0 errno=0 [ 1871.030337][ T31] audit: type=1800 audit(1792187621.267:7018): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=336246 res=0 errno=0 [ 1871.030404][ T31] audit: type=1800 audit(1792187621.267:7019): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=336224 res=0 errno=0 [ 1871.060373][ T31] audit: type=1800 audit(1792187621.305:7020): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=336225 res=0 errno=0 [ 1871.141140][ T31] audit: type=1800 audit(1792187621.380:7021): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=336226 res=0 errno=0 [ 1871.286645][ T31] audit: type=1800 audit(1792187621.511:7022): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336266 res=0 errno=0 [ 1871.343951][ T144] IPVS: starting estimator thread 0... [ 1871.392820][T21825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.396655][T21825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.439140][T21834] IPVS: using max 69 ests per chain, 165600 per kthread [ 1871.585771][T21087] usb 1-1: Firmware version (0.0) predates our first public release. [ 1871.585787][T21087] usb 1-1: Please update to version 0.2 or newer [ 1871.635868][T21828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3736'. [ 1871.741434][T21087] usb 1-1: USB disconnect, device number 124 [ 1873.838569][T12604] usbhid 3-1:0.0: can't add hid device: -71 [ 1873.838714][T12604] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1873.855397][T12604] usb 3-1: USB disconnect, device number 120 [ 1873.976241][T21859] net_ratelimit: 95 callbacks suppressed [ 1876.812071][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1876.812081][ T31] audit: type=1800 audit(1792187626.683:7031): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23870 res=0 errno=0 [ 1877.555887][T21888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3751'. [ 1877.561854][T21888] ipvlan2: entered allmulticast mode [ 1877.568279][ T31] audit: type=1800 audit(1792187627.366:7032): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3751" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1877.635269][T21891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3742'. [ 1877.975651][T21894] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3753'. [ 1878.110309][T21086] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1878.309554][T21086] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1878.417085][T21086] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1878.417116][T21086] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1878.469657][T21086] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1878.469746][T21086] usb 1-1: SerialNumber: syz [ 1878.644524][ T31] audit: type=1800 audit(1792187628.395:7033): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336602 res=0 errno=0 [ 1878.667415][T21883] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1878.878563][ T31] audit: type=1800 audit(1792187628.610:7034): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=336632 res=0 errno=0 [ 1878.915433][T21896] sctp: [Deprecated]: syz.8.3754 (pid 21896) Use of int in max_burst socket option. [ 1878.915433][T21896] Use struct sctp_assoc_value instead [ 1878.916591][ T31] audit: type=1800 audit(1792187628.648:7035): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=336609 res=0 errno=0 [ 1878.917577][ T31] audit: type=1800 audit(1792187628.648:7036): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=336610 res=0 errno=0 [ 1878.929804][T21883] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1878.995956][ T31] audit: type=1800 audit(1792187628.704:7037): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=336611 res=0 errno=0 [ 1879.039728][ T31] audit: type=1400 audit(1792187628.760:7038): avc: denied { connect } for pid=21895 comm="syz.8.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1879.392984][T13335] net_ratelimit: 960 callbacks suppressed [ 1879.426424][T21086] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1879.459644][ T31] audit: type=1800 audit(1792187629.162:7039): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=336631 res=0 errno=0 [ 1879.490585][ T31] audit: type=1800 audit(1792187629.172:7040): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336652 res=0 errno=0 [ 1879.711714][T21087] usb 1-1: USB disconnect, device number 125 [ 1879.720622][T21087] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1879.845371][T21906] sctp: [Deprecated]: syz.9.3756 (pid 21906) Use of int in max_burst socket option. [ 1879.845371][T21906] Use struct sctp_assoc_value instead [ 1881.941719][T21930] FAULT_INJECTION: forcing a failure. [ 1881.941719][T21930] name failslab, interval 1, probability 0, space 0, times 0 [ 1881.941751][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.2.3761 Tainted: G L syzkaller #0 PREEMPT(full) [ 1881.941768][T21930] Tainted: [L]=SOFTLOCKUP [ 1881.941774][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1881.941782][T21930] Call Trace: [ 1881.941787][T21930] [ 1881.941792][T21930] dump_stack_lvl+0x100/0x190 [ 1881.941826][T21930] should_fail_ex.cold+0x5/0xa [ 1881.941845][T21930] should_failslab+0xc2/0x120 [ 1881.941863][T21930] __kmalloc_cache_noprof+0x91/0x6d0 [ 1881.941877][T21930] ? call_usermodehelper_setup+0xaf/0x360 [ 1881.941892][T21930] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1881.941910][T21930] call_usermodehelper_setup+0xaf/0x360 [ 1881.941931][T21930] __request_module+0x3c7/0x6a0 [ 1881.941952][T21930] ? __pfx___request_module+0x10/0x10 [ 1881.941971][T21930] ? rcu_is_watching+0x13/0xc0 [ 1881.941991][T21930] ? crypto_alg_lookup+0x10c/0x1e0 [ 1881.942004][T21930] ? crypto_alg_lookup+0x10c/0x1e0 [ 1881.942026][T21930] crypto_alg_mod_lookup+0x413/0x5d0 [ 1881.942040][T21930] crypto_alloc_tfm_node+0xd3/0x260 [ 1881.942055][T21930] esp_init_authenc.constprop.0+0x1df/0xb50 [ 1881.942077][T21930] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 1881.942103][T21930] ? find_held_lock+0x2b/0x80 [ 1881.942124][T21930] esp_init_state+0x2f8/0x530 [ 1881.942144][T21930] __xfrm_init_state+0x842/0x1dc0 [ 1881.942162][T21930] xfrm_add_sa+0x23f2/0x5c50 [ 1881.942182][T21930] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1881.942198][T21930] ? __nla_parse+0x40/0x60 [ 1881.942213][T21930] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1881.942228][T21930] xfrm_user_rcv_msg+0x483/0xd80 [ 1881.942244][T21930] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1881.942258][T21930] ? kfree_skbmem+0x19f/0x210 [ 1881.942273][T21930] ? consume_skb+0xd6/0x110 [ 1881.942304][T21930] ? rcu_is_watching+0x13/0xc0 [ 1881.942320][T21930] ? trace_contention_end+0x126/0x160 [ 1881.942335][T21930] ? __mutex_lock+0x26c/0x1bd0 [ 1881.942356][T21930] netlink_rcv_skb+0x159/0x420 [ 1881.942374][T21930] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1881.942388][T21930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1881.942416][T21930] xfrm_netlink_rcv+0x71/0x90 [ 1881.942428][T21930] netlink_unicast+0x65f/0x950 [ 1881.942448][T21930] ? __pfx_netlink_unicast+0x10/0x10 [ 1881.942471][T21930] netlink_sendmsg+0x8b0/0xda0 [ 1881.942491][T21930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1881.942510][T21930] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1881.942537][T21930] ____sys_sendmsg+0xa4d/0xbe0 [ 1881.942551][T21930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1881.942571][T21930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1881.942592][T21930] ? plist_del+0x308/0x510 [ 1881.942607][T21930] ___sys_sendmsg+0x190/0x1e0 [ 1881.942624][T21930] ? __pfx____sys_sendmsg+0x10/0x10 [ 1881.942639][T21930] ? futex_wake+0x220/0x5e0 [ 1881.942659][T21930] ? find_held_lock+0x2b/0x80 [ 1881.942702][T21930] __sys_sendmsg+0x160/0x210 [ 1881.942717][T21930] ? __pfx___sys_sendmsg+0x10/0x10 [ 1881.942750][T21930] do_syscall_64+0x123/0x790 [ 1881.942780][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.942802][T21930] RIP: 0033:0x7f22b979e559 [ 1881.942819][T21930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1881.942840][T21930] RSP: 002b:00007f22ba657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1881.942861][T21930] RAX: ffffffffffffffda RBX: 00007f22b9a25fa0 RCX: 00007f22b979e559 [ 1881.942876][T21930] RDX: 0000000000000000 RSI: 0000200000010900 RDI: 0000000000000008 [ 1881.942888][T21930] RBP: 00007f22b98358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1881.942901][T21930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1881.942913][T21930] R13: 00007f22b9a26038 R14: 00007f22b9a25fa0 R15: 00007ffea52d2198 [ 1881.942943][T21930] [ 1882.092424][T21936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3761'. [ 1882.392780][T21930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21930 comm=syz.2.3761 [ 1882.480407][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1882.480425][ T31] audit: type=1400 audit(1792187631.978:7051): avc: denied { write } for pid=21909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1882.576336][T21949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21949 comm=syz.8.3763 [ 1882.577584][ T31] audit: type=1800 audit(1792187632.071:7052): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3763" name="bus" dev="tmpfs" ino=1586 res=0 errno=0 [ 1882.614059][ T31] audit: type=1800 audit(1792187632.109:7053): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3763" name="bus" dev="tmpfs" ino=1586 res=0 errno=0 [ 1882.614422][ T31] audit: type=1800 audit(1792187632.109:7054): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3763" name="bus" dev="tmpfs" ino=1586 res=0 errno=0 [ 1882.735988][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1882.761647][T21950] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3763'. [ 1882.878214][ T31] audit: type=1400 audit(1792187632.361:7055): avc: denied { write } for pid=21952 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1883.027915][T21965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3765'. [ 1883.163160][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1883.710593][T21953] vlan2: entered allmulticast mode [ 1883.711311][T21953] bridge1: entered allmulticast mode [ 1884.001160][T21954] bridge1: port 1(erspan0) entered blocking state [ 1884.001263][T21954] bridge1: port 1(erspan0) entered disabled state [ 1884.001424][T21954] erspan0: entered allmulticast mode [ 1884.004493][T21954] erspan0: entered promiscuous mode [ 1884.012162][T21954] bridge1: port 1(erspan0) entered blocking state [ 1884.012267][T21954] bridge1: port 1(erspan0) entered forwarding state [ 1884.057999][T21960] netlink: 'syz.9.3764': attribute type 1 has an invalid length. [ 1884.210928][T21973] FAULT_INJECTION: forcing a failure. [ 1884.210928][T21973] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1884.210956][T21973] CPU: 0 UID: 0 PID: 21973 Comm: syz.8.3767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1884.210974][T21973] Tainted: [L]=SOFTLOCKUP [ 1884.210978][T21973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1884.210986][T21973] Call Trace: [ 1884.210991][T21973] [ 1884.210996][T21973] dump_stack_lvl+0x100/0x190 [ 1884.211018][T21973] should_fail_ex.cold+0x5/0xa [ 1884.211036][T21973] get_futex_key+0x1d0/0x14f0 [ 1884.211054][T21973] ? __pfx_get_futex_key+0x10/0x10 [ 1884.211076][T21973] futex_wake+0xf4/0x5e0 [ 1884.211089][T21973] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1884.211115][T21973] ? __kasan_slab_alloc+0x89/0x90 [ 1884.211144][T21973] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1884.211166][T21973] ? __pfx_futex_wake+0x10/0x10 [ 1884.211190][T21973] ? __lock_acquire+0x5c0/0x1f40 [ 1884.211222][T21973] do_futex+0x2b2/0x440 [ 1884.211245][T21973] ? __pfx_do_futex+0x10/0x10 [ 1884.211262][T21973] ? find_held_lock+0x2b/0x80 [ 1884.211279][T21973] ? fd_install+0x223/0x580 [ 1884.211297][T21973] __x64_sys_futex+0x34f/0x4d0 [ 1884.211314][T21973] ? fd_install+0x252/0x580 [ 1884.211335][T21973] ? __pfx___x64_sys_futex+0x10/0x10 [ 1884.211375][T21973] do_syscall_64+0x123/0x790 [ 1884.211405][T21973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.211417][T21973] RIP: 0033:0x7fd14b99e559 [ 1884.211432][T21973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1884.211451][T21973] RSP: 002b:00007fd14c9530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1884.211470][T21973] RAX: ffffffffffffffda RBX: 00007fd14bc25fa8 RCX: 00007fd14b99e559 [ 1884.211484][T21973] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd14bc25fac [ 1884.211497][T21973] RBP: 00007fd14bc25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1884.211509][T21973] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1884.211521][T21973] R13: 00007fd14bc26038 R14: 00007ffdfbce7140 R15: 00007ffdfbce7228 [ 1884.211550][T21973] [ 1885.390339][ C1] net_ratelimit: 161 callbacks suppressed [ 1886.774484][T21981] cgroup: Invalid name [ 1887.205171][ T31] audit: type=1400 audit(1792187636.402:7056): avc: denied { write } for pid=21984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1887.481306][ T31] audit: type=1400 audit(1792187636.664:7057): avc: denied { wake_alarm } for pid=22000 comm="syz.8.3774" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1888.448762][ T31] audit: type=1400 audit(1792187642.573:7058): avc: denied { write } for pid=22015 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.504517][T22021] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1888.652144][T22017] x_tables: duplicate underflow at hook 1 [ 1888.658352][ T31] audit: type=1800 audit(1792187642.760:7059): pid=22022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3778" name="c_chmask" dev="configfs" ino=73110 res=0 errno=0 [ 1889.389190][ T31] audit: type=1800 audit(1792187643.386:7060): pid=22027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.3779" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1889.645391][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3779'. [ 1889.651596][T22026] ipvlan2: entered allmulticast mode [ 1889.651605][T22026] syz_tun: entered allmulticast mode [ 1890.623141][T22030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3780'. [ 1890.629429][T22030] ipvlan2: entered allmulticast mode [ 1890.656542][ T31] audit: type=1800 audit(1792187644.602:7061): pid=22030 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3780" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1890.853366][ C1] net_ratelimit: 91 callbacks suppressed [ 1891.685605][T22040] x_tables: duplicate underflow at hook 1 [ 1892.098913][ T31] audit: type=1400 audit(1792187645.977:7062): avc: denied { write } for pid=22041 comm="syz.2.3785" name="fs" dev="configfs" ino=69905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1892.103589][ T31] audit: type=1400 audit(1792187645.977:7063): avc: denied { write } for pid=22041 comm="syz.2.3785" name="fs" dev="configfs" ino=69905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1892.153924][ T31] audit: type=1400 audit(1792187646.034:7064): avc: denied { write } for pid=22041 comm="syz.2.3785" name="c.1" dev="configfs" ino=17465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1892.155145][ T31] audit: type=1400 audit(1792187646.034:7065): avc: denied { write } for pid=22041 comm="syz.2.3785" name="c.1" dev="configfs" ino=17465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1892.221748][ T31] audit: type=1400 audit(1792187646.090:7066): avc: denied { write } for pid=22041 comm="syz.2.3785" name="mjpeg" dev="configfs" ino=69900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1892.261890][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1892.311079][ T31] audit: type=1800 audit(1792187646.183:7067): pid=22042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3785" name="bmaControls" dev="configfs" ino=72208 res=0 errno=0 [ 1893.163388][T22051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3786'. [ 1895.139631][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1895.209511][T22069] binder: 22068:22069 ioctl c0306201 0 returned -14 [ 1895.277630][T22067] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1895.514453][ T5807] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1895.685452][ T5807] usb 10-1: Using ep0 maxpacket: 16 [ 1895.686328][ T5807] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1895.687686][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.687713][ T5807] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1895.687770][ T5807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.706771][ T31] audit: type=1800 audit(1792187649.354:7068): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=337762 res=0 errno=0 [ 1895.723235][ T5807] usb 10-1: config 0 descriptor?? [ 1895.784915][ T31] audit: type=1800 audit(1792187649.429:7069): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=337791 res=0 errno=0 [ 1895.786026][ T31] audit: type=1800 audit(1792187649.429:7070): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=337769 res=0 errno=0 [ 1895.790137][ T31] audit: type=1800 audit(1792187649.429:7071): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=337770 res=0 errno=0 [ 1895.791351][ T31] audit: type=1800 audit(1792187649.429:7072): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=337771 res=0 errno=0 [ 1895.918263][ T31] audit: type=1800 audit(1792187649.551:7073): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=337811 res=0 errno=0 [ 1896.361603][ T31] audit: type=1800 audit(1792187649.972:7074): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=337829 res=0 errno=0 [ 1896.362164][ T5807] microsoft 0003:045E:07DA.0029: unknown main item tag 0x5 [ 1896.362183][ T5807] microsoft 0003:045E:07DA.0029: item fetching failed at offset 26/34 [ 1896.362735][ T5807] microsoft 0003:045E:07DA.0029: parse failed [ 1896.362786][ T5807] microsoft 0003:045E:07DA.0029: probe with driver microsoft failed with error -22 [ 1896.446136][T22083] net_ratelimit: 87 callbacks suppressed [ 1897.071515][T22071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.071882][T22071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.060038][ T31] audit: type=1800 audit(1792187651.562:7075): pid=22097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3800" name="oops_count" dev="sysfs" ino=53301 res=0 errno=0 [ 1898.067204][T22096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3799'. [ 1899.157650][T19786] usb 10-1: USB disconnect, device number 7 [ 1899.434364][T22114] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1900.082613][T22112] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1900.678748][T14243] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1901.381363][ T31] audit: type=1800 audit(1792187654.658:7076): pid=22134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3811" name="compressor" dev="sysfs" ino=55445 res=0 errno=0 [ 1902.238785][ C0] net_ratelimit: 103 callbacks suppressed [ 1904.389784][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3821'. [ 1905.912622][ T31] audit: type=1326 audit(1792187658.905:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22175 comm="syz.2.3825" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22b979e559 code=0x0 [ 1905.966658][ T31] audit: type=1400 audit(1792187658.951:7078): avc: denied { accept } for pid=22175 comm="syz.2.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1906.114317][T22182] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1906.846550][T21086] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1906.932956][T22190] [ 1906.935294][T22190] ====================================================== [ 1906.942282][T22190] WARNING: possible circular locking dependency detected [ 1906.949274][T22190] syzkaller #0 Tainted: G L [ 1906.955220][T22190] ------------------------------------------------------ [ 1906.962205][T22190] syz.8.3827/22190 is trying to acquire lock: [ 1906.968238][T22190] ffffffff91d848c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1906.975972][T22190] [ 1906.975972][T22190] but task is already holding lock: [ 1906.983308][T22190] ffff8880728c8860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 1906.985671][ C0] dummy_udc dummy_udc.9: set_address = 8 [ 1906.985706][ C0] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1906.985726][ C0] kcov: kcov_start: t = ffff8880310d8000, size = 262144, area = ffffc900022a2000 [ 1906.985759][ C0] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 29 [ 1907.022593][T22190] [ 1907.022593][T22190] which lock already depends on the new lock. [ 1907.022593][T22190] [ 1907.032982][T22190] [ 1907.032982][T22190] the existing dependency chain (in reverse order) is: [ 1907.041968][T22190] [ 1907.041968][T22190] -> #5 (&pipe->mutex){+.+.}-{4:4}: [ 1907.049323][T22190] lock_acquire+0x1d1/0x380 [ 1907.054326][T22190] __mutex_lock+0x1a4/0x1bd0 [ 1907.059416][T22190] anon_pipe_prefill_and_lock+0x16c/0x580 [ 1907.065651][T22190] anon_pipe_write+0x164/0x1b50 [ 1907.071001][T22190] __kernel_write_iter+0x6bb/0x930 [ 1907.076609][T22190] __kernel_write+0xf6/0x140 [ 1907.081695][T22190] autofs_notify_daemon+0x50d/0xd90 [ 1907.087392][T22190] autofs_wait+0x10fd/0x1b50 [ 1907.092476][T22190] autofs_mount_wait+0x132/0x3b0 [ 1907.097911][T22190] autofs_d_automount+0x490/0x950 [ 1907.103426][T22190] __traverse_mounts+0x1b9/0x8a0 [ 1907.108872][T22190] step_into_slowpath+0xcb4/0x1150 [ 1907.114478][T22190] path_lookupat+0x58b/0xc40 [ 1907.119565][T22190] filename_lookup+0x202/0x590 [ 1907.124824][T22190] vfs_statx+0xff/0x3f0 [ 1907.129475][T22190] __do_sys_newlstat+0xaa/0x130 [ 1907.134819][T22190] do_syscall_64+0x123/0x790 [ 1907.139905][T22190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.146294][T22190] [ 1907.146294][T22190] -> #4 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1907.154013][T22190] lock_acquire+0x1d1/0x380 [ 1907.159013][T22190] __mutex_lock+0x1a4/0x1bd0 [ 1907.164100][T22190] autofs_notify_daemon+0x4f8/0xd90 [ 1907.169789][T22190] autofs_wait+0x10fd/0x1b50 [ 1907.174870][T22190] autofs_mount_wait+0x132/0x3b0 [ 1907.180298][T22190] autofs_d_automount+0x490/0x950 [ 1907.185815][T22190] __traverse_mounts+0x1b9/0x8a0 [ 1907.191262][T22190] step_into_slowpath+0xcb4/0x1150 [ 1907.196868][T22190] path_lookupat+0x58b/0xc40 [ 1907.201954][T22190] filename_lookup+0x202/0x590 [ 1907.207212][T22190] kern_path+0x37/0x50 [ 1907.211774][T22190] lookup_bdev+0xd8/0x2a0 [ 1907.216612][T22190] resume_store+0x1d6/0x460 [ 1907.221623][T22190] kobj_attr_store+0x58/0x80 [ 1907.226720][T22190] sysfs_kf_write+0xf2/0x150 [ 1907.231809][T22190] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1907.237589][T22190] vfs_write+0x6af/0x1050 [ 1907.242412][T22190] ksys_write+0x12a/0x250 [ 1907.247234][T22190] do_syscall_64+0x123/0x790 [ 1907.252319][T22190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.258703][T22190] [ 1907.258703][T22190] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1907.265879][T22190] lock_acquire+0x1d1/0x380 [ 1907.270876][T22190] __mutex_lock+0x1a4/0x1bd0 [ 1907.275963][T22190] kernfs_seq_start+0x4f/0x2a0 [ 1907.281221][T22190] seq_read_iter+0x2c1/0x1270 [ 1907.286392][T22190] kernfs_fop_read_iter+0x46c/0x610 [ 1907.292087][T22190] copy_splice_read+0x4ba/0xbb0 [ 1907.297450][T22190] do_splice_read+0x285/0x370 [ 1907.302625][T22190] splice_direct_to_actor+0x2a1/0xa30 [ 1907.308511][T22190] do_splice_direct+0x174/0x240 [ 1907.313860][T22190] do_sendfile+0xadc/0xe20 [ 1907.318769][T22190] __x64_sys_sendfile64+0x1d8/0x220 [ 1907.324466][T22190] do_syscall_64+0x123/0x790 [ 1907.329556][T22190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.335941][T22190] [ 1907.335941][T22190] -> #2 (&p->lock){+.+.}-{4:4}: [ 1907.342941][T22190] lock_acquire+0x1d1/0x380 [ 1907.347938][T22190] __mutex_lock+0x1a4/0x1bd0 [ 1907.353023][T22190] seq_read_iter+0xe1/0x1270 [ 1907.358124][T22190] kernfs_fop_read_iter+0x46c/0x610 [ 1907.363816][T22190] __kernel_read+0x397/0xad0 [ 1907.368901][T22190] integrity_kernel_read+0x7e/0xb0 [ 1907.374511][T22190] ima_calc_file_hash_tfm+0x25e/0x350 [ 1907.380395][T22190] ima_calc_file_hash+0x1e3/0x380 [ 1907.385934][T22190] ima_collect_measurement+0x94f/0xb30 [ 1907.391898][T22190] process_measurement+0xdfe/0x2350 [ 1907.397597][T22190] ima_file_check+0xc3/0x110 [ 1907.402685][T22190] security_file_post_open+0xc4/0x210 [ 1907.408571][T22190] path_openat+0x5cd/0x2440 [ 1907.413575][T22190] do_file_open+0x20e/0x430 [ 1907.418575][T22190] do_sys_openat2+0x10f/0x1e0 [ 1907.423748][T22190] __x64_sys_openat+0x12d/0x210 [ 1907.429107][T22190] do_syscall_64+0x123/0x790 [ 1907.434194][T22190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.440579][T22190] [ 1907.440579][T22190] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1907.449146][T22190] lock_acquire+0x1d1/0x380 [ 1907.454145][T22190] __mutex_lock+0x1a4/0x1bd0 [ 1907.459234][T22190] process_measurement+0x5ab/0x2350 [ 1907.464948][T22190] ima_file_check+0xc3/0x110 [ 1907.466392][ C0] wireguard: wg1: Handshake for peer 76 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7) [ 1907.481557][T22190] security_file_post_open+0xc4/0x210 [ 1907.487431][T22190] path_openat+0x5cd/0x2440 [ 1907.492431][T22190] do_file_open+0x20e/0x430 [ 1907.497431][T22190] file_open_name+0x1c3/0x3e0 [ 1907.502621][T22190] filp_open+0x2e/0x50 [ 1907.507183][T22190] kernel_read_file_from_path_initns+0xec/0x240 [ 1907.513922][T22190] _request_firmware+0x733/0x13c0 [ 1907.519445][T22190] request_firmware+0x35/0x50 [ 1907.524632][T22190] reg_reload_regdb+0x85/0x460 [ 1907.529893][T22190] genl_family_rcv_msg_doit+0x214/0x300 [ 1907.535931][T22190] genl_rcv_msg+0x560/0x800 [ 1907.540930][T22190] netlink_rcv_skb+0x159/0x420 [ 1907.546190][T22190] genl_rcv+0x28/0x40 [ 1907.550677][T22190] netlink_unicast+0x65f/0x950 [ 1907.555938][T22190] netlink_sendmsg+0x8b0/0xda0 [ 1907.561213][T22190] ____sys_sendmsg+0xa4d/0xbe0 [ 1907.566476][T22190] ___sys_sendmsg+0x190/0x1e0 [ 1907.571650][T22190] __sys_sendmsg+0x160/0x210 [ 1907.576732][T22190] do_syscall_64+0x123/0x790 [ 1907.581825][T22190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.588213][T22190] [ 1907.588213][T22190] -> #0 (cb_lock){++++}-{4:4}: [ 1907.595150][T22190] check_prev_add+0xeb/0xe60 [ 1907.600236][T22190] __lock_acquire+0x1528/0x1f40 [ 1907.605579][T22190] lock_acquire+0x1d1/0x380 [ 1907.610573][T22190] down_read+0x99/0x4c0 [ 1907.615221][T22190] genl_rcv+0x19/0x40 [ 1907.619694][T22190] netlink_unicast+0x65f/0x950 [ 1907.624959][T22190] netlink_sendmsg+0x8b0/0xda0 [ 1907.630421][T22190] sock_sendmsg+0x394/0x410 [ 1907.635429][T22190] splice_to_socket+0xb3c/0x11a0 [ 1907.640863][T22190] do_splice+0x109c/0x1fa0 [ 1907.645780][T22190] __do_splice+0x33b/0x370 [ 1907.650691][T22190] __x64_sys_splice+0x187/0x250 [ 1907.656037][T22190] do_syscall_64+0x123/0x790 [ 1907.661129][T22190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.667517][T22190] [ 1907.667517][T22190] other info that might help us debug this: [ 1907.667517][T22190] [ 1907.677729][T22190] Chain exists of: [ 1907.677729][T22190] cb_lock --> &sbi->pipe_mutex --> &pipe->mutex [ 1907.677729][T22190] [ 1907.689863][T22190] Possible unsafe locking scenario: [ 1907.689863][T22190] [ 1907.697293][T22190] CPU0 CPU1 [ 1907.702635][T22190] ---- ---- [ 1907.707977][T22190] lock(&pipe->mutex); [ 1907.712117][T22190] lock(&sbi->pipe_mutex); [ 1907.719135][T22190] lock(&pipe->mutex); [ 1907.725960][T22190] rlock(cb_lock); [ 1907.729743][T22190] [ 1907.729743][T22190] *** DEADLOCK *** [ 1907.729743][T22190] [ 1907.737869][T22190] locks held by syz.8.3827/22190: 1, last CPU#1: [ 1907.744171][T22190] #0: ffff8880728c8860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 1907.752857][T22190] [ 1907.752857][T22190] stack backtrace: [ 1907.758720][T22190] CPU: 1 UID: 0 PID: 22190 Comm: syz.8.3827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1907.769626][T22190] Tainted: [L]=SOFTLOCKUP [ 1907.773921][T22190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1907.783949][T22190] Call Trace: [ 1907.787207][T22190] [ 1907.790135][T22190] dump_stack_lvl+0x100/0x190 [ 1907.794793][T22190] print_circular_bug.cold+0x178/0x1be [ 1907.800232][T22190] check_noncircular+0x146/0x160 [ 1907.805169][T22190] ? netlink_alloc_large_skb+0x69/0x150 [ 1907.810699][T22190] check_prev_add+0xeb/0xe60 [ 1907.815266][T22190] __lock_acquire+0x1528/0x1f40 [ 1907.820096][T22190] lock_acquire+0x1d1/0x380 [ 1907.824574][T22190] ? genl_rcv+0x19/0x40 [ 1907.828703][T22190] ? __pfx___might_resched+0x10/0x10 [ 1907.833961][T22190] ? netlink_deliver_tap+0x103/0xcc0 [ 1907.839229][T22190] down_read+0x99/0x4c0 [ 1907.843370][T22190] ? genl_rcv+0x19/0x40 [ 1907.847499][T22190] ? __pfx_down_read+0x10/0x10 [ 1907.852241][T22190] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1907.857507][T22190] genl_rcv+0x19/0x40 [ 1907.861462][T22190] netlink_unicast+0x65f/0x950 [ 1907.866206][T22190] ? __pfx_netlink_unicast+0x10/0x10 [ 1907.871484][T22190] netlink_sendmsg+0x8b0/0xda0 [ 1907.876227][T22190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1907.881489][T22190] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1907.887018][T22190] sock_sendmsg+0x394/0x410 [ 1907.891508][T22190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1907.896771][T22190] ? __pfx_sock_sendmsg+0x10/0x10 [ 1907.901793][T22190] ? avc_has_perm_noaudit+0x56/0x470 [ 1907.907066][T22190] splice_to_socket+0xb3c/0x11a0 [ 1907.911981][T22190] ? __pfx_splice_to_socket+0x10/0x10 [ 1907.917326][T22190] ? inode_has_perm.isra.0+0x14a/0x1a0 [ 1907.922770][T22190] ? bpf_lsm_file_permission+0x9/0x10 [ 1907.928465][T22190] ? security_file_permission+0x76/0x210 [ 1907.934075][T22190] ? __pfx_splice_to_socket+0x10/0x10 [ 1907.939420][T22190] do_splice+0x109c/0x1fa0 [ 1907.943807][T22190] ? __lock_acquire+0x5c0/0x1f40 [ 1907.948723][T22190] ? ksys_write+0x190/0x250 [ 1907.953215][T22190] ? __pfx_do_splice+0x10/0x10 [ 1907.957951][T22190] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1907.963399][T22190] ? __fget_files+0x34/0x3d0 [ 1907.967966][T22190] ? find_held_lock+0x2b/0x80 [ 1907.972622][T22190] __do_splice+0x33b/0x370 [ 1907.977015][T22190] ? __pfx___do_splice+0x10/0x10 [ 1907.981924][T22190] __x64_sys_splice+0x187/0x250 [ 1907.986746][T22190] do_syscall_64+0x123/0x790 [ 1907.991315][T22190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.997181][T22190] RIP: 0033:0x7fd14b99e559 [ 1908.001570][T22190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1908.021150][T22190] RSP: 002b:00007fd14c953028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1908.029540][T22190] RAX: ffffffffffffffda RBX: 00007fd14bc25fa0 RCX: 00007fd14b99e559 [ 1908.037486][T22190] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 1908.045434][T22190] RBP: 00007fd14ba358b0 R08: 0000000000000800 R09: 0000000000000000 [ 1908.053389][T22190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1908.061334][T22190] R13: 00007fd14bc26038 R14: 00007fd14bc25fa0 R15: 00007ffdfbce7228 [ 1908.069291][T22190] [ 1908.072399][ C1] virtqueue callback for ffff888021b2b600 (ffffffff86ed9870) [ 1908.072792][ C1] net_ratelimit: 127 callbacks suppressed [ 1908.072801][ C1] wireguard: wg0: Sending keepalive packet to peer 85 ([::1]:20002/0%0) [ 1908.072875][ C1] wireguard: wg0: Sending keepalive packet to peer 79 (127.0.0.1:20002) [ 1908.073142][ C1] No more buffers in queue [ 1908.073169][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1908.073193][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1908.073214][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1908.073234][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1908.073244][ C1] No more buffers in queue [ 1908.073392][ C1] eth0: xmit ffff88807c5753c0 42:01:0a:80:00:01 [ 1908.073410][ C1] Added buffer head 23 to ffff888029514e00 [ 1908.073441][ C1] virtqueue callback for ffff888029514e00 (ffffffff86ee2790) [ 1908.073485][ C1] eth0: xmit ffff88807d5e3640 42:01:0a:80:00:01 [ 1908.073498][ C1] Added buffer head 22 to ffff888029514e00 [ 1908.073555][ C1] eth0: xmit ffff888079bd48c0 42:01:0a:80:00:01 [ 1908.073568][ C1] Added buffer head 13 to ffff888029514e00 [ 1908.073583][ C1] Sent skb ffff88807c5753c0 [ 1908.073603][ C1] Sent skb ffff88807d5e3640 [ 1908.073619][ C1] Sent skb ffff888079bd48c0 [ 1908.073634][ C1] No more buffers in queue [ 1908.073953][T22182] kcov: kcov_task_exit: t = ffff88803aed4b00, kcov->t = ffff88803aed4b00 [ 1908.074014][T22183] kcov: kcov_task_exit: t = ffff88802ab4a580, kcov->t = ffff88802ab4a580 [ 1908.074069][ C1] virtqueue interrupt with no work for ffff888029514e00 [ 1908.074329][T22182] sctp: sctp_close: sk:ffff888053b5ca00, timeout:0 [ 1908.074350][T22182] sctp: sctp_destroy_sock: sk:ffff888053b5ca00 [ 1908.080923][T13337] sd 0:0:1:0: cmd ffff88802f0df890 CDB: 0x2a [ 1908.080950][T13337] Added buffer head 442 to ffff888028379a00 [ 1908.080971][T13337] sd 0:0:1:0: cmd ffff88802f0dfc50 CDB: 0x2a [ 1908.080990][T13337] Added buffer head 380 to ffff888028379a00 [ 1908.081033][T13337] sd 0:0:1:0: cmd ffff88802f0e0110 CDB: 0x2a [ 1908.081058][T13337] Added buffer head 99 to ffff888028379a00 [ 1908.081091][T13337] sd 0:0:1:0: cmd ffff88802f0e04d0 CDB: 0x2a [ 1908.081111][T13337] Added buffer head 102 to ffff888028379a00 [ 1908.081772][T13337] wireguard: wg1: Sending handshake initiation to peer 76 (127.0.0.1:20003) [ 1908.082021][T13337] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 1908.084245][T13337] rxe0: qp#16 rxe_completer: state = GET ACK [ 1908.084264][T13337] rxe0: qp#16 rxe_completer: state = GET WQE [ 1908.084277][T13337] rxe0: qp#16 rxe_completer: state = COMP WQE [ 1908.084326][T13337] rxe0: qp#16 rxe_completer: state = GET WQE [ 1908.084340][T13337] rxe0: qp#16 rxe_completer: state = EXIT [ 1908.084354][T13337] rxe0: qp#16 rxe_completer: state = GET ACK [ 1908.084368][T13337] rxe0: qp#16 rxe_completer: state = GET WQE [ 1908.084382][T13337] rxe0: qp#16 rxe_completer: state = EXIT [ 1908.084446][T13337] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 1908.084462][T13337] rxe0: qp#16 rxe_receiver: state = CHK_PSN [ 1908.084475][T13337] rxe0: qp#16 rxe_receiver: state = CHK_OP_SEQ [ 1908.084489][T13337] rxe0: qp#16 rxe_receiver: state = CHK_OP_VALID [ 1908.084503][T13337] rxe0: qp#16 rxe_receiver: state = CHK_RESOURCE [ 1908.084518][T13337] rxe0: qp#16 rxe_receiver: state = CHK_LENGTH [ 1908.084533][T13337] rxe0: qp#16 rxe_receiver: state = EXECUTE [ 1908.084549][T13337] rxe0: qp#16 rxe_receiver: state = COMPLETE [ 1908.084565][T13337] rxe0: qp#16 rxe_receiver: state = CLEANUP [ 1908.084599][T13337] rxe0: qp#16 rxe_receiver: state = DONE [ 1908.084613][T13337] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 1908.084627][T13337] rxe0: qp#16 rxe_receiver: state = EXIT [ 1908.085205][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1908.085228][ C1] sd 0:0:1:0: cmd ffff88802f0dfc50 response 0 status 0x0 sense_len 0 [ 1908.085253][ C1] No more buffers in queue [ 1908.092563][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1908.092580][ C1] sd 0:0:1:0: cmd ffff88802f0df890 response 0 status 0x0 sense_len 0 [ 1908.092594][ C1] No more buffers in queue [ 1908.096120][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1908.096134][ C1] sd 0:0:1:0: cmd ffff88802f0e04d0 response 0 status 0x0 sense_len 0 [ 1908.096146][ C1] No more buffers in queue [ 1908.111488][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1908.111513][ C1] sd 0:0:1:0: cmd ffff88802f0e0110 response 0 status 0x0 sense_len 0 [ 1908.111535][ C1] No more buffers in queue [ 1908.115277][T20837] wireguard: wg1: Receiving keepalive packet from peer 87 ([::1]:20001/0%0) [ 1908.129846][ C0] wireguard: wg0: Sending keepalive packet to peer 86 ([::1]:20003/0%0) [ 1908.131205][T20839] wireguard: wg2: Receiving keepalive packet from peer 89 ([::1]:20001/0%0) [ 1908.131794][ T5590] eth0: xmit ffff8880597c0d70 42:01:0a:80:00:01 [ 1908.131819][ T5590] Added buffer head 13 to ffff888029514e00 [ 1908.131865][ C1] virtqueue callback for ffff888029514e00 (ffffffff86ee2790) [ 1908.131887][ C1] Sent skb ffff8880597c0d70 [ 1908.131903][ C1] No more buffers in queue [ 1908.132027][ C1] virtqueue callback for ffff888021b2b600 (ffffffff86ed9870) [ 1908.132046][ C1] No more buffers in queue [ 1908.132088][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 1908.132111][ C1] No more buffers in queue [ 1908.163525][ T4935] sd 0:0:1:0: cmd ffff88802f0d5750 CDB: 0x2a [ 1908.163554][ T4935] Added buffer head 99 to ffff888028379a00 [ 1908.167388][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1908.167411][ C1] sd 0:0:1:0: cmd ffff88802f0d5750 response 0 status 0x0 sense_len 0 [ 1908.167432][ C1] No more buffers in queue [ 1908.168031][ T2037] sd 0:0:1:0: cmd ffff888023f9c110 CDB: 0x35 [ 1908.168053][ T2037] Added buffer head 99 to ffff888028379a00 [ 1908.168109][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1908.168127][ C1] sd 0:0:1:0: cmd ffff888023f9c110 response 0 status 0x0 sense_len 0 [ 1908.168147][ C1] No more buffers in queue [ 1908.168206][ T2037] sd 0:0:1:0: cmd ffff88802f0d5b10 CDB: 0x2a [ 1908.168225][ T2037] Added buffer head 99 to ffff888028379a00 [ 1908.210002][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1908.210027][ C1] sd 0:0:1:0: cmd ffff88802f0d5b10 response 0 status 0x0 sense_len 0 [ 1908.210049][ C1] No more buffers in queue [ 1908.224070][ C0] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1908.224094][ C0] kcov: kcov_start: t = ffff88801fed0000, size = 262144, area = ffffc900022a2000 [ 1908.224132][ C0] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 86 [ 1908.228724][T21086] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1908.241614][ C0] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1908.241639][ C0] kcov: kcov_start: t = ffff88801fed0000, size = 262144, area = ffffc900022a2000 [ 1908.241676][ C0] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 127 [ 1908.300371][T14243] hci3: end: err -110 [ 1908.300391][T14243] hci3: status 0x13 [ 1908.300426][T14243] channel 3 len 14 [ 1908.300455][T14243] hcon ffff888054f5c000 bdaddr 10:aa:aa:aa:aa:aa status 19 [ 1908.300474][T14243] hcon ffff888054f5c000 conn ffff8880586ce000, err 104 [ 1908.300499][T14243] hci3 hcon ffff888054f5c000 chan ffff88805a1fb700 [ 1908.305736][T20646] Bluetooth: hci3: command 0x0406 tx timeout [ 1908.305746][T20646] hci3: err 0x6e [ 1908.305758][T20646] hci3 cmd_cnt 1 cmd queued 0 [ 1908.344500][T22191] kcov: kcov_start: t = ffff88803605cb00, size = 524288, area = ffffc90012400000 [ 1908.345341][ C0] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1908.345367][ C0] kcov: kcov_start: t = ffff88801fed0000, size = 262144, area = ffffc900022a2000 [ 1908.345414][ C0] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 129 [ 1908.345484][T21086] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.345520][T21086] usb 10-1: udev 8, busnum 10, minor = 1159 [ 1908.345542][T21086] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.345569][T21086] device: '10-1': device_add [ 1908.345583][T21086] kobject: '10-1' (ffff88807d8960b0): kobject_add_internal: parent: 'usb10', set: 'devices' [ 1908.345651][T21086] usb 10-1: ACPI companion not found [ 1908.345665][T21086] usb 10-1: No ACPI support [ 1908.346039][T21086] bus: 'usb': add device 10-1 [ 1908.346149][T21086] PM: Adding info for usb:10-1 [ 1908.366001][T14243] hci3 hcon ffff888054f5c000 handle 200 [ 1908.366021][T14243] hci3: hcon ffff888054f5c000 [ 1908.370529][T21086] kobject: '10-1' (ffff88807d8960b0): kobject_uevent_env [ 1908.370570][T21086] kobject: '10-1' (ffff88807d8960b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.9/usb10/10-1' [ 1908.370947][T21086] usb 10-1: bus: 'usb': __driver_probe_device: matched device with driver usb [ 1908.370975][T21086] usb 10-1: bus: 'usb': really_probe: probing driver usb with device [ 1908.371041][T21086] usb 10-1: usb_probe_device [ 1908.371059][T21086] usb 10-1: configuration #4 chosen from 1 choice [ 1908.378099][ C0] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1908.378122][ C0] kcov: kcov_start: t = ffff88801fed0000, size = 262144, area = ffffc900022a2000 [ 1908.378159][ C0] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 129 [ 1908.388248][T14243] hcon ffff888054f5c000 [ 1908.388264][T14243] hci3: conn ffff888054f5c000 [ 1908.388278][T14243] device: 'hci3:200': device_unregister [ 1908.388303][T14243] kernfs runtime_status: removing [ 1908.388339][T14243] kernfs control: removing [ 1908.388361][T14243] kernfs runtime_suspended_time: removing [ 1908.388383][T14243] kernfs runtime_active_time: removing [ 1908.388405][T14243] kernfs autosuspend_delay_ms: removing [ 1908.388438][T14243] kernfs power: removing [ 1908.388469][T14243] kernfs device: removing [ 1908.388490][T14243] kernfs subsystem: removing [ 1908.388512][T14243] kernfs hci3:200: removing [ 1908.388534][T14243] kernfs uevent: removing [ 1908.388552][T14243] PM: Removing info for No Bus:hci3:200 [ 1908.388570][T14243] kobject: 'hci3:200' (ffff888054f5ccf0): kobject_uevent_env [ 1908.388605][T14243] kobject: 'hci3:200' (ffff888054f5ccf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:200' [ 1908.388699][T14243] kernfs hci3:200: removing [ 1908.388716][T14243] hci3 orig refcnt 12 [ 1908.388729][T14243] kobject: 'hci3:200' (ffff888054f5ccf0): kobject_cleanup, parent 0000000000000000 [ 1908.388745][T14243] kobject: 'hci3:200' (ffff888054f5ccf0): calling ktype release [ 1908.388772][T14243] kobject: 'hci3:200': free name [ 1908.390011][ T31] audit: type=1800 audit(1792187661.224:7079): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338049 res=0 errno=0 [ 1908.401691][T22193] kcov: kcov_start: t = ffff88802b662580, size = 524288, area = ffffc900221d8000 [ 1908.402296][ T31] audit: type=1800 audit(1792187661.234:7080): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=338078 res=0 errno=0 [ 1908.402335][ T31] audit: type=1800 audit(1792187661.234:7081): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=338056 res=0 errno=0 [ 1908.408805][T21086] usb 10-1: adding 10-1:4.0 (config #4, interface 0) [ 1908.408829][T21086] device: '10-1:4.0': device_add [ 1908.408839][T21086] kobject: '10-1:4.0' (ffff888053ff1078): kobject_add_internal: parent: '10-1', set: 'devices' [ 1908.408882][T21086] usb 10-1:4.0: No ACPI support [ 1908.408975][T21086] bus: 'usb': add device 10-1:4.0 [ 1908.409016][T21086] PM: Adding info for usb:10-1:4.0 [ 1908.409028][T21086] kobject: '10-1:4.0' (ffff888053ff1078): kobject_uevent_env [ 1908.409051][T21086] kobject: '10-1:4.0' (ffff888053ff1078): fill_kobj_path: path = '/devices/platform/dummy_hcd.9/usb10/10-1/10-1:4.0' [ 1908.409444][T21086] usb 10-1:4.0: bus: 'usb': __driver_probe_device: matched device with driver usbtest [ 1908.409462][T21086] usb 10-1:4.0: bus: 'usb': really_probe: probing driver usbtest with device [ 1908.409524][T21086] usbtest 10-1:4.0: usb_probe_interface [ 1908.418128][ T31] audit: type=1800 audit(1792187661.243:7082): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=338057 res=0 errno=0 [ 1908.418165][ T31] audit: type=1800 audit(1792187661.243:7083): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=338058 res=0 errno=0 [ 1908.445497][T21086] usbtest 10-1:4.0: usb_probe_interface - got id [ 1908.445521][T21086] usbtest 10-1:4.0: probe with driver usbtest rejects match -19 [ 1908.445536][T21086] kernfs 10-1:4.0: removing [ 1908.445563][T21086] kernfs driver: removing [ 1908.445744][T21086] usb 10-1:4.0: bus: 'usb': __driver_probe_device: matched device with driver stv0680 [ 1908.445759][T21086] usb 10-1:4.0: bus: 'usb': really_probe: probing driver stv0680 with device [ 1908.445813][T21086] stv0680 10-1:4.0: usb_probe_interface [ 1908.445823][T21086] stv0680 10-1:4.0: usb_probe_interface - got id [ 1908.445834][T21086] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1908.496653][T22193] bus: 'gadget': add driver raw-gadget.1 [ 1908.496687][T22193] kobject: 'raw-gadget.1' (ffff88805bbc7600): kobject_add_internal: parent: 'drivers', set: 'drivers' [ 1908.496828][T22193] gadget gadget.0: bus: 'gadget': __driver_probe_device: matched device with driver raw-gadget.1 [ 1908.496857][T22193] gadget gadget.0: bus: 'gadget': really_probe: probing driver raw-gadget.1 with device [ 1908.496917][T22193] udc dummy_udc.0: binding gadget driver [USB Raw Gadget] [ 1908.496949][T22193] raw-gadget.1 gadget.0: gadget connected [ 1908.496975][T22193] dummy_hcd dummy_hcd.0: port status 0x00010101 has changes [ 1908.497025][T12604] usb usb1: usb wakeup-resume [ 1908.497045][T12604] usb usb1: usb auto-resume [ 1908.497060][T12604] usb usb1: dummy_bus_resume [ 1908.497078][T12604] hub 1-0:1.0: hub_resume [ 1908.497123][T12604] dummy_hcd dummy_hcd.0: port status 0x00010101 has changes [ 1908.497179][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.497201][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.497231][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 27 [ 1908.497287][T12604] usb usb1-port1: status 0101 change 0001 [ 1908.497354][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.497375][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.497402][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 27 [ 1908.498069][T22195] kcov: kcov_start: t = ffff88801e36cb00, size = 524288, area = ffffc900108cf000 [ 1908.500172][T22193] kobject: 'dummy_udc.0' (ffff88802ca9a018): kobject_uevent_env [ 1908.500212][T22193] kobject: 'dummy_udc.0' (ffff88802ca9a018): fill_kobj_path: path = '/devices/platform/dummy_udc.0/udc/dummy_udc.0' [ 1908.502642][T22193] raw-gadget.1 gadget.0: driver: 'raw-gadget.1': driver_bound: bound to device [ 1908.504233][T22193] kobject: 'gadget.0' (ffff888029878cd8): kobject_uevent_env [ 1908.504270][T22193] kobject: 'gadget.0' (ffff888029878cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.0/gadget.0' [ 1908.504369][T22193] raw-gadget.1 gadget.0: bus: 'gadget': really_probe: bound device to driver raw-gadget.1 [ 1908.504634][T22193] kobject: 'raw-gadget.1' (ffff88805bbc7600): kobject_uevent_env [ 1908.504663][T22193] kobject: 'raw-gadget.1' (ffff88805bbc7600): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.1' [ 1908.592814][T22195] kcov: kcov_task_exit: t = ffff88801e36cb00, kcov->t = ffff88801e36cb00 [ 1908.610401][T12604] kcov: kcov_remote_start: handle = 100000000000001, context: task [ 1908.610425][T12604] kcov: kcov_start: t = ffff88807d592580, size = 1048576, area = ffffc9001c402000 [ 1908.610447][T12604] hub 1-0:1.0: state 7 ports 1 chg 0002 evt 0000 [ 1908.610539][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.610561][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.610592][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 27 [ 1908.610657][T12604] usb usb1-port1: status 0101, change 0000, 12 Mb/s [ 1908.610741][T12604] raw-gadget.1 gadget.0: gadget reset [ 1908.610834][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.610854][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.610882][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 27 [ 1908.614874][T22189] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 994 [ 1908.614925][T19786] nfc: nfc_urelease_event_work: portid 994 [ 1908.615444][T22190] kcov: kcov_task_exit: t = ffff8880308d0000, kcov->t = ffff8880308d0000 [ 1908.629193][T22191] kcov: kcov_task_exit: t = ffff88803605cb00, kcov->t = ffff88803605cb00 [ 1908.638931][ T31] audit: type=1800 audit(1792187661.449:7084): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338098 res=0 errno=0 [ 1908.685213][T12604] raw-gadget.1 gadget.0: gadget resumed [ 1908.685252][T12604] dummy_hcd dummy_hcd.0: port status 0x00100503 has changes [ 1908.685334][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.685357][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.685405][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 190 [ 1908.685438][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.685458][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.685486][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 27 [ 1908.685582][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.685602][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.685630][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 27 [ 1908.749322][T12604] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1908.749716][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.749739][ C1] kcov: kcov_start: t = ffff88802defcb00, size = 262144, area = ffffc900022a2000 [ 1908.749772][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 34 [ 1908.749861][T12604] raw-gadget.1 gadget.0: gadget reset [ 1908.749952][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.749972][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.750015][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 66 [ 1908.816250][ C0] wireguard: wg2: Handshake for peer 53 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 7) [ 1908.816339][ C0] wireguard: wg2: Handshake for peer 78 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3) [ 1908.816385][ C0] wireguard: wg0: Handshake for peer 74 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1908.818091][ T758] wireguard: wg2: Sending handshake initiation to peer 53 ([::1]:20001/0%0) [ 1908.818336][ T758] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 1908.818535][ T758] wireguard: wg2: Sending handshake initiation to peer 78 (127.0.0.1:20002) [ 1908.824232][T12604] raw-gadget.1 gadget.0: gadget resumed [ 1908.824277][T12604] dummy_hcd dummy_hcd.0: port status 0x00100503 has changes [ 1908.824347][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.824369][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.824399][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 73 [ 1908.824431][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.824450][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.824487][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 64 [ 1908.824863][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.824883][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1908.824912][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 27 [ 1908.888831][ C1] dummy_udc dummy_udc.0: set_address = 126 [ 1908.888868][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.888890][ C1] kcov: kcov_start: t = ffff888020684b00, size = 262144, area = ffffc900022a2000 [ 1908.888921][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 24 [ 1908.910125][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.910152][ C1] kcov: kcov_start: t = ffff88802defcb00, size = 262144, area = ffffc900022a2000 [ 1908.910186][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 34 [ 1908.910347][T12604] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1908.910743][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.910763][ C1] kcov: kcov_start: t = ffff8880296c8000, size = 262144, area = ffffc900022a2000 [ 1908.910793][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 34 [ 1908.911195][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.911216][ C1] kcov: kcov_start: t = ffff88802defcb00, size = 262144, area = ffffc900022a2000 [ 1908.911247][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 34 [ 1908.911327][T12604] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1908.911362][T12604] usb 1-1: udev 126, busnum 1, minor = 125 [ 1908.911382][T12604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.911406][T12604] device: '1-1': device_add [ 1908.911420][T12604] kobject: '1-1' (ffff88802f0cd0b0): kobject_add_internal: parent: 'usb1', set: 'devices' [ 1908.911477][T12604] usb 1-1: ACPI companion not found [ 1908.911491][T12604] usb 1-1: No ACPI support [ 1908.911839][T12604] bus: 'usb': add device 1-1 [ 1908.911947][T12604] PM: Adding info for usb:1-1 [ 1908.912287][T12604] kobject: '1-1' (ffff88802f0cd0b0): kobject_uevent_env [ 1908.912319][T12604] kobject: '1-1' (ffff88802f0cd0b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1' [ 1908.912673][T12604] usb 1-1: bus: 'usb': __driver_probe_device: matched device with driver usb [ 1908.912698][T12604] usb 1-1: bus: 'usb': really_probe: probing driver usb with device [ 1908.912756][T12604] usb 1-1: usb_probe_device [ 1908.912772][T12604] usb 1-1: configuration #1 chosen from 1 choice [ 1908.913278][T22193] dummy_udc dummy_udc.0: enabled ep-bin (ep1in-bulk) maxpacket 512 stream disabled [ 1908.913382][T22193] dummy_udc dummy_udc.0: enabled ep2out-bulk (ep2out-bulk) maxpacket 512 stream disabled [ 1908.913479][T22193] dummy_udc dummy_udc.0: enabled ep-ein (ep3in-intr) maxpacket 64 stream disabled [ 1908.913626][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1908.913647][ C1] kcov: kcov_start: t = ffff88807cfd8000, size = 262144, area = ffffc900022a2000 [ 1908.913677][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 27 [ 1908.917136][ T31] audit: type=1800 audit(1792187661.711:7085): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338124 res=0 errno=0 [ 1908.917220][T12604] usb 1-1: adding 1-1:1.0 (config #1, interface 0) [ 1908.917247][T12604] device: '1-1:1.0': device_add [ 1908.917269][T12604] kobject: '1-1:1.0' (ffff88803cf7e078): kobject_add_internal: parent: '1-1', set: 'devices' [ 1908.917326][T12604] usb 1-1:1.0: No ACPI support [ 1908.917502][T12604] bus: 'usb': add device 1-1:1.0 [ 1908.917584][T12604] PM: Adding info for usb:1-1:1.0 [ 1908.917600][T12604] kobject: '1-1:1.0' (ffff88803cf7e078): kobject_uevent_env [ 1908.917634][T12604] kobject: '1-1:1.0' (ffff88803cf7e078): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 1908.920201][T12604] usb 1-1:1.0: bus: 'usb': __driver_probe_device: matched device with driver qmi_wwan [ 1908.920229][T12604] usb 1-1:1.0: bus: 'usb': really_probe: probing driver qmi_wwan with device [ 1908.945672][ T31] audit: type=1800 audit(1792187661.739:7086): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=338153 res=0 errno=0 [ 1908.945767][T12604] qmi_wwan 1-1:1.0: usb_probe_interface [ 1908.945789][T12604] qmi_wwan 1-1:1.0: usb_probe_interface - got id [ 1908.945846][T12604] debugfs: creating file 'netdev@ffff88802eab8700' [ 1908.948304][ T31] audit: type=1800 audit(1792187661.739:7087): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=338131 res=0 errno=0 [ 1908.981324][ T31] audit: type=1800 audit(1792187661.767:7088): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=338132 res=0 errno=0 [ 1909.028912][T22197] kcov: kcov_start: t = ffff88803282a580, size = 524288, area = ffffc9000eb3b000 [ 1909.365268][T22193] bus: 'gadget': add driver raw-gadget.2 [ 1909.365310][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): kobject_add_internal: parent: 'drivers', set: 'drivers' [ 1909.365689][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): kobject_uevent_env [ 1909.365717][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.2' [ 1909.367040][T22193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.367076][T22193] bus: 'gadget': remove driver raw-gadget.2 [ 1909.367092][T22193] kernfs bind: removing [ 1909.367120][T22193] kernfs unbind: removing [ 1909.367142][T22193] kernfs uevent: removing [ 1909.367168][T22193] kernfs module: removing [ 1909.367224][T22193] kernfs gadget:raw-gadget.2: removing [ 1909.367256][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): kobject_cleanup, parent ffff888022686350 [ 1909.367277][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): auto cleanup kobject_del [ 1909.367292][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): auto cleanup 'remove' event [ 1909.367307][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): kobject_uevent_env [ 1909.367358][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.2' [ 1909.367441][T22193] kernfs raw-gadget.2: removing [ 1909.367465][T22193] kobject: 'raw-gadget.2' (ffff88802d6eac00): calling ktype release [ 1909.367499][T22193] driver: 'raw-gadget.2': driver_release [ 1909.367518][T22193] kobject: 'raw-gadget.2': free name [ 1909.367540][T22193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.423803][T22193] kernel read not supported for file /policy (pid: 22193 comm: syz.0.3829) [ 1909.443733][T22198] kcov: kcov_start: t = ffff88807a100000, size = 524288, area = ffffc9000f2d9000 [ 1909.468579][T22193] SELinux: policydb magic number 0x76461 does not match expected magic number 0xf97cff8c [ 1909.468644][T22193] SELinux: failed to load policy [ 1909.477371][T22198] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 183 [ 1909.477453][T16253] nfc: nfc_urelease_event_work: portid 183 [ 1909.484228][T22193] fuse: Bad value for 'fd' [ 1909.609425][T22192] bus: 'gadget': remove driver raw-gadget.1 [ 1909.609449][T22192] kernfs bind: removing [ 1909.609477][T22192] kernfs unbind: removing [ 1909.609500][T22192] kernfs uevent: removing [ 1909.611673][ C0] dummy_hcd dummy_hcd.9: ep ep0 halted, urb ffff888028b25c00 [ 1909.611719][ C0] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1909.611742][ C0] kcov: kcov_start: t = ffff88801fed0000, size = 262144, area = ffffc900022a2000 [ 1909.611785][ C0] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 126 [ 1909.611873][T21086] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1909.611901][T21086] stv0680 10-1:4.0: STV(e): camera ping failed!! [ 1909.612347][T22192] kernfs gadget.0: removing [ 1909.612379][T22192] kernfs driver: removing [ 1909.612430][T22192] udc dummy_udc.0: unbinding gadget driver [USB Raw Gadget] [ 1909.612451][T22192] raw-gadget.1 gadget.0: gadget suspended [ 1909.612475][T22192] dummy_hcd dummy_hcd.0: port status 0x00010100 has changes [ 1909.612523][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.612545][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.612582][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 110 [ 1909.612616][ C1] dummy_hcd dummy_hcd.0: no ep configured for urb ffff8880724f0d00 [ 1909.612643][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.612662][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.612693][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 29 [ 1909.612773][T12604] qmi_wwan 1-1:1.0: qmi_wwan_manage_power() pmcount=0, on=1 [ 1909.612804][T12604] qmi_wwan 1-1:1.0 (unnamed net_device) (uninitialized): usbnet_write_cmd cmd=0x22 reqtype=21 value=0x0001 index=0x0000 size=0 [ 1909.612942][T22192] raw-gadget.1 gadget.0: gadget disconnected [ 1909.612965][T22192] kobject: 'dummy_udc.0' (ffff88802ca9a018): kobject_uevent_env [ 1909.612996][T22192] kobject: 'dummy_udc.0' (ffff88802ca9a018): fill_kobj_path: path = '/devices/platform/dummy_udc.0/udc/dummy_udc.0' [ 1909.613036][ C1] dummy_hcd dummy_hcd.0: no ep configured for urb ffff888062e31d00 [ 1909.613068][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.613087][ C1] kcov: kcov_start: t = ffff888059a42580, size = 262144, area = ffffc900022a2000 [ 1909.613117][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 36 [ 1909.613289][T12604] qmi_wwan 1-1:1.0: probe with driver qmi_wwan failed with error -71 [ 1909.613308][T12604] kernfs 1-1:1.0: removing [ 1909.613340][T12604] kernfs driver: removing [ 1909.613615][T12604] usb 1-1:1.0: bus: 'usb': __driver_probe_device: matched device with driver option [ 1909.613638][T12604] usb 1-1:1.0: bus: 'usb': really_probe: probing driver option with device [ 1909.613709][T12604] option 1-1:1.0: usb_probe_interface [ 1909.613757][T12604] option 1-1:1.0: usb_probe_interface - got id [ 1909.613807][T12604] option 1-1:1.0: static descriptor matches [ 1909.613872][T12604] option 1-1:1.0: static descriptor matches [ 1909.613897][T12604] option 1-1:1.0: sub driver rejected device [ 1909.613927][T12604] option 1-1:1.0: probe with driver option rejects match -19 [ 1909.613946][T12604] kernfs 1-1:1.0: removing [ 1909.613984][T12604] kernfs driver: removing [ 1909.614157][T12604] usb 1-1:1.0: bus: 'usb': __driver_probe_device: matched device with driver usbtest [ 1909.614179][T12604] usb 1-1:1.0: bus: 'usb': really_probe: probing driver usbtest with device [ 1909.614253][T12604] usbtest 1-1:1.0: usb_probe_interface [ 1909.614271][T12604] usbtest 1-1:1.0: usb_probe_interface - got id [ 1909.614291][T12604] usbtest 1-1:1.0: probe with driver usbtest rejects match -19 [ 1909.614309][T12604] kernfs 1-1:1.0: removing [ 1909.614335][T12604] kernfs driver: removing [ 1909.614894][T22192] kobject: 'gadget.0' (ffff888029878cd8): kobject_uevent_env [ 1909.614924][T22192] kobject: 'gadget.0' (ffff888029878cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.0/gadget.0' [ 1909.615002][T22192] kernfs module: removing [ 1909.615037][T22192] kernfs gadget:raw-gadget.1: removing [ 1909.615063][T22192] kobject: 'raw-gadget.1' (ffff88805bbc7600): kobject_cleanup, parent ffff888022686350 [ 1909.615081][T22192] kobject: 'raw-gadget.1' (ffff88805bbc7600): auto cleanup kobject_del [ 1909.615095][T22192] kobject: 'raw-gadget.1' (ffff88805bbc7600): auto cleanup 'remove' event [ 1909.615108][T22192] kobject: 'raw-gadget.1' (ffff88805bbc7600): kobject_uevent_env [ 1909.615135][T22192] kobject: 'raw-gadget.1' (ffff88805bbc7600): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.1' [ 1909.617587][T22192] kernfs raw-gadget.1: removing [ 1909.617606][T22192] kobject: 'raw-gadget.1' (ffff88805bbc7600): calling ktype release [ 1909.617620][T22192] driver: 'raw-gadget.1': driver_release [ 1909.617636][T22192] kobject: 'raw-gadget.1': free name [ 1909.617691][T22192] dummy_udc dummy_udc.0: disabled ep2out-bulk [ 1909.617716][T22192] dummy_udc dummy_udc.0: disabled ep-bin [ 1909.617739][T22192] dummy_udc dummy_udc.0: disabled ep-ein [ 1909.620916][T12604] device: 'ep_81': device_add [ 1909.620933][T12604] kobject: 'ep_81' (ffff888038a23010): kobject_add_internal: parent: '1-1:1.0', set: 'devices' [ 1909.620988][T12604] ep_81: No ACPI support [ 1909.621214][T12604] PM: Adding info for No Bus:ep_81 [ 1909.621229][T12604] kobject: 'ep_81' (ffff888038a23010): kobject_uevent_env [ 1909.621245][T12604] kobject: 'ep_81' (ffff888038a23010): kobject_uevent_env: filter function caused the event to drop! [ 1909.621295][T12604] device: 'ep_02': device_add [ 1909.621308][T12604] kobject: 'ep_02' (ffff888039f11010): kobject_add_internal: parent: '1-1:1.0', set: 'devices' [ 1909.621351][T12604] ep_02: No ACPI support [ 1909.621600][T12604] PM: Adding info for No Bus:ep_02 [ 1909.621613][T12604] kobject: 'ep_02' (ffff888039f11010): kobject_uevent_env [ 1909.621629][T12604] kobject: 'ep_02' (ffff888039f11010): kobject_uevent_env: filter function caused the event to drop! [ 1909.621675][T12604] device: 'ep_83': device_add [ 1909.621687][T12604] kobject: 'ep_83' (ffff888039f17010): kobject_add_internal: parent: '1-1:1.0', set: 'devices' [ 1909.621729][T12604] ep_83: No ACPI support [ 1909.621949][T12604] PM: Adding info for No Bus:ep_83 [ 1909.621962][T12604] kobject: 'ep_83' (ffff888039f17010): kobject_uevent_env [ 1909.634629][T12604] kobject: 'ep_83' (ffff888039f17010): kobject_uevent_env: filter function caused the event to drop! [ 1909.634663][T12604] usb 1-1: driver: 'usb': driver_bound: bound to device [ 1909.634702][T12604] kobject: '1-1' (ffff88802f0cd0b0): kobject_uevent_env [ 1909.634739][T12604] kobject: '1-1' (ffff88802f0cd0b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1' [ 1909.634874][T12604] usb 1-1: bus: 'usb': really_probe: bound device to driver usb [ 1909.634952][T12604] device: 'ep_00': device_add [ 1909.634975][T12604] kobject: 'ep_00' (ffff88803a8fd010): kobject_add_internal: parent: '1-1', set: 'devices' [ 1909.635982][ C0] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1909.636007][ C0] kcov: kcov_start: t = ffff88801fed0000, size = 262144, area = ffffc900022a2000 [ 1909.636044][ C0] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 83 [ 1909.636117][T21086] stv0680 10-1:4.0: last error: 0, command = 0x0 [ 1909.636162][T21086] stv0680 10-1:4.0: probe with driver stv0680 rejects match -19 [ 1909.636183][T21086] kernfs 10-1:4.0: removing [ 1909.636213][T21086] kernfs driver: removing [ 1909.636391][T21086] usb 10-1: driver: 'usb': driver_bound: bound to device [ 1909.636415][T21086] kobject: '10-1' (ffff88807d8960b0): kobject_uevent_env [ 1909.636446][T21086] kobject: '10-1' (ffff88807d8960b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.9/usb10/10-1' [ 1909.639726][T12604] ep_00: No ACPI support [ 1909.639906][T12604] PM: Adding info for No Bus:ep_00 [ 1909.639922][T12604] kobject: 'ep_00' (ffff88803a8fd010): kobject_uevent_env [ 1909.639938][T12604] kobject: 'ep_00' (ffff88803a8fd010): kobject_uevent_env: filter function caused the event to drop! [ 1909.639961][T12604] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc9001c402000 241999 [ 1909.640360][T12604] kcov: kcov_remote_start: handle = 100000000000001, context: task [ 1909.640377][T12604] kcov: kcov_start: t = ffff88807d592580, size = 1048576, area = ffffc9001c402000 [ 1909.640397][T12604] hub 1-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 1909.640447][T12604] dummy_hcd dummy_hcd.0: port status 0x00010100 has changes [ 1909.640497][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.640518][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.640575][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 198 [ 1909.645186][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.645215][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.645242][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 4 [ 1909.645336][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.645356][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.645381][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 4 [ 1909.645426][T12604] usb usb1-port1: status 0100, change 0001, 12 Mb/s [ 1909.645454][T12604] usb 1-1: USB disconnect, device number 126 [ 1909.645471][T12604] usb 1-1: unregistering device [ 1909.645486][T12604] usb 1-1: unregistering interface 1-1:1.0 [ 1909.645499][T12604] device: 'ep_81': device_unregister [ 1909.645526][T12604] kernfs runtime_status: removing [ 1909.645554][T12604] kernfs control: removing [ 1909.645576][T12604] kernfs runtime_suspended_time: removing [ 1909.645599][T12604] kernfs runtime_active_time: removing [ 1909.645622][T12604] kernfs autosuspend_delay_ms: removing [ 1909.645656][T12604] kernfs power: removing [ 1909.645679][T12604] kernfs uevent: removing [ 1909.645706][T12604] kernfs bLength: removing [ 1909.645729][T12604] kernfs bEndpointAddress: removing [ 1909.645752][T12604] kernfs bmAttributes: removing [ 1909.645774][T12604] kernfs bInterval: removing [ 1909.645805][T12604] kernfs wMaxPacketSize: removing [ 1909.645827][T12604] kernfs interval: removing [ 1909.645848][T12604] kernfs type: removing [ 1909.645870][T12604] kernfs direction: removing [ 1909.645891][T12604] PM: Removing info for No Bus:ep_81 [ 1909.645908][T12604] kobject: 'ep_81' (ffff888038a23010): kobject_uevent_env [ 1909.645923][T12604] kobject: 'ep_81' (ffff888038a23010): kobject_uevent_env: filter function caused the event to drop! [ 1909.645941][T12604] kernfs ep_81: removing [ 1909.645962][T12604] kobject: 'ep_81' (ffff888038a23010): kobject_cleanup, parent 0000000000000000 [ 1909.657750][T12604] kobject: 'ep_81' (ffff888038a23010): calling ktype release [ 1909.657784][T12604] kobject: 'ep_81': free name [ 1909.657802][T12604] device: 'ep_02': device_unregister [ 1909.660283][T12604] kernfs runtime_status: removing [ 1909.660314][T12604] kernfs control: removing [ 1909.660337][T12604] kernfs runtime_suspended_time: removing [ 1909.660361][T12604] kernfs runtime_active_time: removing [ 1909.660384][T12604] kernfs autosuspend_delay_ms: removing [ 1909.660417][T12604] kernfs power: removing [ 1909.660443][T12604] kernfs uevent: removing [ 1909.660469][T12604] kernfs bLength: removing [ 1909.660493][T12604] kernfs bEndpointAddress: removing [ 1909.660515][T12604] kernfs bmAttributes: removing [ 1909.660536][T12604] kernfs bInterval: removing [ 1909.660558][T12604] kernfs wMaxPacketSize: removing [ 1909.660580][T12604] kernfs interval: removing [ 1909.660601][T12604] kernfs type: removing [ 1909.660624][T12604] kernfs direction: removing [ 1909.660645][T12604] PM: Removing info for No Bus:ep_02 [ 1909.660663][T12604] kobject: 'ep_02' (ffff888039f11010): kobject_uevent_env [ 1909.660679][T12604] kobject: 'ep_02' (ffff888039f11010): kobject_uevent_env: filter function caused the event to drop! [ 1909.661868][T12604] kernfs ep_02: removing [ 1909.661897][T12604] kobject: 'ep_02' (ffff888039f11010): kobject_cleanup, parent 0000000000000000 [ 1909.661921][T12604] kobject: 'ep_02' (ffff888039f11010): calling ktype release [ 1909.661949][T12604] kobject: 'ep_02': free name [ 1909.661965][T12604] device: 'ep_83': device_unregister [ 1909.661991][T12604] kernfs runtime_status: removing [ 1909.662017][T12604] kernfs control: removing [ 1909.662039][T12604] kernfs runtime_suspended_time: removing [ 1909.662063][T12604] kernfs runtime_active_time: removing [ 1909.662085][T12604] kernfs autosuspend_delay_ms: removing [ 1909.662119][T12604] kernfs power: removing [ 1909.662142][T12604] kernfs uevent: removing [ 1909.662167][T12604] kernfs bLength: removing [ 1909.662191][T12604] kernfs bEndpointAddress: removing [ 1909.662221][T12604] kernfs bmAttributes: removing [ 1909.662243][T12604] kernfs bInterval: removing [ 1909.662264][T12604] kernfs wMaxPacketSize: removing [ 1909.662287][T12604] kernfs interval: removing [ 1909.662309][T12604] kernfs type: removing [ 1909.662332][T12604] kernfs direction: removing [ 1909.662354][T12604] PM: Removing info for No Bus:ep_83 [ 1909.662371][T12604] kobject: 'ep_83' (ffff888039f17010): kobject_uevent_env [ 1909.662387][T12604] kobject: 'ep_83' (ffff888039f17010): kobject_uevent_env: filter function caused the event to drop! [ 1909.662404][T12604] kernfs ep_83: removing [ 1909.662425][T12604] kobject: 'ep_83' (ffff888039f17010): kobject_cleanup, parent 0000000000000000 [ 1909.662442][T12604] kobject: 'ep_83' (ffff888039f17010): calling ktype release [ 1909.666936][T12604] kobject: 'ep_83': free name [ 1909.666993][T12604] kernfs power: removing [ 1909.667022][T12604] kernfs uevent: removing [ 1909.667044][T12604] kernfs bInterfaceNumber: removing [ 1909.667068][T12604] kernfs bAlternateSetting: removing [ 1909.667091][T12604] kernfs bNumEndpoints: removing [ 1909.667114][T12604] kernfs bInterfaceClass: removing [ 1909.667137][T12604] kernfs bInterfaceSubClass: removing [ 1909.667159][T12604] kernfs bInterfaceProtocol: removing [ 1909.667181][T12604] kernfs modalias: removing [ 1909.667209][T12604] kernfs supports_autosuspend: removing [ 1909.667232][T12604] kernfs authorized: removing [ 1909.667264][T12604] kernfs subsystem: removing [ 1909.667295][T12604] kernfs 1-1:1.0: removing [ 1909.671906][T12604] bus: 'usb': remove device 1-1:1.0 [ 1909.671922][T12604] PM: Removing info for usb:1-1:1.0 [ 1909.671942][T12604] kobject: '1-1:1.0' (ffff88803cf7e078): kobject_uevent_env [ 1909.671973][T12604] kobject: '1-1:1.0' (ffff88803cf7e078): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 1909.674616][T21086] usb 10-1: bus: 'usb': really_probe: bound device to driver usb [ 1909.674713][T21086] device: 'ep_00': device_add [ 1909.674729][T21086] kobject: 'ep_00' (ffff88803c078010): kobject_add_internal: parent: '10-1', set: 'devices' [ 1909.674774][T21086] ep_00: No ACPI support [ 1909.674955][T21086] PM: Adding info for No Bus:ep_00 [ 1909.674970][T21086] kobject: 'ep_00' (ffff88803c078010): kobject_uevent_env [ 1909.674987][T21086] kobject: 'ep_00' (ffff88803c078010): kobject_uevent_env: filter function caused the event to drop! [ 1909.675011][T21086] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc9001b11e000 192095 [ 1909.675309][T21086] kcov: kcov_remote_start: handle = 10000000000000a, context: task [ 1909.675326][T21086] kcov: kcov_start: t = ffff888020784b00, size = 1048576, area = ffffc9001b11e000 [ 1909.675347][T21086] hub 10-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 1909.675439][ C0] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1909.675463][ C0] kcov: kcov_start: t = ffff88801fed2580, size = 262144, area = ffffc900022a2000 [ 1909.675494][ C0] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 4 [ 1909.676674][T12604] kernfs 1-1:1.0: removing [ 1909.676694][T12604] kobject: '1-1:1.0' (ffff88803cf7e078): kobject_cleanup, parent 0000000000000000 [ 1909.676713][T12604] kobject: '1-1:1.0' (ffff88803cf7e078): calling ktype release [ 1909.676740][T12604] kobject: '1-1:1.0': free name [ 1909.676761][T12604] usb 1-1: usb_disable_device nuking all URBs [ 1909.676784][T12604] kernfs port: removing [ 1909.676809][T12604] kernfs device: removing [ 1909.676828][T12604] device: 'ep_00': device_unregister [ 1909.676865][T12604] kernfs runtime_status: removing [ 1909.676889][T12604] kernfs control: removing [ 1909.676970][T12604] kernfs runtime_suspended_time: removing [ 1909.676993][T12604] kernfs runtime_active_time: removing [ 1909.677017][T12604] kernfs autosuspend_delay_ms: removing [ 1909.677051][T12604] kernfs power: removing [ 1909.677074][T12604] kernfs uevent: removing [ 1909.677100][T12604] kernfs bLength: removing [ 1909.677125][T12604] kernfs bEndpointAddress: removing [ 1909.677148][T12604] kernfs bmAttributes: removing [ 1909.677171][T12604] kernfs bInterval: removing [ 1909.677194][T12604] kernfs wMaxPacketSize: removing [ 1909.677224][T12604] kernfs interval: removing [ 1909.677246][T12604] kernfs type: removing [ 1909.677268][T12604] kernfs direction: removing [ 1909.677290][T12604] PM: Removing info for No Bus:ep_00 [ 1909.677306][T12604] kobject: 'ep_00' (ffff88803a8fd010): kobject_uevent_env [ 1909.677322][T12604] kobject: 'ep_00' (ffff88803a8fd010): kobject_uevent_env: filter function caused the event to drop! [ 1909.677341][T12604] kernfs ep_00: removing [ 1909.677363][T12604] kobject: 'ep_00' (ffff88803a8fd010): kobject_cleanup, parent 0000000000000000 [ 1909.677380][T12604] kobject: 'ep_00' (ffff88803a8fd010): calling ktype release [ 1909.677405][T12604] kobject: 'ep_00': free name [ 1909.677437][T12604] kernfs autosuspend: removing [ 1909.677461][T12604] kernfs level: removing [ 1909.677484][T12604] kernfs connected_duration: removing [ 1909.677507][T12604] kernfs active_duration: removing [ 1909.677531][T12604] kernfs persist: removing [ 1909.677561][T12604] kernfs runtime_status: removing [ 1909.677582][T12604] kernfs control: removing [ 1909.677603][T12604] kernfs runtime_suspended_time: removing [ 1909.677643][T12604] kernfs runtime_active_time: removing [ 1909.677665][T12604] kernfs autosuspend_delay_ms: removing [ 1909.677699][T12604] kernfs power: removing [ 1909.686265][T12604] kernfs 189:125: removing [ 1909.686294][T12604] kernfs dev: removing [ 1909.686316][T12604] kernfs uevent: removing [ 1909.686333][T12604] kernfs removable: removing [ 1909.686359][T12604] kernfs configuration: removing [ 1909.686383][T12604] kernfs bNumInterfaces: removing [ 1909.686405][T12604] kernfs bConfigurationValue: removing [ 1909.686428][T12604] kernfs bmAttributes: removing [ 1909.686449][T12604] kernfs bMaxPower: removing [ 1909.686472][T12604] kernfs urbnum: removing [ 1909.686493][T12604] kernfs idVendor: removing [ 1909.686507][T12604] kernfs idProduct: removing [ 1909.686522][T12604] kernfs bcdDevice: removing [ 1909.686537][T12604] kernfs bDeviceClass: removing [ 1909.686574][T12604] kernfs bDeviceSubClass: removing [ 1909.686597][T12604] kernfs bDeviceProtocol: removing [ 1909.688550][T12604] kernfs bNumConfigurations: removing [ 1909.688575][T12604] kernfs bMaxPacketSize0: removing [ 1909.688601][T12604] kernfs speed: removing [ 1909.688625][T12604] kernfs rx_lanes: removing [ 1909.688646][T12604] kernfs tx_lanes: removing [ 1909.688669][T12604] kernfs busnum: removing [ 1909.688690][T12604] kernfs devnum: removing [ 1909.688711][T12604] kernfs devpath: removing [ 1909.688732][T12604] kernfs version: removing [ 1909.688752][T12604] kernfs maxchild: removing [ 1909.688774][T12604] kernfs quirks: removing [ 1909.688796][T12604] kernfs avoid_reset_quirk: removing [ 1909.688817][T12604] kernfs authorized: removing [ 1909.688838][T12604] kernfs remove: removing [ 1909.688859][T12604] kernfs ltm_capable: removing [ 1909.688881][T12604] kernfs devspec: removing [ 1909.688906][T12604] kernfs descriptors: removing [ 1909.688927][T12604] kernfs subsystem: removing [ 1909.688949][T12604] kernfs 1-1: removing [ 1909.688971][T12604] bus: 'usb': remove device 1-1 [ 1909.688988][T12604] kernfs 1-1: removing [ 1909.689010][T12604] kernfs driver: removing [ 1909.689043][T12604] kobject: '1-1' (ffff88802f0cd0b0): kobject_uevent_env [ 1909.693213][T12604] kobject: '1-1' (ffff88802f0cd0b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1' [ 1909.693341][T12604] PM: Removing info for usb:1-1 [ 1909.693364][T12604] kobject: '1-1' (ffff88802f0cd0b0): kobject_uevent_env [ 1909.693391][T12604] kobject: '1-1' (ffff88802f0cd0b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1' [ 1909.693489][T12604] kernfs 1-1: removing [ 1909.693506][T12604] kobject: '1-1' (ffff88802f0cd0b0): kobject_cleanup, parent 0000000000000000 [ 1909.693526][T12604] kobject: '1-1' (ffff88802f0cd0b0): calling ktype release [ 1909.693588][T12604] kobject: '1-1': free name [ 1909.693665][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.693688][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.693714][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 4 [ 1909.733475][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.733501][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.733528][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 4 [ 1909.754173][ C1] wireguard: wg0: Handshake for peer 50 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1909.754783][T21086] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc9001b11e000 1997 [ 1909.776098][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.776125][ C1] kcov: kcov_start: t = ffff88807d592580, size = 262144, area = ffffc900022a2000 [ 1909.776153][ C1] kcov: kcov_start: t = ffff88807d592580, size = 1048576, area = ffffc9001c402000 [ 1909.776177][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 4 [ 1909.821262][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.821290][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.821318][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 4 [ 1909.865020][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.865049][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.865077][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 4 [ 1909.865159][T12604] usb usb1-port1: debounce total 100ms stable 100ms status 0x100 [ 1909.865193][T12604] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc9001c402000 206022 [ 1909.865551][T12604] kcov: kcov_remote_start: handle = 100000000000001, context: task [ 1909.865569][T12604] kcov: kcov_start: t = ffff88807d592580, size = 1048576, area = ffffc9001c402000 [ 1909.865591][T12604] hub 1-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 1909.865690][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.865711][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1909.865737][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 4 [ 1909.866321][T12604] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc9001c402000 2279 [ 1909.867347][T19550] hub 1-0:1.0: hub_suspend [ 1909.867408][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 1909.867429][ C1] kcov: kcov_start: t = ffff88807b2ca580, size = 262144, area = ffffc900022a2000 [ 1909.867455][ C1] kcov: kcov_move_area: ffffc90024dec000 1048576 <= ffffc900022a2000 5 [ 1909.867520][T19550] usb usb1: bus auto-suspend, wakeup 1 [ 1909.867537][T19550] usb usb1: dummy_bus_suspend [ 1910.263354][T22200] kcov: kcov_start: t = ffff888023b6cb00, size = 524288, area = ffffc9001510d000 [ 1910.276693][T22193] kcov: kcov_task_exit: t = ffff88802b662580, kcov->t = ffff88802b662580 [ 1910.367373][ C0] wireguard: wg0: Handshake for peer 49 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1910.367456][ C0] wireguard: wg1: Handshake for peer 51 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 9) [ 1910.367516][ C0] wireguard: wg0: Handshake for peer 73 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1910.433443][T22201] kcov: kcov_start: t = ffff888037758000, size = 524288, area = ffffc9001550e000 [ 1910.590322][T22202] kcov: kcov_start: t = ffff8880206acb00, size = 524288, area = ffffc9001590f000 [ 1910.975113][T22186] kcov: kcov_task_exit: t = ffff8880277e4b00, kcov->t = ffff8880277e4b00 [ 1910.975398][T22185] kcov: kcov_task_exit: t = ffff8880345f8000, kcov->t = ffff8880345f8000 [ 1910.975551][T22197] kcov: kcov_task_exit: t = ffff88803282a580, kcov->t = ffff88803282a580 [ 1910.980832][T22198] kcov: kcov_task_exit: t = ffff88807a100000, kcov->t = ffff88807a100000 [ 1911.099744][T22198] bus: 'gadget': remove driver raw-gadget.0 [ 1911.099767][T22198] kernfs bind: removing [ 1911.099805][T22198] kernfs unbind: removing [ 1911.099828][T22198] kernfs uevent: removing [ 1911.099852][T22198] kernfs gadget.9: removing [ 1911.099876][T22198] kernfs driver: removing [ 1911.099904][T22198] udc dummy_udc.9: unbinding gadget driver [USB Raw Gadget] [ 1911.099924][T22198] raw-gadget.0 gadget.9: gadget suspended [ 1911.099951][T22198] dummy_hcd dummy_hcd.9: port status 0x00010100 has changes [ 1911.100009][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.100032][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.100086][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 194 [ 1911.100129][T16253] kcov: kcov_remote_start: handle = 10000000000000a, context: task [ 1911.100147][T16253] kcov: kcov_start: t = ffff888022794b00, size = 1048576, area = ffffc9001c402000 [ 1911.100180][T16253] hub 10-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 1911.100631][T16253] dummy_hcd dummy_hcd.9: port status 0x00010100 has changes [ 1911.100705][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.100726][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.100787][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 229 [ 1911.100825][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.100844][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.100882][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 27 [ 1911.101049][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.101066][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.101101][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 27 [ 1911.101165][T16253] usb usb10-port1: status 0100, change 0001, 12 Mb/s [ 1911.101248][T16253] usb 10-1: USB disconnect, device number 8 [ 1911.101265][T16253] usb 10-1: unregistering device [ 1911.101280][T16253] usb 10-1: unregistering interface 10-1:4.0 [ 1911.101332][T16253] kernfs power: removing [ 1911.101362][T16253] kernfs uevent: removing [ 1911.101383][T16253] kernfs bInterfaceNumber: removing [ 1911.101452][T16253] kernfs bAlternateSetting: removing [ 1911.101476][T16253] kernfs bNumEndpoints: removing [ 1911.101499][T16253] kernfs bInterfaceClass: removing [ 1911.101522][T16253] kernfs bInterfaceSubClass: removing [ 1911.101544][T16253] kernfs bInterfaceProtocol: removing [ 1911.101578][T16253] kernfs modalias: removing [ 1911.101600][T16253] kernfs supports_autosuspend: removing [ 1911.101623][T16253] kernfs authorized: removing [ 1911.101656][T16253] kernfs subsystem: removing [ 1911.101678][T16253] kernfs 10-1:4.0: removing [ 1911.101700][T16253] bus: 'usb': remove device 10-1:4.0 [ 1911.101713][T16253] PM: Removing info for usb:10-1:4.0 [ 1911.101734][T16253] kobject: '10-1:4.0' (ffff888053ff1078): kobject_uevent_env [ 1911.101775][T16253] kobject: '10-1:4.0' (ffff888053ff1078): fill_kobj_path: path = '/devices/platform/dummy_hcd.9/usb10/10-1/10-1:4.0' [ 1911.101914][T16253] kernfs 10-1:4.0: removing [ 1911.101932][T16253] kobject: '10-1:4.0' (ffff888053ff1078): kobject_cleanup, parent 0000000000000000 [ 1911.101951][T16253] kobject: '10-1:4.0' (ffff888053ff1078): calling ktype release [ 1911.101978][T16253] kobject: '10-1:4.0': free name [ 1911.101998][T16253] usb 10-1: usb_disable_device nuking all URBs [ 1911.102019][T16253] kernfs port: removing [ 1911.102042][T16253] kernfs device: removing [ 1911.102061][T16253] device: 'ep_00': device_unregister [ 1911.102086][T16253] kernfs runtime_status: removing [ 1911.102110][T16253] kernfs control: removing [ 1911.102132][T16253] kernfs runtime_suspended_time: removing [ 1911.102154][T16253] kernfs runtime_active_time: removing [ 1911.102176][T16253] kernfs autosuspend_delay_ms: removing [ 1911.102209][T16253] kernfs power: removing [ 1911.102232][T16253] kernfs uevent: removing [ 1911.102257][T16253] kernfs bLength: removing [ 1911.102280][T16253] kernfs bEndpointAddress: removing [ 1911.102303][T16253] kernfs bmAttributes: removing [ 1911.102326][T16253] kernfs bInterval: removing [ 1911.102349][T16253] kernfs wMaxPacketSize: removing [ 1911.102372][T16253] kernfs interval: removing [ 1911.102393][T16253] kernfs type: removing [ 1911.102416][T16253] kernfs direction: removing [ 1911.102447][T16253] PM: Removing info for No Bus:ep_00 [ 1911.102464][T16253] kobject: 'ep_00' (ffff88803c078010): kobject_uevent_env [ 1911.102481][T16253] kobject: 'ep_00' (ffff88803c078010): kobject_uevent_env: filter function caused the event to drop! [ 1911.102505][T16253] kernfs ep_00: removing [ 1911.102578][T16253] kobject: 'ep_00' (ffff88803c078010): kobject_cleanup, parent 0000000000000000 [ 1911.102598][T16253] kobject: 'ep_00' (ffff88803c078010): calling ktype release [ 1911.102625][T16253] kobject: 'ep_00': free name [ 1911.102670][T16253] kernfs autosuspend: removing [ 1911.102695][T16253] kernfs level: removing [ 1911.102717][T16253] kernfs connected_duration: removing [ 1911.102740][T16253] kernfs active_duration: removing [ 1911.102764][T16253] kernfs persist: removing [ 1911.102796][T16253] kernfs runtime_status: removing [ 1911.102817][T16253] kernfs control: removing [ 1911.102838][T16253] kernfs runtime_suspended_time: removing [ 1911.102860][T16253] kernfs runtime_active_time: removing [ 1911.102881][T16253] kernfs autosuspend_delay_ms: removing [ 1911.102914][T16253] kernfs power: removing [ 1911.103113][T16253] kernfs 189:1159: removing [ 1911.103136][T16253] kernfs dev: removing [ 1911.103158][T16253] kernfs uevent: removing [ 1911.103174][T16253] kernfs removable: removing [ 1911.103200][T16253] kernfs configuration: removing [ 1911.103223][T16253] kernfs bNumInterfaces: removing [ 1911.103245][T16253] kernfs bConfigurationValue: removing [ 1911.103268][T16253] kernfs bmAttributes: removing [ 1911.103290][T16253] kernfs bMaxPower: removing [ 1911.103312][T16253] kernfs urbnum: removing [ 1911.103333][T16253] kernfs idVendor: removing [ 1911.103349][T16253] kernfs idProduct: removing [ 1911.103364][T16253] kernfs bcdDevice: removing [ 1911.103380][T16253] kernfs bDeviceClass: removing [ 1911.103401][T16253] kernfs bDeviceSubClass: removing [ 1911.103423][T16253] kernfs bDeviceProtocol: removing [ 1911.103444][T16253] kernfs bNumConfigurations: removing [ 1911.103466][T16253] kernfs bMaxPacketSize0: removing [ 1911.103488][T16253] kernfs speed: removing [ 1911.103509][T16253] kernfs rx_lanes: removing [ 1911.103530][T16253] kernfs tx_lanes: removing [ 1911.103566][T16253] kernfs busnum: removing [ 1911.103589][T16253] kernfs devnum: removing [ 1911.103653][T16253] kernfs devpath: removing [ 1911.103676][T16253] kernfs version: removing [ 1911.103698][T16253] kernfs maxchild: removing [ 1911.103720][T16253] kernfs quirks: removing [ 1911.103741][T16253] kernfs avoid_reset_quirk: removing [ 1911.103764][T16253] kernfs authorized: removing [ 1911.103786][T16253] kernfs remove: removing [ 1911.103807][T16253] kernfs ltm_capable: removing [ 1911.103828][T16253] kernfs devspec: removing [ 1911.103862][T16253] kernfs descriptors: removing [ 1911.103882][T16253] kernfs subsystem: removing [ 1911.103905][T16253] kernfs 10-1: removing [ 1911.103925][T16253] bus: 'usb': remove device 10-1 [ 1911.103942][T16253] kernfs 10-1: removing [ 1911.103964][T16253] kernfs driver: removing [ 1911.103998][T16253] kobject: '10-1' (ffff88807d8960b0): kobject_uevent_env [ 1911.104028][T16253] kobject: '10-1' (ffff88807d8960b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.9/usb10/10-1' [ 1911.104146][T16253] PM: Removing info for usb:10-1 [ 1911.104169][T16253] kobject: '10-1' (ffff88807d8960b0): kobject_uevent_env [ 1911.104194][T16253] kobject: '10-1' (ffff88807d8960b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.9/usb10/10-1' [ 1911.110264][T16253] kernfs 10-1: removing [ 1911.110289][T16253] kobject: '10-1' (ffff88807d8960b0): kobject_cleanup, parent 0000000000000000 [ 1911.110309][T16253] kobject: '10-1' (ffff88807d8960b0): calling ktype release [ 1911.110373][T16253] kobject: '10-1': free name [ 1911.110492][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.110514][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.110545][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 27 [ 1911.113628][T22198] raw-gadget.0 gadget.9: gadget disconnected [ 1911.113658][T22198] kobject: 'dummy_udc.9' (ffff88802cb87018): kobject_uevent_env [ 1911.113690][T22198] kobject: 'dummy_udc.9' (ffff88802cb87018): fill_kobj_path: path = '/devices/platform/dummy_udc.9/udc/dummy_udc.9' [ 1911.113784][T22198] kobject: 'gadget.9' (ffff88802bd74cd8): kobject_uevent_env [ 1911.113813][T22198] kobject: 'gadget.9' (ffff88802bd74cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.9/gadget.9' [ 1911.114110][T22198] kernfs module: removing [ 1911.114150][T22198] kernfs gadget:raw-gadget.0: removing [ 1911.114177][T22198] kobject: 'raw-gadget.0' (ffff888030d21c00): kobject_cleanup, parent ffff888022686350 [ 1911.114195][T22198] kobject: 'raw-gadget.0' (ffff888030d21c00): auto cleanup kobject_del [ 1911.114208][T22198] kobject: 'raw-gadget.0' (ffff888030d21c00): auto cleanup 'remove' event [ 1911.114222][T22198] kobject: 'raw-gadget.0' (ffff888030d21c00): kobject_uevent_env [ 1911.114252][T22198] kobject: 'raw-gadget.0' (ffff888030d21c00): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.0' [ 1911.114331][T22198] kernfs raw-gadget.0: removing [ 1911.114345][T22198] kobject: 'raw-gadget.0' (ffff888030d21c00): calling ktype release [ 1911.114358][T22198] driver: 'raw-gadget.0': driver_release [ 1911.114381][T22198] kobject: 'raw-gadget.0': free name [ 1911.145264][T22201] kcov: kcov_task_exit: t = ffff888037758000, kcov->t = ffff888037758000 [ 1911.147563][T22202] kcov: kcov_task_exit: t = ffff8880206acb00, kcov->t = ffff8880206acb00 [ 1911.147688][T22200] kcov: kcov_task_exit: t = ffff888023b6cb00, kcov->t = ffff888023b6cb00 [ 1911.175540][ C0] virtqueue callback for ffff888021b2ba00 (ffffffff86ed9870) [ 1911.175565][ C0] No more buffers in queue [ 1911.175785][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 1911.175799][ C0] No more buffers in queue [ 1911.175875][ C0] eth0: xmit ffff8880216d4500 42:01:0a:80:00:01 [ 1911.175891][ C0] Added buffer head 11 to ffff888021b2b800 [ 1911.175921][ C0] virtqueue callback for ffff888021b2b800 (ffffffff86ee2790) [ 1911.175934][ C0] Sent skb ffff8880216d4500 [ 1911.175963][ C0] No more buffers in queue [ 1911.182638][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.182661][ C1] kcov: kcov_start: t = ffff88807b2ca580, size = 262144, area = ffffc900022a2000 [ 1911.182694][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 27 [ 1911.218910][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.218937][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.218969][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 27 [ 1911.261848][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.261875][ C1] kcov: kcov_start: t = ffff88807b260000, size = 262144, area = ffffc900022a2000 [ 1911.261906][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 19 [ 1911.304860][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.304888][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.304918][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 27 [ 1911.304970][T16253] usb usb10-port1: debounce total 100ms stable 100ms status 0x100 [ 1911.305002][T16253] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc9001c402000 139374 [ 1911.305227][T16253] kcov: kcov_remote_start: handle = 10000000000000a, context: task [ 1911.305245][T16253] kcov: kcov_start: t = ffff888022794b00, size = 1048576, area = ffffc9001c402000 [ 1911.305267][T16253] hub 10-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 1911.305355][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.305376][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.305402][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 4 [ 1911.307564][T16253] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc9001c402000 2264 [ 1911.308716][T13335] hub 10-0:1.0: hub_suspend [ 1911.308766][ C1] kcov: kcov_remote_start: handle = 10000000000000a, context: softirq [ 1911.308787][ C1] kcov: kcov_start: t = ffff8880206b0000, size = 262144, area = ffffc900022a2000 [ 1911.308813][ C1] kcov: kcov_move_area: ffffc90013404000 1048576 <= ffffc900022a2000 5 [ 1911.308860][T13335] usb usb10: bus auto-suspend, wakeup 1 [ 1911.308876][T13335] usb usb10: dummy_bus_suspend [ 1911.392290][T22159] syzkaller0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 1911.392321][T22159] net syzkaller0: siw: event 6 [ 1911.392910][T22159] syzkaller0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 1911.392932][T22159] net syzkaller0: siw: event 18 [ 1911.395830][T22159] kernfs rps_cpus: removing [ 1911.395865][T22159] kernfs rps_flow_cnt: removing [ 1911.395887][T22159] kobject: 'rx-0' (ffff888076b76e50): kobject_cleanup, parent ffff8880252dd350 [ 1911.395906][T22159] kobject: 'rx-0' (ffff888076b76e50): auto cleanup kobject_del [ 1911.395918][T22159] kobject: 'rx-0' (ffff888076b76e50): auto cleanup 'remove' event [ 1911.395932][T22159] kobject: 'rx-0' (ffff888076b76e50): kobject_uevent_env [ 1911.395964][T22159] kobject: 'rx-0' (ffff888076b76e50): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/rx-0' [ 1911.396047][T22159] kernfs rx-0: removing [ 1911.396068][T22159] kobject: 'rx-0' (ffff888076b76e50): calling ktype release [ 1911.396088][T22159] kobject: 'rx-0': free name [ 1911.396108][T22159] kernfs tx_timeout: removing [ 1911.396131][T22159] kernfs traffic_class: removing [ 1911.396154][T22159] kernfs xps_cpus: removing [ 1911.396176][T22159] kernfs xps_rxqs: removing [ 1911.396198][T22159] kernfs tx_maxrate: removing [ 1911.396219][T22159] kobject: 'tx-0' (ffff8880789b0c20): kobject_cleanup, parent ffff8880252dd350 [ 1911.396236][T22159] kobject: 'tx-0' (ffff8880789b0c20): auto cleanup kobject_del [ 1911.396249][T22159] kobject: 'tx-0' (ffff8880789b0c20): auto cleanup 'remove' event [ 1911.396262][T22159] kobject: 'tx-0' (ffff8880789b0c20): kobject_uevent_env [ 1911.396293][T22159] kobject: 'tx-0' (ffff8880789b0c20): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/tx-0' [ 1911.396366][T22159] kernfs tx-0: removing [ 1911.396387][T22159] kobject: 'tx-0' (ffff8880789b0c20): calling ktype release [ 1911.396405][T22159] kobject: 'tx-0': free name [ 1911.396423][T22159] kernfs queues: removing [ 1911.396444][T22159] kobject: 'queues' (ffff8880252dd350): kobject_cleanup, parent 0000000000000000 [ 1911.396461][T22159] kobject: 'queues' (ffff8880252dd350): calling ktype release [ 1911.396473][T22159] kobject: 'queues' (ffff8880252dd350): kset_release [ 1911.396494][T22159] kobject: 'queues': free name [ 1911.396520][T22159] kernfs runtime_status: removing [ 1911.396543][T22159] kernfs control: removing [ 1911.396572][T22159] kernfs runtime_suspended_time: removing [ 1911.396603][T22159] kernfs runtime_active_time: removing [ 1911.396626][T22159] kernfs autosuspend_delay_ms: removing [ 1911.396661][T22159] kernfs power: removing [ 1911.396707][T22159] kernfs subsystem: removing [ 1911.396733][T22159] kernfs syzkaller0: removing [ 1911.396759][T22159] kernfs uevent: removing [ 1911.396785][T22159] kernfs tun_flags: removing [ 1911.396809][T22159] kernfs owner: removing [ 1911.396831][T22159] kernfs group: removing [ 1911.396855][T22159] kernfs rx_packets: removing [ 1911.396878][T22159] kernfs tx_packets: removing [ 1911.396901][T22159] kernfs rx_bytes: removing [ 1911.396923][T22159] kernfs tx_bytes: removing [ 1911.396946][T22159] kernfs rx_errors: removing [ 1911.396968][T22159] kernfs tx_errors: removing [ 1911.396991][T22159] kernfs rx_dropped: removing [ 1911.397013][T22159] kernfs tx_dropped: removing [ 1911.397037][T22159] kernfs multicast: removing [ 1911.397059][T22159] kernfs collisions: removing [ 1911.397081][T22159] kernfs rx_length_errors: removing [ 1911.397106][T22159] kernfs rx_over_errors: removing [ 1911.397128][T22159] kernfs rx_crc_errors: removing [ 1911.397152][T22159] kernfs rx_frame_errors: removing [ 1911.397188][T22159] kernfs rx_fifo_errors: removing [ 1911.397217][T22159] kernfs rx_missed_errors: removing [ 1911.397240][T22159] kernfs tx_aborted_errors: removing [ 1911.397264][T22159] kernfs tx_carrier_errors: removing [ 1911.397287][T22159] kernfs tx_fifo_errors: removing [ 1911.397317][T22159] kernfs tx_heartbeat_errors: removing [ 1911.397343][T22159] kernfs tx_window_errors: removing [ 1911.398578][T22159] kernfs rx_compressed: removing [ 1911.398603][T22159] kernfs tx_compressed: removing [ 1911.398626][T22159] kernfs rx_nohandler: removing [ 1911.398648][T22159] kernfs statistics: removing [ 1911.398678][T22159] kernfs netdev_group: removing [ 1911.398702][T22159] kernfs type: removing [ 1911.398725][T22159] kernfs dev_id: removing [ 1911.398747][T22159] kernfs dev_port: removing [ 1911.398770][T22159] kernfs iflink: removing [ 1911.398793][T22159] kernfs ifindex: removing [ 1911.398815][T22159] kernfs name_assign_type: removing [ 1911.398840][T22159] kernfs addr_assign_type: removing [ 1911.398863][T22159] kernfs addr_len: removing [ 1911.398885][T22159] kernfs link_mode: removing [ 1911.398916][T22159] kernfs address: removing [ 1911.398939][T22159] kernfs broadcast: removing [ 1911.398962][T22159] kernfs speed: removing [ 1911.398985][T22159] kernfs duplex: removing [ 1911.399008][T22159] kernfs dormant: removing [ 1911.399030][T22159] kernfs testing: removing [ 1911.399052][T22159] kernfs operstate: removing [ 1911.399074][T22159] kernfs carrier_changes: removing [ 1911.399097][T22159] kernfs ifalias: removing [ 1911.399119][T22159] kernfs carrier: removing [ 1911.399142][T22159] kernfs mtu: removing [ 1911.399163][T22159] kernfs flags: removing [ 1911.399186][T22159] kernfs tx_queue_len: removing [ 1911.399209][T22159] kernfs gro_flush_timeout: removing [ 1911.399232][T22159] kernfs napi_defer_hard_irqs: removing [ 1911.399255][T22159] kernfs proto_down: removing [ 1911.399277][T22159] kernfs carrier_up_count: removing [ 1911.399299][T22159] kernfs carrier_down_count: removing [ 1911.399322][T22159] kernfs threaded: removing [ 1911.399354][T22159] PM: Removing info for No Bus:syzkaller0 [ 1911.399373][T22159] kobject: 'syzkaller0' (ffff888089dc87c0): kobject_uevent_env [ 1911.399403][T22159] kobject: 'syzkaller0' (ffff888089dc87c0): fill_kobj_path: path = '/devices/virtual/net/syzkaller0' [ 1911.399483][T22159] kernfs syzkaller0: removing [ 1911.454678][T22159] kobject: 'syzkaller0' (ffff888089dc87c0): kobject_cleanup, parent 0000000000000000 [ 1911.454704][T22159] kobject: 'syzkaller0' (ffff888089dc87c0): calling ktype release [ 1911.454759][T22159] kobject: 'syzkaller0': free name [ 1912.245085][ C1] wireguard: wg1: Handshake for peer 75 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 19) [ 1912.926087][ C0] wireguard: wg2: Handshake for peer 77 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 18) [ 1913.094601][T13335] rxe0: qp#16 rxe_completer: state = GET ACK [ 1913.094624][T13335] rxe0: qp#16 rxe_completer: state = GET WQE [ 1913.094639][T13335] rxe0: qp#16 rxe_completer: state = COMP WQE [ 1913.094703][ T12] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 1913.094718][ T12] rxe0: qp#16 rxe_receiver: state = CHK_PSN [ 1913.094733][ T12] rxe0: qp#16 rxe_receiver: state = CHK_OP_SEQ [ 1913.094747][ T12] rxe0: qp#16 rxe_receiver: state = CHK_OP_VALID [ 1913.094762][ T12] rxe0: qp#16 rxe_receiver: state = CHK_RESOURCE [ 1913.094778][ T12] rxe0: qp#16 rxe_receiver: state = CHK_LENGTH [ 1913.094792][ T12] rxe0: qp#16 rxe_receiver: state = EXECUTE [ 1913.094810][ T12] rxe0: qp#16 rxe_receiver: state = COMPLETE [ 1913.094838][ T12] rxe0: qp#16 rxe_receiver: state = CLEANUP [ 1913.094882][ T12] rxe0: qp#16 rxe_receiver: state = DONE [ 1913.094896][ T12] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 1913.094910][ T12] rxe0: qp#16 rxe_receiver: state = EXIT [ 1913.096029][T13335] rxe0: qp#16 rxe_completer: state = GET WQE [ 1913.096046][T13335] rxe0: qp#16 rxe_completer: state = EXIT [ 1913.096067][T13335] rxe0: qp#16 rxe_completer: state = GET ACK [ 1913.096081][T13335] rxe0: qp#16 rxe_completer: state = GET WQE [ 1913.096093][T13335] rxe0: qp#16 rxe_completer: state = EXIT [ 1913.441482][T13335] sd 0:0:1:0: cmd ffff88802f0d5ed0 CDB: 0x2a [ 1913.441512][T13335] Added buffer head 99 to ffff888028379a00 [ 1913.473262][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1913.473291][ C1] sd 0:0:1:0: cmd ffff88802f0d5ed0 response 0 status 0x0 sense_len 0 [ 1913.473315][ C1] No more buffers in queue [ 1913.521375][ C0] net_ratelimit: 96 callbacks suppressed [ 1913.521390][ C0] wireguard: wg0: Sending keepalive packet to peer 80 ([::1]:20003/0%0) [ 1913.603607][ C0] wireguard: wg1: Handshake for peer 76 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8) [ 1913.603694][T19550] wireguard: wg1: Sending handshake initiation to peer 76 (127.0.0.1:20003) [ 1913.603941][T19550] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 1913.784567][ C1] wireguard: wg0: Sending keepalive packet to peer 79 (127.0.0.1:20002) [ 1913.784703][ C1] wireguard: wg0: Sending keepalive packet to peer 85 ([::1]:20002/0%0) [ 1913.792917][T20837] wireguard: wg1: Receiving keepalive packet from peer 87 ([::1]:20001/0%0) [ 1914.297682][ C1] wireguard: wg0: Handshake for peer 74 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1914.297751][ C1] wireguard: wg2: Handshake for peer 78 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4) [ 1914.297827][ C1] wireguard: wg1: Sending keepalive packet to peer 81 (127.0.0.1:20001) [ 1914.297959][T13335] wireguard: wg2: Sending handshake initiation to peer 78 (127.0.0.1:20002) [ 1914.298537][T13335] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 1914.301288][T19550] wireguard: wg0: Sending handshake initiation to peer 74 ([::1]:20003/0%0) [ 1914.981882][ C1] wireguard: wg2: Handshake for peer 53 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 8) [ 1914.983181][ T4935] sd 0:0:1:0: cmd ffff88802f0d6290 CDB: 0x2a [ 1914.983210][ T4935] Added buffer head 99 to ffff888028379a00 [ 1914.984275][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1914.984299][ C1] sd 0:0:1:0: cmd ffff88802f0d6290 response 0 status 0x0 sense_len 0 [ 1914.984321][ C1] No more buffers in queue [ 1914.985129][ T2037] sd 0:0:1:0: cmd ffff888023f9c110 CDB: 0x35 [ 1914.985152][ T2037] Added buffer head 99 to ffff888028379a00 [ 1914.985194][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1914.985212][ C1] sd 0:0:1:0: cmd ffff888023f9c110 response 0 status 0x0 sense_len 0 [ 1914.985232][ C1] No more buffers in queue [ 1914.985324][ T2037] sd 0:0:1:0: cmd ffff88802f0d6650 CDB: 0x2a [ 1914.985343][ T2037] Added buffer head 99 to ffff888028379a00 [ 1914.989945][ C1] virtqueue callback for ffff888028379a00 (ffffffff86a2d1c0) [ 1914.989966][ C1] sd 0:0:1:0: cmd ffff88802f0d6650 response 0 status 0x0 sense_len 0 [ 1914.989986][ C1] No more buffers in queue [ 1915.655399][ C1] wireguard: wg0: Handshake for peer 50 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1915.911971][ C1] wireguard: wg0: Handshake for peer 73 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1916.339615][ C1] wireguard: wg1: Handshake for peer 51 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 1916.339692][ C1] wireguard: wg0: Handshake for peer 49 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)