last executing test programs: 32m45.438187652s ago: executing program 4 (id=11): unshare(0x6a040000) io_setup(0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) read(r0, &(0x7f0000000440)=""/209, 0xd1) r1 = accept$packet(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) connect$packet(r1, &(0x7f0000000140)={0x11, 0x5, r2, 0x1, 0xd6, 0x6, @remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write$ppp(0xffffffffffffffff, &(0x7f0000000640)="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", 0xfa) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x7) wait4(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 32m44.077926066s ago: executing program 4 (id=14): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x800000}, 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007926000000000000bf670800000000005607000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f153bf0f5bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae625a14bddcf5b3e72b420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d6287805319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8098f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b39a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d57158dc308c08dc0a8dc99bdfeaff43eb24134e63a5efd08c6c2d51983265b60afcc5effad8f52ec152ab4ed39c2dbd04e3fefd9217a0246660301d5b7d7a9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r9) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r10, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 32m37.397765442s ago: executing program 4 (id=27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_open_pts(0xffffffffffffffff, 0x80040) 32m34.990449213s ago: executing program 4 (id=35): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="7d88"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$802154_dgram(r0, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) 32m34.404183989s ago: executing program 4 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb40102030109021200010000000009"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) bind$xdp(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x4622, 0xb57, @mcast1, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002bbd7800fedbdf2509"], 0x14}}, 0x4004804) munlockall() ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x9, 0x9, 0x3, 0x8000, 0xfffffffffffffffc, 0x81, 0x4, 0x8001}) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 32m34.045242721s ago: executing program 4 (id=40): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) 32m33.732609492s ago: executing program 32 (id=40): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) 1m55.040138493s ago: executing program 2 (id=7509): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) (fail_nth: 1) 1m54.465546613s ago: executing program 2 (id=7512): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) futex_waitv(0x0, 0x29, 0x0, 0x0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x111940, 0x8c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) shutdown(r0, 0x1) socket$kcm(0x10, 0x100000000002, 0x4) 1m52.521216817s ago: executing program 2 (id=7517): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x60, 0xffffffffffffffff, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) 1m49.358899387s ago: executing program 2 (id=7537): syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000001040)={0x43, 0xfffffffc, 0x3}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x800) sched_setscheduler(0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet6(0xa, 0x5, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 1m48.450703974s ago: executing program 5 (id=7539): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103401, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040)=0x5f) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1m48.425156566s ago: executing program 2 (id=7540): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000002) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009058202"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3"]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48100000ff070000000000000000000000000feb004558ed9d4b01000600000000a97eaff94725d234fb19000500020000000900020073797a310000000016000300686173683a6e65742c706ffbb46e33da8bedb6a58dbe9da64fd4eeca8249baf17cf63e984ce47f3fe78136e005ca1f4fff00000000000000983837753da6a3f94820e310e24bbab88a11d8e59f13f0fdff96848362b4cd945e706a08"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r7, 0x2f, 0x3, 0xd, 0x3, 0x41, @mcast2, @private2, 0x7, 0x700, 0x8, 0x64}}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x6, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@mcast2, 0xfffffffd, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 1m48.173530178s ago: executing program 5 (id=7541): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)) connect$inet6(r0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xf) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) syz_clone3(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002600)={&(0x7f0000002500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000180)=0x7) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000240)) 1m48.019217041s ago: executing program 5 (id=7542): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8", 0x7a, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd1", 0x62}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 1) 1m48.017171668s ago: executing program 0 (id=7543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, &(0x7f0000000580)=""/113, 0x0, 0x71, 0x1, 0x8000, 0x10000}, 0x28) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYRES32=r7, @ANYBLOB="01000100000000000000000000000000000000001c64991c429fd26366d665ed2bc5ad3f52123a18558f1b09a752b9de1e721b2d124112d20e5af02981bb", @ANYRES32, @ANYRES32=r5, @ANYBLOB="040000000000f842e3afc728020fa6842fac46a4121f8d494b0ec41c82643d20e1a7b46169b01d7e12b3e4ca80eefae4dad9332157d3a4cbc73c7ab2f8767b05bae2752703d800"/82, @ANYRESDEC=r3, @ANYRESDEC], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) 1m47.492918574s ago: executing program 0 (id=7545): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8", 0x7a, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd1", 0x62}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x1, 0x200000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m47.357618556s ago: executing program 5 (id=7546): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x36, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1m47.169717334s ago: executing program 5 (id=7548): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x14001) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000a00)={0x7, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}]}) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x20, 0x10, 0x1a, "3fcaf19450af2edc81adf161807c3d8819fbe04a40483cf8c719"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0xc7, "6d11fa98a40277acc31b48972b62793af17c88668efd0561f31c1d16828488dedb8b6cca4021ade7c94b45efad89cfaa0510ef04ad55111c499a8bc0c917f59fcfd44073de6dca7e6ea0e3ce2b3744bbfa56739441d1d41595bfa6558fdc488384f723702d1c9b5dd8ad2dbd1771e15d4f4c9f479f05ca9514808d9783b3330fc74c6229a93a0955b1710dc06e8ed3d3c3b84b10d587e74ec4c910a19b87e8dbcceac990ffe57104483578ec59a048841ef50f9c01ef1336c20a2ae186d84011e794b7b4bd4036"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x3}}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000580)=0x1000000, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_setup(0x6, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x60, r7, 0x0}]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x58}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r9, 0xff, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xdac, 0x10070}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8091) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x30, r9, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0xc090) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m47.149051264s ago: executing program 3 (id=7549): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)) connect$inet6(r0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xf) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) syz_clone3(0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000240)) 1m47.089505154s ago: executing program 0 (id=7550): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) syz_clone3(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002600)={&(0x7f0000002500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28) socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000180)=0x7) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000240)) 1m46.5207602s ago: executing program 1 (id=7551): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103401, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040)=0x5f) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1m46.31604954s ago: executing program 1 (id=7552): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4f6188a2c96abcb10ab532cf924a4d689659b21be52e62e89d93160a3c5473db76152c288e7ebb4ca01b0db533ca643fa1477e0a90a1d33db387d6a6547b0efe472396e6868cd3f1492edb9631c2b4645f84d867eb8158297da13ac5118ac79e6e549c3dfaa281d4d493759825e6226fb6064fd4bb102882ca039e8026abbfd8128e92ff38f0edb3b0d4ae9305d8f8877d337959a3c4b54b9ef2f37cac4d7074d8dfbf27f0b53b44c6993dbb7f86c3d0df056001ddc0c737c360ed9e2ba8ba405c6273dfd37c752926611d2b32c9eddea904740c847b029c5694171137d77d409eb87d6484f237754bcf94519d8b0e21ee5f2c4103ad3cfd358047c67d1402c94507b11917337277b51fdcb867415a8b4b5d54bd253091d229b4d38daf0d9f50a3b916b6ca9615b3e28890f5709b30aa7bcf8ba7d2d2cfc2aa09452422ed2211ac40b354ec832982d92978ac820a789368c29804670329e3463e3a6742d26f4dd2afd0b6911763bd2ad2a036", @ANYRES16=r1, @ANYBLOB="01002cbd7000000000010100000004000180"], 0x18}, 0x1, 0xff07}, 0x2000000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x55, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x709, {0x1, 0x1, 0x88, 0x5}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2509000000300006800500020009000000050002000100000008000700", @ANYRES32=r3, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x2004004}, 0x40004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000000000006111880000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1m45.992981291s ago: executing program 0 (id=7553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB], 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x3, 0x589}}, './file0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff02, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x488c4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x6}, 0x8) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r10, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r12 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r12, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r13, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) 1m45.903889685s ago: executing program 3 (id=7554): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x7d, @dev={0xfe, 0x80, '\x00', 0x28}, 0xfffffff8}, 0x1c) bind$l2tp6(r2, &(0x7f0000001540)={0xa, 0x0, 0x8, @remote, 0xfffffffc, 0x4}, 0x20) r3 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) fcntl$setstatus(r0, 0x4, 0x2c00) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="7b13000000000000300012800b00010067656e657665000020000280060005004e23000014000700"/56], 0x50}}, 0x40800) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = semget$private(0x0, 0x4, 0x96) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0x20}, 0x2476d, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000100)=[0x4]) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000180)={0xc}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b8fb7f00000f23c80f21f866350000f0000f23f86436640fb9850000baf80c66b8809cfc8e66efbafc0c66b80000000066ef9a12004a002e0ffe573886e266b93c0300000f3266b9e402000066b80900000066ba000000000f3066b9800000c00f326635000400000f300f210b", 0x6e}], 0x1, 0x2, &(0x7f00000000c0)=[@dstype0={0x6, 0x4}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004081}, 0x0) 1m45.833108056s ago: executing program 1 (id=7555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000640)={&(0x7f0000000540)="b0d56b02d93c0f4a8ddb3e1e5848e93cf917e6179198e1a07627768a20cfc5434d6d60ca23e8597e072c7b8c0b14bc64c948c7a9e0c7f8ab0c908b9bc32d9a2c85f9789a74a382669279581911d99ab973bcdbf61e7f160d09e54f2fb03a13bad2cead31dd351db736f87ff7fd8c9e44c0804b3562f666f99b10979c84d43c7a1b6777eee7aeddfc9f8b073c380aed36976ba2901f8013ad761dc797d551301991070f0593611fa5e3d4a5156ef76cde16f3a48661", 0xb5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60120008001c3afffe8000000000000000000000000000bbff020000000000000000000000000001820090780002080020010000000000000000000000000000fd800000"], 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xffffffffffffff1f}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 1m45.015873445s ago: executing program 0 (id=7556): syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x800) sched_setscheduler(0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) r1 = socket$inet6(0xa, 0x5, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 1m44.893815083s ago: executing program 1 (id=7557): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9"], 0x0) r2 = syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) getdents(r2, &(0x7f0000000500)=""/198, 0xc6) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x7d, @dev={0xfe, 0x80, '\x00', 0x28}, 0xfffffff8}, 0x1c) bind$l2tp6(r3, &(0x7f0000001540)={0xa, 0x0, 0x8, @remote, 0xfffffffc, 0x4}, 0x20) inotify_init1(0x800) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, &(0x7f0000001400)=""/4076, 0xfffffeea) fcntl$setstatus(r0, 0x4, 0x2c00) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="7b13000000000000300012800b00010067656e657665000020000280060005004e23000014000700"/56], 0x50}}, 0x40800) shmctl$SHM_UNLOCK(0x0, 0xc) r6 = semget$private(0x0, 0x4, 0x96) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0x20}, 0x2476d, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000100)=[0x4]) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000180)={0xc}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b8fb7f00000f23c80f21f866350000f0000f23f86436640fb9850000baf80c66b8809cfc8e66efbafc0c66b80000000066ef9a12004a002e0ffe573886e266b93c0300000f3266b9e402000066b80900000066ba000000000f3066b9800000c00f326635000400000f300f210b", 0x6e}], 0x1, 0x2, &(0x7f00000000c0)=[@dstype0={0x6, 0x4}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004081}, 0x0) 1m41.801358288s ago: executing program 2 (id=7558): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060500000000000000000000fffefc05000400000000000900020073797a310000000010000300686173683a69702c6d61630005000500020000000500010006"], 0x48}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x80) 1m41.537088731s ago: executing program 3 (id=7559): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x36, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1m41.22868414s ago: executing program 0 (id=7560): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007cb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m40.910170581s ago: executing program 3 (id=7561): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x60, 0xffffffffffffffff, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) 1m40.130664648s ago: executing program 1 (id=7562): r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x2, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000001340)='GPL\x00'}, 0x80) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000f3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff90}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setxattr$security_selinux(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000380)=""/8, 0x8000, 0x0, 0x4, 0x3}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200002, 0x7, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) syz_usb_connect$midi(0x2, 0x48, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x9320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x1, 0xf0, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0xf, [@midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x2, 0x4, [{0xc0, 0x8}, {0x5, 0xa}, {0x2, 0x9}, {0x7, 0x3}], 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x7, 0x0, [], 0x58}, @ms_header={0x7, 0x24, 0x1, 0x557, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x200, 0x7}]}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x340, 0x0, 0x4, 0x9, 0xff, 0x80}, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1, [{0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="46036030f5bb5f190a03b730aa467a8292e37990a8b98e0873d8406681fd453a7e66b6cf47594b6988d053c5cf4b696cd5117582039a300100526d81767bf7ff000000000000"]}]}) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000020000000000000000000000850000955dc9654bc137f267e8d0d4aeeb043060d95210864a0087ccb3a6afbb7f65e1952ad0dea26f11cc53dffde6b13a4c1968d155f0d0dd2540c402f9e69e60e7c57f66c0013c7ff05166292dbbc42eabf632841f023817f9afaa750bd58e15eb59689f3d0e5f6a9f6986c377b7c997c8696ad2550c8222be8bf1356c5e6548a143870c7eaff3b236d4809e2e3ba1ed5315037b2ad20838e1a7569f4934b520b02bcd9f03"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) 1m40.020076898s ago: executing program 5 (id=7563): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) syz_clone3(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002600)={&(0x7f0000002500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28) socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000180)=0x7) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000240)) 1m36.380600526s ago: executing program 3 (id=7564): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x2, 0xb00}}, 0x1c}}, 0x40000d0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00006fc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd70, 0x1f280, 0x0, 0x399}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_uring_enter(r0, 0x100, 0x9abe, 0x1f, 0x0, 0x0) 1m30.849490457s ago: executing program 1 (id=7565): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4f6188a2c96abcb10ab532cf924a4d689659b21be52e62e89d93160a3c5473db76152c288e7ebb4ca01b0db533ca643fa1477e0a90a1d33db387d6a6547b0efe472396e6868cd3f1492edb9631c2b4645f84d867eb8158297da13ac5118ac79e6e549c3dfaa281d4d493759825e6226fb6064fd4bb102882ca039e8026abbfd8128e92ff38f0edb3b0d4ae9305d8f8877d337959a3c4b54b9ef2f37cac4d7074d8dfbf27f0b53b44c6993dbb7f86c3d0df056001ddc0c737c360ed9e2ba8ba405c6273dfd37c752926611d2b32c9eddea904740c847b029c5694171137d77d409eb87d6484f237754bcf94519d8b0e21ee5f2c4103ad3cfd358047c67d1402c94507b11917337277b51fdcb867415a8b4b5d54bd253091d229b4d38daf0d9f50a3b916b6ca9615b3e28890f5709b30aa7bcf8ba7d2d2cfc2aa09452422ed2211ac40b354ec832982d92978ac820a789368c29804670329e3463e3a6742d26f4dd2afd0b6911763bd2ad2a036", @ANYRES16=r1, @ANYBLOB="01002cbd7000000000010100000004000180"], 0x18}, 0x1, 0xff07}, 0x2000000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x55, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x709, {0x1, 0x1, 0x88, 0x5}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2509000000300006800500020009000000050002000100000008000700", @ANYRES32=r3, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x2004004}, 0x40004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000000000006111880000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1m29.984979371s ago: executing program 3 (id=7566): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) r1 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0xc8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 33 (id=7560): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007cb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): no interface number 0 [ 1877.648675][T10318] usb 4-1: config 0 interface 153 has no altsetting 0 [ 1877.722446][T10318] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1877.740908][T10318] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1877.784275][T10318] usb 4-1: Product: syz [ 1877.799416][T10318] usb 4-1: Manufacturer: syz [ 1877.804550][T10318] usb 4-1: SerialNumber: syz [ 1877.974958][T10318] usb 4-1: config 0 descriptor?? [ 1878.570589][T30488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7369'. [ 1878.656873][T30489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.689239][T10313] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1878.690513][T30489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.868728][T10313] usb 3-1: Using ep0 maxpacket: 16 [ 1878.945170][T10313] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 1879.049525][T10313] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 1879.090107][T10318] hub 4-1:0.153: bad descriptor, ignoring hub [ 1879.098508][T10318] hub 4-1:0.153: probe with driver hub failed with error -5 [ 1879.098801][T10313] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.118925][T10313] usb 3-1: config 166 has no interface number 0 [ 1879.121112][T10318] sierra 4-1:0.153: Sierra USB modem converter detected [ 1879.126980][T10313] usb 3-1: config 166 has no interface number 1 [ 1879.139854][T10313] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1879.152127][T10313] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1879.165239][T10313] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1879.178617][T10313] usb 3-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1879.182341][T10318] usb 4-1: USB disconnect, device number 16 [ 1879.225886][T10318] sierra 4-1:0.153: device disconnected [ 1879.302098][T10313] usb 3-1: config 166 interface 177 has no altsetting 0 [ 1879.309503][T10313] usb 3-1: config 166 interface 34 has no altsetting 0 [ 1879.350209][T10313] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1879.363106][T10313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.372036][T10313] usb 3-1: Product: syz [ 1879.376457][T10313] usb 3-1: Manufacturer: syz [ 1879.381271][T10313] usb 3-1: SerialNumber: syz [ 1879.810251][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 1879.810268][ T29] audit: type=1326 audit(1782323459.054:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1879.852880][ T29] audit: type=1326 audit(1782323459.054:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1879.879811][ T29] audit: type=1326 audit(1782323459.054:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1879.907825][T10313] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 1880.076604][ T29] audit: type=1326 audit(1782323459.054:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1881.129370][T10313] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 1881.147209][ T29] audit: type=1326 audit(1782323459.054:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1881.195346][ T29] audit: type=1326 audit(1782323459.054:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1881.211403][T10313] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1881.268278][ T29] audit: type=1326 audit(1782323459.054:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1881.296385][ T29] audit: type=1326 audit(1782323459.054:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1881.303561][T10313] uvcvideo 3-1:166.34: No valid video chain found. [ 1881.331845][ T29] audit: type=1326 audit(1782323459.054:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1881.357801][T10313] usb 3-1: USB disconnect, device number 121 [ 1881.398463][ T29] audit: type=1326 audit(1782323459.054:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.2.7366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8759ce59 code=0x7ffc0000 [ 1881.520750][T10318] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1881.778293][T10318] usb 4-1: Using ep0 maxpacket: 16 [ 1881.785236][T10318] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 1881.794190][T10318] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 1881.812792][T10318] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.858797][T10318] usb 4-1: config 166 has no interface number 0 [ 1881.878491][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7378'. [ 1881.896732][T10318] usb 4-1: config 166 has no interface number 1 [ 1881.916331][T10318] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1881.938259][T10318] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1881.950664][T10318] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1881.961879][T10318] usb 4-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1881.975836][T10318] usb 4-1: config 166 interface 177 has no altsetting 0 [ 1881.983445][T10318] usb 4-1: config 166 interface 34 has no altsetting 0 [ 1881.995303][T10318] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1882.005552][T10318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.017491][T10318] usb 4-1: Product: syz [ 1882.022448][T10318] usb 4-1: Manufacturer: syz [ 1882.027355][T10318] usb 4-1: SerialNumber: syz [ 1882.293000][T10318] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 1882.378843][T26983] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1882.402062][T10318] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 1882.517954][T10318] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1882.526301][T10318] uvcvideo 4-1:166.34: No valid video chain found. [ 1882.547942][T10318] usb 4-1: USB disconnect, device number 17 [ 1882.560931][T26983] usb 1-1: Using ep0 maxpacket: 32 [ 1882.583717][T26983] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1882.614701][T26983] usb 1-1: config 0 has no interface number 0 [ 1882.638755][T26983] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1882.673225][T26983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.695338][T26983] usb 1-1: Product: syz [ 1882.704755][T26983] usb 1-1: Manufacturer: syz [ 1882.717625][T26983] usb 1-1: SerialNumber: syz [ 1882.737933][T26983] usb 1-1: config 0 descriptor?? [ 1882.755567][T26983] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1882.973208][T26983] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1882.998573][T10313] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1883.014379][T26983] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1883.269761][T10313] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.281130][T10313] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1883.290577][T10313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.328593][T26983] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1883.396230][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1883.407459][T10322] usb 1-1: USB disconnect, device number 28 [ 1883.579691][T26983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1883.688789][T26983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.744822][T10313] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1883.747897][T10322] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1883.782789][T26983] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1883.799202][T26983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 49599, setting to 1024 [ 1883.813206][T26983] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1883.823838][T10322] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1883.837982][T10322] quatech2 1-1:0.51: device disconnected [ 1883.846826][T26983] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1883.862908][T26983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.872746][T26983] usb 4-1: Product: syz [ 1883.878741][T26983] usb 4-1: Manufacturer: syz [ 1883.883906][T26983] usb 4-1: SerialNumber: syz [ 1883.917014][T26983] usb 4-1: config 0 descriptor?? [ 1883.923005][T30536] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1883.930886][T30536] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1883.945476][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1884.066821][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1884.088657][T26983] usb 4-1: NFC: Unable to get FW version [ 1884.131148][T26983] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -71 [ 1884.284221][T26983] usb 4-1: USB disconnect, device number 18 [ 1885.192220][T30551] can0: slcan on ptm0. [ 1885.257742][T27838] usb 3-1: USB disconnect, device number 122 [ 1885.298267][T26983] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1885.463503][T26983] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1885.476166][T26401] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1885.487773][T26983] usb 4-1: config 0 has no interface number 0 [ 1885.506850][T26983] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1885.527379][T26983] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1885.538917][T26983] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1885.547081][T26983] usb 4-1: Manufacturer: syz [ 1885.555422][T26983] usb 4-1: SerialNumber: syz [ 1885.567149][T26983] usb 4-1: config 0 descriptor?? [ 1885.633643][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 1885.633660][ T29] audit: type=1400 audit(1782323464.874:5049): avc: denied { write } for pid=30556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1885.648267][T26401] usb 1-1: Using ep0 maxpacket: 16 [ 1885.715136][T26401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.732342][T26401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.753099][T26401] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1885.767900][T26401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.807123][ T29] audit: type=1400 audit(1782323465.024:5050): avc: denied { write } for pid=30569 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1885.881611][T26401] usb 1-1: config 0 descriptor?? [ 1885.952921][ T46] usb 4-1: USB disconnect, device number 19 [ 1886.479825][T10313] page_pool_release_retry() stalled pool shutdown: id 121, 50 inflight 303 sec [ 1887.626532][T26401] usbhid 1-1:0.0: can't add hid device: -71 [ 1887.660018][T10313] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1887.674622][T26401] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1887.795251][T26401] usb 1-1: USB disconnect, device number 29 [ 1887.820800][T30550] can0 (unregistered): slcan off ptm0. [ 1887.880534][T10313] usb 4-1: Using ep0 maxpacket: 32 [ 1887.912756][T10313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1887.947530][T30600] FAULT_INJECTION: forcing a failure. [ 1887.947530][T30600] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.949341][T10313] usb 4-1: config 3 has an invalid interface number: 212 but max is 0 [ 1888.001836][T30600] CPU: 0 UID: 0 PID: 30600 Comm: syz.5.7397 Tainted: G L syzkaller #0 PREEMPT(full) [ 1888.001870][T30600] Tainted: [L]=SOFTLOCKUP [ 1888.001878][T30600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1888.001891][T30600] Call Trace: [ 1888.001899][T30600] [ 1888.001907][T30600] dump_stack_lvl+0x100/0x190 [ 1888.001940][T30600] should_fail_ex.cold+0x5/0xa [ 1888.001970][T30600] should_failslab+0xc2/0x120 [ 1888.001997][T30600] __kmalloc_noprof+0xfc/0x820 [ 1888.002022][T30600] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1888.002055][T30600] kernfs_fop_write_iter+0x26a/0x5f0 [ 1888.002085][T30600] vfs_write+0x6ac/0x1050 [ 1888.002123][T30600] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1888.002152][T30600] ? __pfx_vfs_write+0x10/0x10 [ 1888.002202][T30600] ksys_write+0x12a/0x250 [ 1888.002233][T30600] ? __pfx_ksys_write+0x10/0x10 [ 1888.002272][T30600] do_syscall_64+0x115/0x870 [ 1888.002293][T30600] ? clear_bhb_loop+0x40/0x90 [ 1888.002320][T30600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.002342][T30600] RIP: 0033:0x7f7fcb39ce59 [ 1888.002360][T30600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.002380][T30600] RSP: 002b:00007f7fcc181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1888.002398][T30600] RAX: ffffffffffffffda RBX: 00007f7fcb616090 RCX: 00007f7fcb39ce59 [ 1888.002412][T30600] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000009 [ 1888.002424][T30600] RBP: 00007f7fcc181090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.002435][T30600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.002446][T30600] R13: 00007f7fcb616128 R14: 00007f7fcb616090 R15: 00007ffe87344738 [ 1888.002474][T30600] [ 1888.012516][T10313] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.201574][T10313] usb 4-1: config 3 has no interface number 0 [ 1888.207896][T10313] usb 4-1: config 3 interface 212 has no altsetting 0 [ 1888.217967][T10313] usb 4-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=c1.67 [ 1888.230101][T10313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.239162][T10313] usb 4-1: Product: syz [ 1888.243684][T10313] usb 4-1: Manufacturer: syz [ 1888.259176][T10322] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1888.264731][T10313] usb 4-1: SerialNumber: syz [ 1888.478671][T10322] usb 6-1: Using ep0 maxpacket: 32 [ 1888.567753][T10322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1888.698145][T10322] usb 6-1: config 3 has an invalid interface number: 212 but max is 0 [ 1888.757156][T10322] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.816188][T10322] usb 6-1: config 3 has no interface number 0 [ 1888.848038][ T29] audit: type=1400 audit(1782323468.084:5051): avc: denied { write } for pid=30594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.875286][T10322] usb 6-1: config 3 interface 212 has no altsetting 0 [ 1888.964492][T10322] usb 6-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=c1.67 [ 1888.974752][T10322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.987220][T10322] usb 6-1: Product: syz [ 1888.997430][T10322] usb 6-1: Manufacturer: syz [ 1889.006578][T10322] usb 6-1: SerialNumber: syz [ 1889.137062][ T29] audit: type=1400 audit(1782323468.374:5052): avc: denied { write } for pid=30616 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1889.224359][T30618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7399'. [ 1889.233413][T30618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7399'. [ 1889.283560][T30618] batadv0: entered promiscuous mode [ 1889.291022][T30618] macsec1: entered promiscuous mode [ 1889.297487][T30618] macsec1: entered allmulticast mode [ 1889.302908][T30618] batadv0: entered allmulticast mode [ 1889.312182][T30618] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1889.720460][ T29] audit: type=1326 audit(1782323468.964:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.1.7401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1889.766196][T30621] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1889.834822][ T29] audit: type=1326 audit(1782323468.984:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.1.7401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1889.970570][ T29] audit: type=1326 audit(1782323468.984:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.1.7401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1890.040291][T10313] rndis_host 4-1:3.212: skipping garbage [ 1890.046374][T10313] rndis_host 4-1:3.212: More than one union descriptor, skipping ... [ 1890.094177][ T29] audit: type=1326 audit(1782323468.994:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.1.7401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1890.151759][T10313] rndis_host 4-1:3.212: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1890.169936][T10313] cdc_acm 4-1:3.212: skipping garbage [ 1890.177469][ T29] audit: type=1326 audit(1782323468.994:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.1.7401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1890.180705][T10313] cdc_acm 4-1:3.212: More than one union descriptor, skipping ... [ 1890.230525][T10313] usb 4-1: USB disconnect, device number 20 [ 1890.254200][ T29] audit: type=1326 audit(1782323469.004:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.1.7401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1890.343583][T30628] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1890.559981][T10313] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1890.717294][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 1890.717310][ T29] audit: type=1400 audit(1782323469.954:5129): avc: denied { write } for pid=30644 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1890.721335][T10313] usb 4-1: Using ep0 maxpacket: 32 [ 1890.753762][T30646] FAULT_INJECTION: forcing a failure. [ 1890.753762][T30646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.778608][T30646] CPU: 0 UID: 0 PID: 30646 Comm: syz.0.7405 Tainted: G L syzkaller #0 PREEMPT(full) [ 1890.778640][T30646] Tainted: [L]=SOFTLOCKUP [ 1890.778646][T30646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1890.778658][T30646] Call Trace: [ 1890.778666][T30646] [ 1890.778674][T30646] dump_stack_lvl+0x100/0x190 [ 1890.778708][T30646] should_fail_ex.cold+0x5/0xa [ 1890.778736][T30646] _copy_from_user+0x2e/0xd0 [ 1890.778758][T30646] __sys_bpf+0x2f5/0x4e80 [ 1890.778788][T30646] ? __pfx___sys_bpf+0x10/0x10 [ 1890.778808][T30646] ? find_held_lock+0x2b/0x80 [ 1890.778826][T30646] ? get_pid_task+0xfc/0x250 [ 1890.778844][T30646] ? get_pid_task+0xfc/0x250 [ 1890.778869][T30646] ? find_held_lock+0x2b/0x80 [ 1890.778893][T30646] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1890.778924][T30646] ? find_held_lock+0x2b/0x80 [ 1890.778941][T30646] ? ksys_write+0x190/0x250 [ 1890.778967][T30646] ? ksys_write+0x190/0x250 [ 1890.779016][T30646] ? fput+0x79/0x100 [ 1890.779041][T30646] ? __x64_sys_bpf+0xce/0x140 [ 1890.779061][T30646] __x64_sys_bpf+0xce/0x140 [ 1890.779082][T30646] ? do_syscall_64+0x90/0x870 [ 1890.779105][T30646] do_syscall_64+0x115/0x870 [ 1890.779124][T30646] ? clear_bhb_loop+0x40/0x90 [ 1890.779149][T30646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.779170][T30646] RIP: 0033:0x7f729279ce59 [ 1890.779189][T30646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1890.779208][T30646] RSP: 002b:00007f72936db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1890.779229][T30646] RAX: ffffffffffffffda RBX: 00007f7292a15fa0 RCX: 00007f729279ce59 [ 1890.779243][T30646] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1890.779257][T30646] RBP: 00007f72936db090 R08: 0000000000000000 R09: 0000000000000000 [ 1890.779270][T30646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.779282][T30646] R13: 00007f7292a16038 R14: 00007f7292a15fa0 R15: 00007ffc4952b078 [ 1890.779311][T30646] [ 1890.780077][T10313] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1890.884833][T10322] rndis_host 6-1:3.212: skipping garbage [ 1890.949153][T10313] usb 4-1: config 0 has no interface number 0 [ 1890.959183][T10322] rndis_host 6-1:3.212: More than one union descriptor, skipping ... [ 1891.017596][T10322] rndis_host 6-1:3.212: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1891.082535][T10322] cdc_acm 6-1:3.212: skipping garbage [ 1891.094408][T10322] cdc_acm 6-1:3.212: More than one union descriptor, skipping ... [ 1891.186987][T30656] netlink: 'syz.0.7407': attribute type 1 has an invalid length. [ 1891.195726][T30656] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1891.221606][T10322] usb 6-1: USB disconnect, device number 86 [ 1891.884290][T10313] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1892.082291][T10313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.128370][T10313] usb 4-1: Product: syz [ 1892.134263][T10313] usb 4-1: Manufacturer: syz [ 1892.139011][T10313] usb 4-1: SerialNumber: syz [ 1892.159080][T10313] usb 4-1: config 0 descriptor?? [ 1892.175984][T10313] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1892.575473][T30669] can0: slcan on ptm0. [ 1892.637697][ T29] audit: type=1400 audit(1782323471.874:5130): avc: denied { write } for pid=30648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1892.639569][T10313] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1892.794474][T10313] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1892.798918][T10322] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1892.966471][ T29] audit: type=1400 audit(1782323472.204:5131): avc: denied { write } for pid=30682 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1892.992340][T10322] usb 6-1: Using ep0 maxpacket: 16 [ 1893.015799][T10322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.061453][T10322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1893.100740][T10322] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1893.142723][T10322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.185761][T10322] usb 6-1: config 0 descriptor?? [ 1893.214778][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1893.224200][T10313] usb 4-1: USB disconnect, device number 21 [ 1893.253939][T10313] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1893.320479][T10313] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1893.366489][T10313] quatech2 4-1:0.51: device disconnected [ 1893.937387][T10322] usbhid 6-1:0.0: can't add hid device: -71 [ 1894.913355][T10322] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1895.023598][T10322] usb 6-1: USB disconnect, device number 87 [ 1895.060079][T30668] can0 (unregistered): slcan off ptm0. [ 1895.317467][ T29] audit: type=1400 audit(1782323474.554:5132): avc: denied { write } for pid=30686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1895.355531][T30702] lo speed is unknown, defaulting to 1000 [ 1895.575560][ T29] audit: type=1400 audit(1782323474.814:5133): avc: denied { write } for pid=30711 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1895.648253][T10322] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1895.820297][T10322] usb 1-1: Using ep0 maxpacket: 16 [ 1895.834593][T10322] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 1895.860373][T10322] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 1895.882923][T10322] usb 1-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.914105][T10322] usb 1-1: config 166 has no interface number 0 [ 1896.456413][T30719] syz.5.7418 (30719): drop_caches: 2 [ 1896.481561][T10322] usb 1-1: config 166 has no interface number 1 [ 1896.500394][T10322] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1896.547948][T10322] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1896.598278][T10320] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1896.620464][T10322] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1896.660898][T10322] usb 1-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1896.729005][T10322] usb 1-1: config 166 interface 177 has no altsetting 0 [ 1896.820216][T10322] usb 1-1: config 166 interface 34 has no altsetting 0 [ 1896.849725][T10320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1896.879938][T10322] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1896.906938][T10320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.922058][T10322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.935586][T10320] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1896.954399][T10322] usb 1-1: Product: syz [ 1896.960335][T10322] usb 1-1: Manufacturer: syz [ 1896.967271][T10320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 49599, setting to 1024 [ 1896.987109][T10322] usb 1-1: SerialNumber: syz [ 1896.994705][T10320] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1897.010753][T10320] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1897.028750][T10320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.040064][T10320] usb 4-1: Product: syz [ 1897.056063][T10320] usb 4-1: Manufacturer: syz [ 1897.071372][T10320] usb 4-1: SerialNumber: syz [ 1897.095456][T10320] usb 4-1: config 0 descriptor?? [ 1897.111252][T30716] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1897.128926][T30716] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1897.156729][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1897.172704][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1897.188699][T10320] usb 4-1: NFC: Unable to get FW version [ 1897.214610][T10320] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -71 [ 1897.234570][ T29] audit: type=1326 audit(1782323476.474:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1897.344793][ T29] audit: type=1326 audit(1782323476.474:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1897.424554][T10322] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 1897.457800][ T29] audit: type=1326 audit(1782323476.474:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1897.459788][T10320] usb 4-1: USB disconnect, device number 22 [ 1897.596838][T10322] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 1897.637550][ T29] audit: type=1326 audit(1782323476.474:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1897.717524][ T29] audit: type=1326 audit(1782323476.474:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1897.812559][T10322] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1897.834258][ T29] audit: type=1326 audit(1782323476.534:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1897.865429][T10322] uvcvideo 1-1:166.34: No valid video chain found. [ 1897.880415][T10322] usb 1-1: USB disconnect, device number 30 [ 1897.912436][ T29] audit: type=1326 audit(1782323476.534:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1897.967569][ T29] audit: type=1326 audit(1782323476.534:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1898.047274][ T29] audit: type=1326 audit(1782323476.534:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1898.086329][T26983] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1898.131403][ T29] audit: type=1326 audit(1782323476.534:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30709 comm="syz.0.7416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1898.288613][T26983] usb 6-1: Using ep0 maxpacket: 16 [ 1898.341125][T26983] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1898.350013][T26983] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1898.364236][T26983] usb 6-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.472122][T26983] usb 6-1: config 166 has no interface number 0 [ 1898.577752][T26983] usb 6-1: config 166 has no interface number 1 [ 1898.590475][T26983] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1898.635136][T26983] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1898.695476][T26983] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1898.727973][T26983] usb 6-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1898.745849][T26983] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1898.753183][T26983] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1898.762732][T26983] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1898.772306][T26983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.780666][T26983] usb 6-1: Product: syz [ 1898.785002][T26983] usb 6-1: Manufacturer: syz [ 1898.790123][T26983] usb 6-1: SerialNumber: syz [ 1899.131694][T30762] loop6: detected capacity change from 0 to 2640 [ 1899.138626][T30762] buffer_io_error: 11 callbacks suppressed [ 1899.138643][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.152402][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.160342][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.168302][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.176188][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.184134][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.192073][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.200001][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.207805][T30762] ldm_validate_partition_table(): Disk read failed. [ 1899.214525][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.222463][T30762] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.230485][T30762] Dev loop6: unable to read RDB block 0 [ 1899.236413][T30762] loop6: unable to read partition table [ 1899.242291][T30762] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1899.832916][T30742] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1900.136698][T10320] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1900.247260][T26983] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 1900.452724][T26983] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 1900.463119][T10320] usb 1-1: Using ep0 maxpacket: 32 [ 1900.675792][T10320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.701854][T10320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.725865][T10320] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1900.750046][T10320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.798075][T26983] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1900.807478][T26983] uvcvideo 6-1:166.34: No valid video chain found. [ 1900.814942][T10320] usb 1-1: config 0 descriptor?? [ 1900.840130][T10320] hub 1-1:0.0: USB hub found [ 1900.912136][T26983] usb 6-1: USB disconnect, device number 88 [ 1900.925299][T30779] qnx4: unable to read the superblock [ 1901.024274][T30779] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1902.038269][T10313] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1902.090946][T10320] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1902.143695][T10320] usbhid 1-1:0.0: can't add hid device: -71 [ 1902.163261][T10320] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1902.219229][T10313] usb 4-1: Using ep0 maxpacket: 32 [ 1902.259070][T10313] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 1902.291241][T10313] usb 4-1: config 0 has no interface number 0 [ 1902.308589][T10313] usb 4-1: config 0 interface 153 has no altsetting 0 [ 1902.340551][T10313] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1902.376976][T10313] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1902.397475][T30800] can0: slcan on ptm0. [ 1902.402309][T10313] usb 4-1: Product: syz [ 1902.415703][T10313] usb 4-1: Manufacturer: syz [ 1902.429588][T10313] usb 4-1: SerialNumber: syz [ 1902.469720][T10313] usb 4-1: config 0 descriptor?? [ 1902.492408][T10320] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 1902.530074][T10320] usb 1-1: device reset changed ep0 maxpacket size! [ 1902.570245][T10320] usb 1-1: USB disconnect, device number 31 [ 1902.658269][T10322] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1902.848591][T30810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.865386][T30810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.876162][T10322] usb 3-1: Using ep0 maxpacket: 16 [ 1902.907931][T10320] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1903.041123][T10322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.232826][T10322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.258443][T10322] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1903.268298][T10322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.278275][T10320] usb 1-1: Using ep0 maxpacket: 16 [ 1903.289825][T10320] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 1903.302988][T10320] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 1903.321497][T10322] usb 3-1: config 0 descriptor?? [ 1903.332154][T10320] usb 1-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.357073][T10313] hub 4-1:0.153: bad descriptor, ignoring hub [ 1903.366678][T10320] usb 1-1: config 166 has no interface number 0 [ 1903.377476][T10320] usb 1-1: config 166 has no interface number 1 [ 1903.384164][T10320] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1903.395651][T10320] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1903.404452][T10313] hub 4-1:0.153: probe with driver hub failed with error -5 [ 1903.417437][T10320] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1903.449466][T10320] usb 1-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1903.475970][T10320] usb 1-1: config 166 interface 177 has no altsetting 0 [ 1903.486077][T10320] usb 1-1: config 166 interface 34 has no altsetting 0 [ 1903.494288][T10313] sierra 4-1:0.153: Sierra USB modem converter detected [ 1903.516662][T10320] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1903.546386][T10320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.579574][T10313] usb 4-1: USB disconnect, device number 23 [ 1903.597426][T10320] usb 1-1: Product: syz [ 1903.618690][T10320] usb 1-1: Manufacturer: syz [ 1903.627877][T10320] usb 1-1: SerialNumber: syz [ 1903.628835][T10313] sierra 4-1:0.153: device disconnected [ 1903.874335][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 1903.874352][ T29] audit: type=1400 audit(1782323483.114:5315): avc: denied { write } for pid=30802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1904.044576][ T29] audit: type=1326 audit(1782323483.194:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.121221][T10320] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 1904.138708][ T29] audit: type=1326 audit(1782323483.194:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.224152][ T29] audit: type=1326 audit(1782323483.234:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.286021][ T29] audit: type=1326 audit(1782323483.234:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.313833][T10322] usbhid 3-1:0.0: can't add hid device: -71 [ 1904.318643][ T29] audit: type=1326 audit(1782323483.234:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.351246][ T29] audit: type=1326 audit(1782323483.234:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.359925][T10322] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1904.387346][ T29] audit: type=1326 audit(1782323483.234:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.451502][ T29] audit: type=1326 audit(1782323483.254:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.481073][ T29] audit: type=1326 audit(1782323483.254:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30797 comm="syz.0.7436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729279ce59 code=0x7ffc0000 [ 1904.519186][T10320] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 1904.529671][T30799] can0 (unregistered): slcan off ptm0. [ 1904.542142][T10322] usb 3-1: USB disconnect, device number 123 [ 1904.698301][T10313] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1904.739921][T10320] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1904.747442][T10320] uvcvideo 1-1:166.34: No valid video chain found. [ 1904.806830][T10320] usb 1-1: USB disconnect, device number 32 [ 1904.910967][T10313] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1904.928307][T10313] usb 4-1: config 0 has no interface number 0 [ 1904.937590][T10313] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1904.963511][T10313] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1904.989290][T10313] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1905.005538][T10313] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1905.018282][T10313] usb 4-1: Manufacturer: syz [ 1905.028691][T10313] usb 4-1: SerialNumber: syz [ 1905.048856][T10313] usb 4-1: config 0 descriptor?? [ 1905.228351][T10320] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1905.383291][T10320] usb 1-1: Using ep0 maxpacket: 32 [ 1905.409698][T10320] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1905.443590][T10320] usb 1-1: config 0 has no interface number 0 [ 1905.457661][T10320] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1905.477696][T10320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.498003][T10320] usb 1-1: Product: syz [ 1905.504185][T10320] usb 1-1: Manufacturer: syz [ 1905.518115][T10320] usb 1-1: SerialNumber: syz [ 1905.539525][T10320] usb 1-1: config 0 descriptor?? [ 1905.567065][T10320] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1905.814886][T10320] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1905.861754][T10320] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1906.505927][T30869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7449'. [ 1906.681341][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1906.683046][T26401] usb 1-1: USB disconnect, device number 33 [ 1906.738366][T26401] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1906.816567][T26401] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1906.849613][T26401] quatech2 1-1:0.51: device disconnected [ 1906.998638][T10320] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1907.013132][T10313] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1907.042768][T10313] usb 4-1: USB disconnect, device number 24 [ 1907.158280][T10320] usb 6-1: Using ep0 maxpacket: 32 [ 1907.172902][T10320] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 1907.184881][T10320] usb 6-1: config 0 has no interface number 0 [ 1907.191772][T10320] usb 6-1: config 0 interface 153 has no altsetting 0 [ 1907.203514][T10320] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1907.213181][T10320] usb 6-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1907.221881][T10320] usb 6-1: Product: syz [ 1907.229129][T10320] usb 6-1: Manufacturer: syz [ 1907.234360][T10320] usb 6-1: SerialNumber: syz [ 1907.257615][T10320] usb 6-1: config 0 descriptor?? [ 1907.828722][T30885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.882548][T30885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.014396][T10320] hub 6-1:0.153: bad descriptor, ignoring hub [ 1908.062678][T10320] hub 6-1:0.153: probe with driver hub failed with error -5 [ 1908.132995][T10320] sierra 6-1:0.153: Sierra USB modem converter detected [ 1908.225331][T10320] usb 6-1: USB disconnect, device number 89 [ 1908.283821][T10320] sierra 6-1:0.153: device disconnected [ 1909.138914][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1911.410385][T30924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7464'. [ 1913.491477][T10322] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1913.682660][T10322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1913.696158][T10322] usb 1-1: not running at top speed; connect to a high speed hub [ 1913.716440][T10322] usb 1-1: config 6 has an invalid interface number: 91 but max is 0 [ 1913.729504][T10322] usb 1-1: config 6 has no interface number 0 [ 1913.735726][T10322] usb 1-1: config 6 interface 91 has no altsetting 0 [ 1913.763620][T10322] usb 1-1: New USB device found, idVendor=9022, idProduct=d483, bcdDevice=50.e4 [ 1913.786979][T10322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.812016][T10322] usb 1-1: Product: syz [ 1913.818798][T10322] usb 1-1: Manufacturer: syz [ 1913.824036][T10322] usb 1-1: SerialNumber: syz [ 1913.898286][T10318] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1914.077654][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1914.077671][ T29] audit: type=1400 audit(1782323493.314:5351): avc: denied { accept } for pid=30928 comm="syz.0.7468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1914.091427][T10318] usb 6-1: Using ep0 maxpacket: 32 [ 1914.182035][T10318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.539277][T10318] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1914.974562][T10318] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1915.000632][T10318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.052402][T10318] usb 6-1: Product: syz [ 1915.073143][T10318] usb 6-1: Manufacturer: syz [ 1915.091883][T10318] usb 6-1: SerialNumber: syz [ 1915.225443][T30959] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1916.027844][T30970] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1 [ 1916.438155][T10318] usb 6-1: USB disconnect, device number 90 [ 1916.887021][T10322] dvb-usb: found a 'TeVii S482 (tuner 1)' in warm state. [ 1916.924896][T10322] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1916.976580][T10322] dvb-usb: bulk message failed: -22 (2/0) [ 1917.007817][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000097 [ 1917.044027][T10322] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1917.070549][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x6000000000b [ 1917.086627][T10322] dvb-usb: TeVii S482 (tuner 1) error while loading driver (-19) [ 1917.314213][T10322] usb 1-1: USB disconnect, device number 34 [ 1917.321602][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x600000000fb [ 1917.360469][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x6000000002b [ 1917.399832][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x600000000fb [ 1917.427335][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x6000000002b [ 1917.456490][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x600000000fb [ 1917.481242][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x6000000002b [ 1917.528624][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x600000000fb [ 1917.568868][T30980] kvm: kvm [30979]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x6000000002b [ 1917.584583][ T29] audit: type=1400 audit(1782323496.824:5352): avc: denied { setopt } for pid=30984 comm="syz.2.7486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1918.573775][T30997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7487'. [ 1919.664656][ T29] audit: type=1326 audit(1782323498.904:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.3.7492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920399ce59 code=0x7ffc0000 [ 1919.756327][ T29] audit: type=1326 audit(1782323498.904:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.3.7492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920399ce59 code=0x7ffc0000 [ 1920.007774][ T29] audit: type=1326 audit(1782323498.934:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.3.7492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f920399ce59 code=0x7ffc0000 [ 1920.559695][ T29] audit: type=1326 audit(1782323498.944:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.3.7492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920399ce59 code=0x7ffc0000 [ 1920.729128][T10318] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1920.766343][ T29] audit: type=1326 audit(1782323498.944:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.3.7492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920399ce59 code=0x7ffc0000 [ 1920.895980][T31019] netlink: 'syz.5.7496': attribute type 1 has an invalid length. [ 1920.904104][T31019] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7496'. [ 1922.153586][T10318] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.225708][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7498'. [ 1922.234890][T31028] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7498'. [ 1922.244317][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7498'. [ 1922.253300][T31028] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7498'. [ 1922.262923][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7498'. [ 1922.589361][T10318] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1922.617780][T10318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.650842][T10318] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1922.784524][T31031] syzkaller0: entered promiscuous mode [ 1922.800392][T31031] syzkaller0: entered allmulticast mode [ 1923.509966][T10313] usb 3-1: USB disconnect, device number 124 [ 1924.368725][ T5776] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1924.608356][ T5776] usb 6-1: Using ep0 maxpacket: 16 [ 1924.626732][ T5776] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1924.660561][ T5776] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1924.696585][ T5776] usb 6-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.739855][ T5776] usb 6-1: config 166 has no interface number 0 [ 1924.776119][ T5776] usb 6-1: config 166 has no interface number 1 [ 1924.808749][ T5776] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1924.841305][ T5776] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1924.853595][T31062] FAULT_INJECTION: forcing a failure. [ 1924.853595][T31062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1924.876946][ T5776] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1924.888591][ T29] audit: type=1326 audit(1782323504.114:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1924.916069][T31062] CPU: 1 UID: 0 PID: 31062 Comm: syz.2.7509 Tainted: G L syzkaller #0 PREEMPT(full) [ 1924.916101][T31062] Tainted: [L]=SOFTLOCKUP [ 1924.916109][T31062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1924.916121][T31062] Call Trace: [ 1924.916127][T31062] [ 1924.916134][T31062] dump_stack_lvl+0x100/0x190 [ 1924.916166][T31062] should_fail_ex.cold+0x5/0xa [ 1924.916193][T31062] _copy_from_user+0x2e/0xd0 [ 1924.916213][T31062] copy_msghdr_from_user+0x9f/0x4c0 [ 1924.916236][T31062] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1924.916271][T31062] ___sys_sendmsg+0x106/0x1e0 [ 1924.916293][T31062] ? __pfx____sys_sendmsg+0x10/0x10 [ 1924.916309][T31062] ? __lock_acquire+0x49f/0x1a40 [ 1924.916335][T31062] ? get_pid_task+0x106/0x250 [ 1924.916382][T31062] __sys_sendmsg+0x160/0x210 [ 1924.916405][T31062] ? __pfx___sys_sendmsg+0x10/0x10 [ 1924.916439][T31062] do_syscall_64+0x115/0x870 [ 1924.916456][T31062] ? clear_bhb_loop+0x40/0x90 [ 1924.916477][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.916495][T31062] RIP: 0033:0x7feb8759ce59 [ 1924.916510][T31062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.916529][T31062] RSP: 002b:00007feb857f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1924.916546][T31062] RAX: ffffffffffffffda RBX: 00007feb87815fa0 RCX: 00007feb8759ce59 [ 1924.916558][T31062] RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 1924.916569][T31062] RBP: 00007feb857f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.916579][T31062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1924.916589][T31062] R13: 00007feb87816038 R14: 00007feb87815fa0 R15: 00007ffdc8c05368 [ 1924.916613][T31062] [ 1925.106239][ T5776] usb 6-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1925.119594][ T5776] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1925.126558][ T5776] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1925.141502][ T29] audit: type=1326 audit(1782323504.134:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.168437][ T29] audit: type=1326 audit(1782323504.134:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.197015][ T29] audit: type=1326 audit(1782323504.134:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.223686][ T29] audit: type=1326 audit(1782323504.134:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.250320][ T29] audit: type=1326 audit(1782323504.134:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.276978][ T29] audit: type=1326 audit(1782323504.134:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.304158][ T5776] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1925.308399][ T29] audit: type=1326 audit(1782323504.134:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.313315][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.347894][ T5776] usb 6-1: Product: syz [ 1925.352188][ T5776] usb 6-1: Manufacturer: syz [ 1925.356784][ T5776] usb 6-1: SerialNumber: syz [ 1925.374081][ T29] audit: type=1326 audit(1782323504.134:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.404329][ T29] audit: type=1326 audit(1782323504.134:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.7510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1925.488274][T10318] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1925.586092][ T5776] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 1925.669889][T10318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1925.672909][ T5776] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 1925.686771][T10318] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1925.711703][T10318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1925.730650][T10318] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1925.740640][T10318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.758607][T10318] usb 4-1: Product: syz [ 1925.765672][T10318] usb 4-1: Manufacturer: syz [ 1925.773109][T10318] usb 4-1: SerialNumber: syz [ 1925.797642][T10318] usb 4-1: config 0 descriptor?? [ 1925.808451][ T5776] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1925.816356][ T5776] uvcvideo 6-1:166.34: No valid video chain found. [ 1925.830744][T31068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1925.847823][T31068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1925.881402][ T5776] usb 6-1: USB disconnect, device number 91 [ 1925.882714][T10318] usb 4-1: ucan: probing device on interface #0 [ 1926.016795][T31080] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1 [ 1927.287161][T10318] usb 4-1: ucan: failed to retrieve device info [ 1927.306599][T10318] usb 4-1: ucan: probe failed; try to update the device firmware [ 1927.540536][T20701] Bluetooth: hci4: command 0x0406 tx timeout [ 1927.626044][T31086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7515'. [ 1927.643172][T10318] usb 4-1: USB disconnect, device number 25 [ 1927.888329][ T5776] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1928.028284][ T5776] usb 3-1: device descriptor read/64, error -71 [ 1928.208252][T10318] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1928.318385][ T5776] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1928.388372][T10318] usb 1-1: Using ep0 maxpacket: 32 [ 1928.396086][T10318] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 1928.405924][T10318] usb 1-1: config 0 has no interface number 0 [ 1928.413893][T10318] usb 1-1: config 0 interface 153 has no altsetting 0 [ 1928.457292][T10318] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1928.468284][ T5776] usb 3-1: device descriptor read/64, error -71 [ 1928.506491][T10318] usb 1-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1928.529422][T10318] usb 1-1: Product: syz [ 1928.538099][T10318] usb 1-1: Manufacturer: syz [ 1928.543258][T10318] usb 1-1: SerialNumber: syz [ 1928.547112][T31114] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1 [ 1928.555153][T10318] usb 1-1: config 0 descriptor?? [ 1928.562268][T27838] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1928.578877][ T5776] usb usb3-port1: attempt power cycle [ 1928.724446][T27838] usb 6-1: Using ep0 maxpacket: 32 [ 1928.745400][T27838] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1928.775933][T27838] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1929.307351][T27838] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1929.319215][T27838] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1929.330364][T31101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.339099][T31101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.346883][T27838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.370133][ T5776] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1929.380546][T10318] hub 1-1:0.153: bad descriptor, ignoring hub [ 1929.399791][ T5776] usb 3-1: device descriptor read/8, error -71 [ 1929.471455][T27838] usb 6-1: Product: syz [ 1929.476571][T10318] hub 1-1:0.153: probe with driver hub failed with error -5 [ 1929.484261][T27838] usb 6-1: Manufacturer: syz [ 1929.492351][T27838] usb 6-1: SerialNumber: syz [ 1929.497949][T10318] sierra 1-1:0.153: Sierra USB modem converter detected [ 1929.507434][T27838] usb 6-1: config 0 descriptor?? [ 1929.540890][T10318] usb 1-1: USB disconnect, device number 35 [ 1929.553149][T10318] sierra 1-1:0.153: device disconnected [ 1929.648349][ T5776] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1929.678968][ T5776] usb 3-1: device descriptor read/8, error -71 [ 1929.788502][ T5776] usb usb3-port1: unable to enumerate USB device [ 1929.930026][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 1929.930061][ T29] audit: type=1326 audit(1929.921:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb39ce59 code=0x7ffc0000 [ 1929.975319][T27838] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1929.986786][T31131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7531'. [ 1930.018865][T31131] netlink: 75 bytes leftover after parsing attributes in process `syz.1.7531'. [ 1930.041621][ T29] audit: type=1326 audit(1929.941:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb39ce59 code=0x7ffc0000 [ 1930.098821][ T29] audit: type=1326 audit(1929.941:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7fcb39caeb code=0x7ffc0000 [ 1930.126657][ T29] audit: type=1326 audit(1929.941:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7fcb39caeb code=0x7ffc0000 [ 1930.153217][ T29] audit: type=1326 audit(1929.951:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fcb35d68e code=0x7ffc0000 [ 1930.167768][T31112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.186201][ T29] audit: type=1326 audit(1930.151:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb39ce59 code=0x7ffc0000 [ 1930.215702][ T29] audit: type=1326 audit(1930.151:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb39ce59 code=0x7ffc0000 [ 1930.243419][T31112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.269873][ T29] audit: type=1326 audit(1930.151:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fcb35d68e code=0x7ffc0000 [ 1930.298309][ T5776] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1930.316672][ T29] audit: type=1326 audit(1930.151:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7fcb39caeb code=0x7ffc0000 [ 1930.345504][ T29] audit: type=1326 audit(1930.151:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.7525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7fcb39caeb code=0x7ffc0000 [ 1930.458305][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 1930.465453][ T5776] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 1930.483225][ T5776] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 1930.494480][ T5776] usb 1-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.508512][T10318] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1930.510641][ T5776] usb 1-1: config 166 has no interface number 0 [ 1930.524951][ T5776] usb 1-1: config 166 has no interface number 1 [ 1930.536782][ T5776] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1930.550053][ T5776] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1930.562117][ T5776] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1930.584088][ T5776] usb 1-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1930.598727][ T5776] usb 1-1: config 166 interface 177 has no altsetting 0 [ 1930.605768][ T5776] usb 1-1: config 166 interface 34 has no altsetting 0 [ 1930.617278][ T5776] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1930.629833][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.639485][ T5776] usb 1-1: Product: syz [ 1930.643748][ T5776] usb 1-1: Manufacturer: syz [ 1930.649578][ T5776] usb 1-1: SerialNumber: syz [ 1930.668983][T10318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1930.686177][T10318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.696848][T10318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1930.707012][T10318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 49599, setting to 1024 [ 1930.732253][T10318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1930.744484][T26401] usb 6-1: USB disconnect, device number 92 [ 1930.746237][T10318] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1930.788332][T10318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.820234][T10318] usb 4-1: Product: syz [ 1930.831378][T10318] usb 4-1: Manufacturer: syz [ 1930.849557][T10318] usb 4-1: SerialNumber: syz [ 1930.879436][T10318] usb 4-1: config 0 descriptor?? [ 1931.037498][T31140] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1931.052546][T31140] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1931.092091][ T5776] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 1931.141264][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1931.155411][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1931.171420][T10318] usb 4-1: NFC: Unable to get FW version [ 1931.213127][ T5776] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 1931.277404][T10318] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -71 [ 1931.306358][ T5776] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1931.314087][ T5776] uvcvideo 1-1:166.34: No valid video chain found. [ 1931.385297][T10318] usb 4-1: USB disconnect, device number 26 [ 1931.402903][ T5776] usb 1-1: USB disconnect, device number 36 [ 1931.751684][T26401] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1931.948297][T26401] usb 3-1: Using ep0 maxpacket: 32 [ 1931.973886][T26401] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1931.985736][T31179] FAULT_INJECTION: forcing a failure. [ 1931.985736][T31179] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.998802][T26401] usb 3-1: config 0 has no interface number 0 [ 1932.009993][T26401] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1932.031251][T31179] CPU: 0 UID: 0 PID: 31179 Comm: syz.5.7542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1932.031284][T31179] Tainted: [L]=SOFTLOCKUP [ 1932.031290][T31179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1932.031303][T31179] Call Trace: [ 1932.031310][T31179] [ 1932.031319][T31179] dump_stack_lvl+0x100/0x190 [ 1932.031350][T31179] should_fail_ex.cold+0x5/0xa [ 1932.031380][T31179] should_failslab+0xc2/0x120 [ 1932.031406][T31179] __kmalloc_noprof+0xfc/0x820 [ 1932.031428][T31179] ? rcu_is_watching+0x12/0xc0 [ 1932.031458][T31179] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1932.031491][T31179] tomoyo_realpath_from_path+0xb6/0x690 [ 1932.031522][T31179] tomoyo_path_number_perm+0x23c/0x580 [ 1932.031542][T31179] ? tomoyo_path_number_perm+0x22e/0x580 [ 1932.031564][T31179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1932.031615][T31179] ? find_held_lock+0x2b/0x80 [ 1932.031634][T31179] ? __fget_files+0x215/0x3d0 [ 1932.031652][T31179] ? hook_file_ioctl_common+0x140/0x440 [ 1932.031679][T31179] ? __fget_files+0x215/0x3d0 [ 1932.031705][T31179] ? __fget_files+0x21f/0x3d0 [ 1932.031730][T31179] security_file_ioctl+0xd3/0x230 [ 1932.031755][T31179] __x64_sys_ioctl+0xb7/0x210 [ 1932.031785][T31179] do_syscall_64+0x115/0x870 [ 1932.031805][T31179] ? clear_bhb_loop+0x40/0x90 [ 1932.031830][T31179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.031851][T31179] RIP: 0033:0x7f7fcb39ce59 [ 1932.031869][T31179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1932.031889][T31179] RSP: 002b:00007f7fcc181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1932.031909][T31179] RAX: ffffffffffffffda RBX: 00007f7fcb616090 RCX: 00007f7fcb39ce59 [ 1932.031923][T31179] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1932.031935][T31179] RBP: 00007f7fcc181090 R08: 0000000000000000 R09: 0000000000000000 [ 1932.031947][T31179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1932.031960][T31179] R13: 00007f7fcb616128 R14: 00007f7fcb616090 R15: 00007ffe87344738 [ 1932.031989][T31179] [ 1932.031997][T31179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1932.034483][T26401] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1932.281947][T26401] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1932.304351][T26401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.328300][T26401] usb 3-1: Product: syz [ 1932.333779][T26401] usb 3-1: Manufacturer: syz [ 1932.350791][T26401] usb 3-1: SerialNumber: syz [ 1932.378131][T26401] usb 3-1: config 0 descriptor?? [ 1932.402964][T26401] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1932.617003][T26401] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 1932.648549][T26401] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 1933.338512][T10310] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1933.509778][T10310] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1933.550719][T10310] usb 6-1: config 0 has no interface number 0 [ 1933.577707][T10310] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1933.635613][T10310] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1933.687389][T10310] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1933.722562][T10310] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1933.747282][T10310] usb 6-1: Manufacturer: syz [ 1933.773180][T10310] usb 6-1: SerialNumber: syz [ 1933.819441][T10310] usb 6-1: config 0 descriptor?? [ 1934.234925][T31229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7555'. [ 1934.712014][T27838] usb 3-1: USB disconnect, device number 3 [ 1935.095452][T26401] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1936.331535][T26401] usb 4-1: Using ep0 maxpacket: 16 [ 1938.096700][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 1938.096717][ T29] audit: type=1326 audit(1938.081:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1938.787881][ T29] audit: type=1326 audit(1938.131:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1938.907263][ T29] audit: type=1326 audit(1938.211:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1939.491361][ T29] audit: type=1326 audit(1938.231:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1939.527379][T26401] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1939.545565][T26401] usb 4-1: can't read configurations, error -71 [ 1939.562243][T10310] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -110 [ 1939.757160][ T29] audit: type=1326 audit(1938.241:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1939.811252][T10310] usb 6-1: USB disconnect, device number 93 [ 1940.831241][T26401] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1941.084813][T26401] usb 4-1: device descriptor read/64, error -71 [ 1941.208509][ T29] audit: type=1326 audit(1938.251:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1941.266755][T26401] usb usb4-port1: attempt power cycle [ 1942.025656][T26401] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1942.455718][T26401] usb 4-1: device descriptor read/8, error -71 [ 1943.026852][T26401] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1943.169259][ T29] audit: type=1326 audit(1938.251:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1943.503166][T26401] usb 4-1: device descriptor read/8, error -71 [ 1943.657346][T26401] usb usb4-port1: unable to enumerate USB device [ 1946.546433][ T29] audit: type=1326 audit(1938.251:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1947.253694][T10313] page_pool_release_retry() stalled pool shutdown: id 121, 50 inflight 364 sec [ 1948.893049][ T29] audit: type=1326 audit(1938.251:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1949.359754][ T29] audit: type=1326 audit(1938.251:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1950.079908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.093171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.106248][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.118693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.131128][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.143555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.155871][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.168298][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.180718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.193052][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1950.651330][ T29] audit: type=1326 audit(1938.251:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1955.088355][ C0] net_ratelimit: 8563 callbacks suppressed [ 1955.088375][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.106749][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.119258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.131768][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.144296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.156813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.169324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.181867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.194390][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1955.206894][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.098500][ C0] net_ratelimit: 7787 callbacks suppressed [ 1960.098522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.116856][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.129382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.141981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.154521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.167143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.179689][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.192204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.204722][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1960.217248][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1965.108200][ C0] net_ratelimit: 14119 callbacks suppressed [ 1965.108222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1965.108843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1965.114644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1965.126549][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1965.138494][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1965.151577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1965.162539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1965.174456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1965.186351][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1965.199485][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1968.668236][ C1] sched: DL replenish lagged too much [ 1970.118389][ C0] net_ratelimit: 16504 callbacks suppressed [ 1970.118410][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1970.119345][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1970.124720][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1970.136773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1970.148653][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1970.160688][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1970.172559][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1970.185621][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1970.196417][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1970.208452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1970.565621][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1975.128249][ C0] net_ratelimit: 17058 callbacks suppressed [ 1975.128272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1975.128541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1975.134610][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1975.146579][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1975.158553][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1975.171459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1975.182394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1975.194414][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1975.206243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1975.218239][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1977.182592][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.705619][ T29] audit: type=1326 audit(1938.271:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1979.327647][ T29] audit: type=1326 audit(1938.271:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1980.138470][ C1] net_ratelimit: 17050 callbacks suppressed [ 1980.138478][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1980.138490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1980.138903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1980.144847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1980.157699][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1980.168818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1980.180681][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1980.192669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1980.204501][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1980.216505][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1981.407330][ T29] audit: type=1326 audit(1938.271:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 1985.148351][ C0] net_ratelimit: 15617 callbacks suppressed [ 1985.148371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1985.148553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1985.154684][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1985.167594][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1985.178580][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1985.190538][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1985.202413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1985.214445][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1985.226445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1985.239323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1990.158431][ C1] net_ratelimit: 17631 callbacks suppressed [ 1990.158447][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1990.158450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1990.158855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1990.164794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1990.177704][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1990.188749][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1990.200588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1990.212594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1990.224434][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1990.236435][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1995.168322][ C0] net_ratelimit: 17741 callbacks suppressed [ 1995.168343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1995.169185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1995.174714][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1995.186658][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1995.198593][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1995.210493][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1995.222583][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1995.235407][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1995.246393][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 1995.258322][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1995.785598][ T29] audit: type=1326 audit(1938.281:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 2000.178318][ C0] net_ratelimit: 16998 callbacks suppressed [ 2000.178338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2000.178388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2000.184735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2000.197777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2000.208588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2000.220562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2000.232379][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2000.244446][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2000.256347][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2000.269418][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2005.188304][ C1] net_ratelimit: 19047 callbacks suppressed [ 2005.188324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2005.188550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2005.194680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2005.206552][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2005.218532][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2005.230474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2005.243358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2005.254339][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2005.266285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2005.278179][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2010.198205][ C1] net_ratelimit: 19205 callbacks suppressed [ 2010.198225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2010.198403][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2010.205507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2010.216498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2010.228518][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2010.240335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2010.252311][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2010.264279][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2010.278467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2010.288196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2015.208557][ C0] net_ratelimit: 19310 callbacks suppressed [ 2015.208578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2015.209472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2015.214897][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2015.226879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2015.238764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2015.250722][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2015.262684][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2015.278405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2015.286515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2015.298469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2020.218593][ C0] net_ratelimit: 19344 callbacks suppressed [ 2020.218613][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2020.218727][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2020.224971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2020.236918][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2020.248777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2020.260794][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2020.272716][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2020.285598][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2020.296550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2020.308561][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2025.228349][ C0] net_ratelimit: 19322 callbacks suppressed [ 2025.228370][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2025.228451][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2025.234729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2025.246674][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2025.258659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2025.271558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2025.282871][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2025.294453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2025.306384][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2025.318298][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2030.238347][ C1] net_ratelimit: 19359 callbacks suppressed [ 2030.238368][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2030.238412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2030.244682][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2030.256693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2030.270081][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2030.280527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2030.292511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2030.304339][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2030.316307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2030.328276][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2032.141920][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2034.429301][ T29] audit: type=1326 audit(1938.281:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 2035.248533][ C1] net_ratelimit: 18028 callbacks suppressed [ 2035.248555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2035.248578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2035.254872][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2035.266759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2035.278725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2035.290702][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2035.303586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2035.314514][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2035.326472][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2035.338363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2040.258288][ C1] net_ratelimit: 17606 callbacks suppressed [ 2040.258308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2040.258415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2040.264626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2040.276546][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2040.288516][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2040.300428][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2040.313530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2040.324277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2040.336285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2040.348251][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2040.715859][ T4977] udevd[4977]: worker [23708] /devices/virtual/block/loop3 is taking a long time [ 2040.925556][ T29] audit: type=1326 audit(1938.281:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2399ce59 code=0x7ffc0000 [ 2045.268281][ C1] net_ratelimit: 17435 callbacks suppressed [ 2045.268301][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2045.268554][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2045.274611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2045.286541][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2045.298509][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2045.310486][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2045.323354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2045.334321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2045.346255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2045.358151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2050.278302][ C1] net_ratelimit: 18180 callbacks suppressed [ 2050.278325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2050.278332][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2050.278800][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2050.285547][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2050.296582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2050.308515][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2050.320543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2050.332347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2050.344350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2050.357184][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2055.288398][ C0] net_ratelimit: 17663 callbacks suppressed [ 2055.288418][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2055.288437][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2055.294745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2055.307638][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2055.318606][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2055.330678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2055.342443][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2055.354412][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2055.366362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2055.379400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2060.298249][ C0] net_ratelimit: 16932 callbacks suppressed [ 2060.298270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2060.298442][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2060.304585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2060.316655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2060.328562][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2060.341567][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2060.352381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2060.364381][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2060.376222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2060.388246][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2065.308425][ C0] net_ratelimit: 18746 callbacks suppressed [ 2065.308446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2065.309287][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2065.314762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2065.326778][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2065.338647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2065.350591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2065.362549][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2065.375486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2065.386415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2065.398390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2070.318485][ C1] net_ratelimit: 19322 callbacks suppressed [ 2070.318488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2070.318508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2070.324818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2070.336836][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2070.348742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2070.360698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2070.372664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2070.385557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2070.397324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2070.409321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2075.328219][ C1] net_ratelimit: 19223 callbacks suppressed [ 2075.328240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2075.328293][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2075.334603][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2075.346532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2075.358580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2075.370578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2075.383608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2075.394524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2075.406474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2075.418360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2080.338218][ C0] net_ratelimit: 19185 callbacks suppressed [ 2080.338239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2080.339178][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2080.346568][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2080.358591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2080.370561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2080.382488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2080.394469][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2080.407455][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2080.418511][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2080.438501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2085.348265][ C0] net_ratelimit: 19205 callbacks suppressed [ 2085.348284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2085.348443][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2085.354712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2085.366773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2085.378666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2085.391612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2085.402582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2085.414590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2085.426551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2085.438476][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2090.358210][ C0] net_ratelimit: 19205 callbacks suppressed [ 2090.358231][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2090.358485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2090.364577][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2090.376767][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2090.388860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2090.401755][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2090.412821][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2090.424794][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2090.436657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2090.448660][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2095.368476][ C0] net_ratelimit: 19196 callbacks suppressed [ 2095.368499][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2095.368871][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2095.374862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2095.386858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2095.398742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2095.410702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2095.422694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2095.435684][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2095.446637][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2095.458616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2100.378274][ C0] net_ratelimit: 19539 callbacks suppressed [ 2100.378295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2100.379313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2100.384620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2100.396717][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2100.408644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2100.420541][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2100.432509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2100.445522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2100.456342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2100.468374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2102.918171][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2102.925135][ C0] rcu: (detected by 0, t=10502 jiffies, g=217637, q=795 ncpus=2) [ 2102.932944][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 6875 (4295147445-4295140570), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 2102.946220][ C0] rcu: rcu_preempt kthread starved for 6876 jiffies! g217637 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2102.957420][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2102.967394][ C0] rcu: RCU grace-period kthread stack dump: [ 2102.973269][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2102.986744][ C0] Call Trace: [ 2102.990023][ C0] [ 2102.992953][ C0] __schedule+0x125c/0x6730 [ 2102.997478][ C0] ? __pfx___schedule+0x10/0x10 [ 2103.002347][ C0] ? find_held_lock+0x2b/0x80 [ 2103.007029][ C0] ? schedule+0x2bf/0x390 [ 2103.011373][ C0] schedule+0xdd/0x390 [ 2103.015429][ C0] schedule_timeout+0x127/0x280 [ 2103.020265][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2103.025652][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2103.030948][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2103.036773][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 2103.042249][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 2103.047024][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2103.052315][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2103.057229][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 2103.062410][ C0] ? rcu_is_watching+0x12/0xc0 [ 2103.067193][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2103.073014][ C0] rcu_gp_kthread+0x179/0x230 [ 2103.077679][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2103.082887][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2103.088709][ C0] ? __kthread_parkme+0x18c/0x230 [ 2103.093744][ C0] ? kthread+0x13a/0x450 [ 2103.097958][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2103.103134][ C0] kthread+0x370/0x450 [ 2103.107206][ C0] ? __pfx_kthread+0x10/0x10 [ 2103.111802][ C0] ret_from_fork+0x72b/0xd50 [ 2103.116394][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2103.121524][ C0] ? __switch_to+0x800/0x10f0 [ 2103.126205][ C0] ? __pfx_kthread+0x10/0x10 [ 2103.130883][ C0] ret_from_fork_asm+0x1a/0x30 [ 2103.135630][ C0] [ 2103.138634][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2103.144952][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2103.150181][ C1] NMI backtrace for cpu 1 [ 2103.150201][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2103.150229][ C1] Tainted: [L]=SOFTLOCKUP [ 2103.150236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2103.150249][ C1] RIP: 0010:rcu_is_watching+0x41/0xc0 [ 2103.150281][ C1] Code: 14 94 89 c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed 20 09 21 8e 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed 20 09 21 8e 48 b8 00 00 00 00 00 fc ff df 48 89 [ 2103.150299][ C1] RSP: 0018:ffffc90000a07a80 EFLAGS: 00000246 [ 2103.150316][ C1] RAX: dffffc0000000000 RBX: ffffffff94147c68 RCX: ffffffff91899d01 [ 2103.150329][ C1] RDX: 1ffffffff1c42125 RSI: ffffffff8c1e7100 RDI: ffffffff8e210928 [ 2103.150342][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 2103.150354][ C1] R10: 0000000000000200 R11: 0000000000016dff R12: ffffc90000a07b58 [ 2103.150366][ C1] R13: ffffc90000a07b08 R14: ffffc90000a07ef8 R15: ffffc90000a07b3c [ 2103.150380][ C1] FS: 0000000000000000(0000) GS:ffff8881243ec000(0000) knlGS:0000000000000000 [ 2103.150397][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2103.150410][ C1] CR2: 0000200000016000 CR3: 000000007e31f000 CR4: 00000000003526f0 [ 2103.150423][ C1] Call Trace: [ 2103.150429][ C1] [ 2103.150438][ C1] unwind_next_frame+0x745/0x2090 [ 2103.150458][ C1] ? kmem_cache_free+0x127/0x6b0 [ 2103.150489][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2103.150511][ C1] arch_stack_walk+0x94/0xf0 [ 2103.150531][ C1] ? __skb_ext_put+0x102/0x2f0 [ 2103.150551][ C1] ? __skb_ext_put+0x102/0x2f0 [ 2103.150568][ C1] stack_trace_save+0x8e/0xc0 [ 2103.150587][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2103.150609][ C1] ? __lock_acquire+0x49f/0x1a40 [ 2103.150632][ C1] kasan_save_stack+0x30/0x50 [ 2103.150653][ C1] ? kasan_save_stack+0x30/0x50 [ 2103.150673][ C1] ? kasan_save_track+0x14/0x30 [ 2103.150692][ C1] ? kasan_save_free_info+0x3b/0x70 [ 2103.150719][ C1] ? __kasan_slab_free+0x5f/0x80 [ 2103.150739][ C1] ? kmem_cache_free+0x127/0x6b0 [ 2103.150789][ C1] kasan_save_track+0x14/0x30 [ 2103.150810][ C1] kasan_save_free_info+0x3b/0x70 [ 2103.150836][ C1] __kasan_slab_free+0x5f/0x80 [ 2103.150859][ C1] kmem_cache_free+0x127/0x6b0 [ 2103.150890][ C1] __skb_ext_put+0x102/0x2f0 [ 2103.150906][ C1] ? ipv6_chk_mcast_addr+0x2b0/0x9a0 [ 2103.150936][ C1] skb_release_head_state+0x2c8/0x400 [ 2103.150961][ C1] sk_skb_reason_drop+0xc4/0x1b0 [ 2103.150992][ C1] ip6_mc_input+0x832/0xf50 [ 2103.151018][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 2103.151043][ C1] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 2103.151070][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 2103.151095][ C1] ip6_rcv_finish+0x294/0x300 [ 2103.151118][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2103.151142][ C1] ip_sabotage_in+0x21e/0x290 [ 2103.151168][ C1] nf_hook_slow+0xbf/0x220 [ 2103.151187][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 2103.151210][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2103.151234][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 2103.151260][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2103.151288][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 2103.151310][ C1] ipv6_rcv+0xa4/0x3d0 [ 2103.151333][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 2103.151355][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 2103.151377][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2103.151399][ C1] ? lock_acquire+0x1b9/0x370 [ 2103.151425][ C1] __netif_receive_skb+0x1f/0x120 [ 2103.151446][ C1] netif_receive_skb+0x139/0x7d0 [ 2103.151465][ C1] ? br_multicast_count+0x8d/0xbc0 [ 2103.151491][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 2103.151514][ C1] ? br_netif_receive_skb+0xff/0x1f0 [ 2103.151540][ C1] br_pass_frame_up+0x346/0x490 [ 2103.151566][ C1] br_handle_frame_finish+0xa94/0x1fa0 [ 2103.151594][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2103.151620][ C1] ? ila_xlat_nl_cmd_get_mapping+0x550/0xe70 [ 2103.151641][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 2103.151668][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 2103.151688][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 2103.151708][ C1] ? nf_hook_slow+0x167/0x220 [ 2103.151726][ C1] br_nf_hook_thresh+0x30d/0x420 [ 2103.151751][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2103.151779][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 2103.151807][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2103.151833][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 2103.151860][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2103.151881][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2103.151905][ C1] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 2103.151933][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2103.151962][ C1] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 2103.151994][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 2103.152022][ C1] ? lock_acquire+0x1b9/0x370 [ 2103.152045][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 2103.152073][ C1] ? net_generic+0xea/0x2a0 [ 2103.152100][ C1] br_nf_pre_routing+0x90f/0x1560 [ 2103.152130][ C1] br_handle_frame+0xce9/0x1540 [ 2103.152157][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 2103.152184][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2103.152212][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 2103.152237][ C1] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 2103.152265][ C1] ? kmem_cache_free+0x127/0x6b0 [ 2103.152292][ C1] ? skb_release_data+0x6ca/0x8e0 [ 2103.152315][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 2103.152339][ C1] ? kfree_skbmem+0x19f/0x210 [ 2103.152356][ C1] ? sk_skb_reason_drop+0x114/0x1b0 [ 2103.152382][ C1] ? ip6_mc_input+0x51a/0xf50 [ 2103.152412][ C1] ? __lock_acquire+0x49f/0x1a40 [ 2103.152437][ C1] ? process_backlog+0x32a/0x1580 [ 2103.152455][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 2103.152476][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2103.152499][ C1] ? lock_acquire+0x1b9/0x370 [ 2103.152522][ C1] ? process_backlog+0x32a/0x1580 [ 2103.152543][ C1] ? process_backlog+0x32a/0x1580 [ 2103.152562][ C1] __netif_receive_skb+0x1f/0x120 [ 2103.152583][ C1] process_backlog+0x37a/0x1580 [ 2103.152606][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 2103.152628][ C1] net_rx_action+0xa40/0xf20 [ 2103.152654][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2103.152675][ C1] ? rcu_is_watching+0x12/0xc0 [ 2103.152703][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 2103.152722][ C1] ? tmigr_handle_remote+0x132/0x380 [ 2103.152749][ C1] ? run_timer_base+0x121/0x190 [ 2103.152772][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2103.152796][ C1] handle_softirqs+0x1ea/0x9b0 [ 2103.152822][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2103.152846][ C1] ? _raw_spin_unlock+0x28/0x50 [ 2103.152872][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 2103.152893][ C1] __irq_exit_rcu+0x162/0x210 [ 2103.152916][ C1] irq_exit_rcu+0x9/0x30 [ 2103.152939][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2103.152967][ C1] [ 2103.152974][ C1] [ 2103.152984][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2103.153005][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2103.153034][ C1] Code: e6 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 58 10 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2103.153052][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 2103.153067][ C1] RAX: 000000000a54d12b RBX: ffff88801e2d2540 RCX: ffffffff8b9b42d5 [ 2103.153080][ C1] RDX: 0000000000000000 RSI: ffffffff8df576cd RDI: ffffffff8c1e7180 [ 2103.153093][ C1] RBP: ffffed1003c5a4a8 R08: 0000000000000001 R09: ffffed10170a678d [ 2103.153105][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 2103.153117][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 2103.153133][ C1] ? ct_kernel_exit+0x125/0x180 [ 2103.153155][ C1] default_idle+0x9/0x10 [ 2103.153174][ C1] default_idle_call+0x6c/0xb0 [ 2103.153194][ C1] do_idle+0x3a7/0x5b0 [ 2103.153219][ C1] ? __pfx_do_idle+0x10/0x10 [ 2103.153245][ C1] ? do_idle+0x388/0x5b0 [ 2103.153273][ C1] cpu_startup_entry+0x4f/0x60 [ 2103.153299][ C1] start_secondary+0x21d/0x2d0 [ 2103.153323][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2103.153350][ C1] common_startup_64+0x13e/0x158 [ 2103.153376][ C1] [ 2105.388290][ C0] net_ratelimit: 15700 callbacks suppressed [ 2105.388310][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2105.388511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2105.394675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2105.406618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2105.418559][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2105.430449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2105.442503][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2105.455372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2105.466307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2105.478337][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2109.549938][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2110.398532][ C0] net_ratelimit: 17384 callbacks suppressed [ 2110.398553][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2110.399368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2110.404976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2110.416871][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2110.428835][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2110.440708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2110.452773][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2110.465563][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2110.476583][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:40:3b:d9:76:b7, vlan:0) [ 2110.488511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2111.053999][ T29] audit: type=1326 audit(1938.281:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.1.7557" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba2395d68e code=0x7ffc0000