last executing test programs: 15m13.143395153s ago: executing program 0 (id=192): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000040)=0x1000020f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89801) move_mount(r3, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) listen(r1, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @ramp={0x200, 0x0, {0xa2, 0x2, 0x4, 0x5}}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a31000000000900020073797a30000000000c0006"], 0xb0}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) tkill(r7, 0x1d) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000380)=""/143) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r11}, &(0x7f00000004c0), &(0x7f0000000500)=r8}, 0x20) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 15m11.988763453s ago: executing program 0 (id=197): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000007f80), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$NBD_SET_SOCK(r0, 0x40046f41, r0) 15m11.844919804s ago: executing program 0 (id=199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7}}, 0x14}}, 0x24040000) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000180000000000000000000000711207170000000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) preadv(r5, &(0x7f0000001100)=[{&(0x7f0000000800)=""/92, 0x5c}], 0x1, 0x8000012e, 0x81) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff9) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) wait4(r2, 0x0, 0x40000000, &(0x7f0000000380)) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 15m9.943138159s ago: executing program 0 (id=202): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000340)=0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x545ec0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000200)={0x0, 0x0, {0x2, 0x13, 0x7fff, 0x4}}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) unshare(0x2040400) signalfd4(r3, &(0x7f0000000140), 0x8, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x4, 0x0, 0x9}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xe, 0xb09c}}, './file1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x422002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 15m9.668186234s ago: executing program 0 (id=205): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='noswap,obj_type=/dev/net/tun\x00,sadm_u,seclabel,\x00']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x41020, &(0x7f00000001c0)=ANY=[]) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) listen(r3, 0x4) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = eventfd(0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="0000000000000000b702000000f500008500000086000000850000002a000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x2}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @empty, 0x101}, 0x1c) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000000)=0x8) ftruncate(r0, 0xc17a) 15m8.420528906s ago: executing program 0 (id=208): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8400000019001fb2", 0x8, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04e0000000000000000200000044000480240001800b000100736f636b6574000014000280080002400000000308000140"], 0x98}}, 0x0) ioctl$CEC_S_MODE(r0, 0xc05c6104, &(0x7f00000000c0)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000300)=""/4096, &(0x7f0000000100)=0x1000) 14m51.811461648s ago: executing program 32 (id=208): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8400000019001fb2", 0x8, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04e0000000000000000200000044000480240001800b000100736f636b6574000014000280080002400000000308000140"], 0x98}}, 0x0) ioctl$CEC_S_MODE(r0, 0xc05c6104, &(0x7f00000000c0)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000300)=""/4096, &(0x7f0000000100)=0x1000) 14m44.650817644s ago: executing program 2 (id=269): socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x5, 0xf7, &(0x7f00000007c0)=""/247, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe1, @void, @value}, 0x94) 14m43.423840178s ago: executing program 2 (id=276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090030000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 14m41.860657344s ago: executing program 2 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 14m41.458744656s ago: executing program 2 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x4, 0x0) 14m41.144092106s ago: executing program 2 (id=289): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 14m35.610552742s ago: executing program 2 (id=305): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x50000) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 14m33.603323593s ago: executing program 33 (id=305): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x50000) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 11m19.825322398s ago: executing program 5 (id=895): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00431b00000000000000000700", @ANYRES32=0x0, @ANYBLOB="01040a5cb97c40c6fd1a67ab40425181079cc4644874a164ffbb", @ANYRES32, @ANYRES8=r1], 0x28}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000880)) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x25, 0x5, 0x0) connect$inet(r5, &(0x7f0000000200)={0x25, 0x4e20, @loopback}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 11m18.570120056s ago: executing program 5 (id=899): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007110000000000000630000ff000000009500000c000000001b1cd1e8ec5c2c28ff694ff0e2ac5f6d926940d04c6744dc408546dd0d68f20a0000e0bf02b6bc7064904cfbfecaf7221f652a6e5ccd5b7c43c9edea0fcd6bf3612550dcbc3cdbfe19dd3238b4a2500beb2f757aa0d62636bd2f093179359704417cf8d3d436a0d2ef783cb691adf3a7ec7e3842437b82b1e4711f59c51d0bbb119c18bea1ae"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0xfffffffffffffdd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x40880) 11m15.264929655s ago: executing program 5 (id=907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000004000000040000003e"], 0x48) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 11m15.076508213s ago: executing program 5 (id=908): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='svcrdma_page_overrun_err\x00', 0xffffffffffffffff, 0x0, 0x83}, 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x2400, 0x0) 11m13.759972061s ago: executing program 5 (id=911): unshare(0x68040200) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) dup(r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40640, 0x61) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x1, 0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) 11m12.032064842s ago: executing program 5 (id=916): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x4) sendfile(r0, r0, 0x0, 0x30) r5 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000d507df08c410448200dc0102030a090212000100000000090400000003"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="7b2003"], 0x0, 0x0}) r8 = syz_open_procfs(r5, &(0x7f00000001c0)='net/llc/socket\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x84302, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, 0x0) r10 = socket$inet(0x2, 0xa, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) write$UHID_INPUT(r6, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r11, 0x0, 0x31, &(0x7f0000000140), 0x4) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3) 10m56.801023029s ago: executing program 34 (id=916): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x4) sendfile(r0, r0, 0x0, 0x30) r5 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000d507df08c410448200dc0102030a090212000100000000090400000003"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="7b2003"], 0x0, 0x0}) r8 = syz_open_procfs(r5, &(0x7f00000001c0)='net/llc/socket\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x84302, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, 0x0) r10 = socket$inet(0x2, 0xa, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) write$UHID_INPUT(r6, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r11, 0x0, 0x31, &(0x7f0000000140), 0x4) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3) 7m12.01620202s ago: executing program 3 (id=1516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0xb8bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 7m11.688676024s ago: executing program 3 (id=1519): socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000102) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7m2.100708567s ago: executing program 3 (id=1537): open$dir(0x0, 0x0, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00431b00000000000000000700", @ANYRES32=0x0, @ANYBLOB="01040a5cb97c40c6fd1a67ab40", @ANYRES32, @ANYRES8=r1], 0x28}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000880)) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x25, 0x5, 0x0) connect$inet(r6, &(0x7f0000000200)={0x25, 0x4e20, @loopback}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 6m58.812126287s ago: executing program 3 (id=1541): socket$nl_generic(0x10, 0x3, 0x10) getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2039009, 0x0) r0 = getpid() mount$bind(&(0x7f0000001980)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201807, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m58.68357766s ago: executing program 3 (id=1542): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000008c0)={0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x2, 0x0, &(0x7f0000000840)=[{}, {}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x13, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) 6m58.515523859s ago: executing program 3 (id=1544): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x83}, 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x2400, 0x0) 6m57.372018452s ago: executing program 35 (id=1544): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x83}, 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x2400, 0x0) 2m50.754450677s ago: executing program 4 (id=2159): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000002c0)=0x46, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) write$UHID_INPUT(r3, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0xd9, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4}, 0x1c, 0x0}}], 0x1, 0x24004810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m49.975353514s ago: executing program 4 (id=2161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 2m49.889282274s ago: executing program 4 (id=2162): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfc3d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0xffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x53e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r1, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0xfffffffffffffe71}, 0x0, 0x48840, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r0, 0x0, 0x0) connect$unix(r5, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setgroups(0x0, 0x0) setregid(0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x4, 0x1, {{0x5, 0x4, 0x2, 0x2a, 0x14, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @local}}}}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) socket$xdp(0x2c, 0x3, 0x0) 2m49.444173613s ago: executing program 4 (id=2164): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x81, 0xcc, 0xaf, 0x20, 0x1df7, 0x2500, 0x505d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x56, 0x0, 0xf0, 0x5, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0x54, 0x21, 0x81, 0xff}}]}}]}}, &(0x7f0000000b40)={0x4c, 0x0, 0x0, 0x0, 0x8}) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x40, 0xc, 0x2, {0x2, 0x22}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f00000000c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "aec49e36a828433a5a4162dcc9ede4af"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0x4, 0x4, "4e764f8e", "f6c7e8a2"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0xf, 0x9, 0x0, 0x7, 0x3}}}, &(0x7f00000006c0)={0x84, &(0x7f00000001c0)={0x40, 0x17, 0xcf, "31a367bbda2a1a79b64d15d2854836218634f4492db59cedc619eddde93e26196d219bb8ac8562cabbce559e845c614ab4e5c5c4a38d945f3972bccf409f8a2bc2efbff52a443d718c8ed40121646da1760d59f442f81a093b6653116390fdd67afd6b87ef40ee7f5b952e47ea2dc024925f46264ea7b7f8c81e8f2ade18b4e75fd650152906facf166d274b56fdf6d53352eb1a2a794708950ccab2037ec1ee7c70b84b33f8463c7f9b4485ef4028148201efe51031421d857c550c38be44d267c58d44dba39618af5e5bb72ee15d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x160, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x4}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "b0ce"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x43}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x5d}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)={0x10000000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x3) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000000)={0x0, 0x5e, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) r11 = dup(r10) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r9, 0x3ba0, &(0x7f0000000080)={0x48, 0xb, r11}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) 2m44.590535582s ago: executing program 4 (id=2177): open$dir(0x0, 0x0, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00431b00000000000000000700", @ANYRES32=0x0, @ANYBLOB="01040a5cb97c40c6fd1a67ab40425181079cc4644874a164ffbb", @ANYRES32, @ANYRES8=r1], 0x28}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x25, 0x5, 0x0) connect$inet(r6, &(0x7f0000000200)={0x25, 0x4e20, @loopback}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) 2m43.56085222s ago: executing program 4 (id=2179): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206050000000000000000000800000005000100070000000900020073797a3000000000140007800800064000000000080013400000000011000300686173683a69702c706f72740000000005000500020000000500040000000000"], 0x60}}, 0x0) 2m28.460410972s ago: executing program 36 (id=2179): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206050000000000000000000800000005000100070000000900020073797a3000000000140007800800064000000000080013400000000011000300686173683a69702c706f72740000000005000500020000000500040000000000"], 0x60}}, 0x0) 27.184459347s ago: executing program 6 (id=2578): r0 = fsopen(&(0x7f0000000380)='overlay\x00', 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xb, &(0x7f0000000040), 0x0) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000003e40)=ANY=[@ANYBLOB="2c0000000001010200000000000000000d000006180002801400018008800100ac1e017c4c54d21831bd4d01"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(0x0, 0x80) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7826, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000000000000001393000000dd00"}, 0x0, 0x0, 0x7fff}}}, 0x118) write$qrtrtun(r4, &(0x7f0000000080)="ca0e808bb35bdabb", 0x8) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x7, 0x39, 0xd63, 0xcdc}}) setrlimit(0x1, &(0x7f0000000000)) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) accept4(r1, 0x0, 0x0, 0x0) fanotify_mark(r4, 0x200, 0x30, r4, &(0x7f00000000c0)='./file0\x00') syz_emit_ethernet(0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaada6655af5bbaefbbbbbbbbbbbb0800300000330000000006019078ac1e0001a18514aa037090780009800145c0fffa00640005ea320000e00000027f000001f10d11"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.940166543s ago: executing program 6 (id=2585): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x50a01, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 23.971832187s ago: executing program 7 (id=2590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4090, 0x0, 0x12, r1, 0x0) 23.971043851s ago: executing program 1 (id=2591): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_IO_FLUSHER(0x39, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x0, 0x24040041) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3653c00120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}, {&(0x7f0000000240)="0ee22ed4d2668d3f013c7c0a4652e85b6e19ad2ceb5e025a605c5f02486496aea871d4de93", 0x25}, {&(0x7f0000000480)="6599829947c9b24153b9d6230fd04088c6f9ce19afe3b08ddb2e4254dbea4d3032f9e2c56f09d60301ff2ef9a7eab18d886c40bbe9379c2be9ad19834c8e6d2e2b5dd6efa1d604c5098ed275d87a46766d75022e59c3dc4f4a1c06d69487c8b0c77317cc06188b862b745cf15ae02786d1abb38b056b36a196c6fc75fb179a50b182af17520a68828550e9c1ddf372", 0x8f}, {&(0x7f0000000540)="0d94beb1a23019079dadee1cce027ca5593690cceeda1121d51d1161953540f1739dbe654b228494df7da92bb9ff81e8f31af87242bd49768a0663a380a7f6c3c716a90e56f8e3382c9372de5e7494c4bf9fda95b9c992288afbe38097066ade65e3aa4a360691ed64ea025f4bd764a549392601796243726f992b3bff17178a5a4d644759e793bb08825875dcae84225bba013f5635b05b5d2ce0320144cd7f", 0xa0}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x40010) socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x820f, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) pipe(0x0) 21.426216297s ago: executing program 1 (id=2593): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0xa9ea, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x119, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setpriority(0x2, 0x0, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800580001c0"]) 21.347305598s ago: executing program 8 (id=2594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}]}, 0x28}}, 0x24040000) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000180000000000000000000000711207170000000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) preadv(r5, &(0x7f0000001100)=[{&(0x7f0000000800)=""/92, 0x5c}], 0x1, 0x8000012e, 0x81) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff9) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44850) wait4(r2, 0x0, 0x40000000, &(0x7f0000000380)) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 21.206063542s ago: executing program 7 (id=2595): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x36}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x174}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x90}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x88}}, 0x44042) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="711f46060000fadd0000000000", 0xd}, 0x1, 0x0, 0x0, 0x30004015}, 0x24000840) recvmmsg(r0, &(0x7f0000000340), 0x0, 0x162, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x1, 0x6, 0x10000, 0x4745504a, [0x1, 0x101], [0x8dc, 0x8], 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{0x0}, {&(0x7f0000008c80)="8b", 0x1}], 0x2}, 0x850) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000000)={0xc0, "dee29d3ab474ac724b7f34e7e5bb037c9666127fd2e9b43d1a804abe058fe0292b5c4c300eef74d09ab48b0b96f7c644c0b7f7e7e4be6d6a76f0ecb71b299a197de8669bdfef89988db1df67e76e64df89661e21cf2bc0983e386e1a91fd3ac2f8eb38f94a11eb766c36a0ba4b01bbffbdbab52fcc2929b44eeafab85b692cb8dea5e1ea6ca30941c3e3a13a8f78f223d20d1fa854fc9bbe8aa50889a6cf5a5a08ed776d2e3cf3e94a1184711713b765ca1cb73ca6e299ac7c7782dd8ea521688b101e5afcea4f71313c97f07aec35943e76931d8ac842530000fd3fe6d7f7d656cc439588423542928f196f5ea3ad59c4a6374580edd6bb3f61fdf72df76ae02d6581ed980522b2d133c580a53d5b2b229dc1d263ca4a45983c0850a1af646ff4c7d499d3584843bdba8956eb7403bca38902abcbef3990b110a8869f6375a9879f74c0626a8e971022436f3cb34c6ec19a10c6d47fa2394c08b73c21b22cd56a217bbf631702cea7cbfa0a7f17b843636fbf247237dd5fd76956b4b84cc90cb163f70d3f6e6ec8079ff41781701ec4d1a1f9c7905697b36ec6d348c167030c0c90516a29628061ffbe37ce35a9213d45b0ebd6a69a6342cfbe997fca7ffea47aeaffa89484a0a6676eab74eace3bca97292c90cda13555b471116a679ca9f3e55ac738cdfc569f2bf34faea82e867f0707341ddfd13dae7c7da6ec70e2c78e"}) openat(r3, 0x0, 0x65e1c3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 21.079233872s ago: executing program 6 (id=2596): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f000054c000/0x4000)=nil, 0x4000, 0x3) lsm_set_self_attr(0x69, 0x0, 0x106, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f000001ba80)=""/102387, 0x18ff3) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 20.824583426s ago: executing program 9 (id=2597): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x5, 0x25, "69213ab2a3f989b2f14438c991ebc491f8a694eca67f65a2798b725b49d4560880a07cd591"}, 0x2d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100"/69], 0xfdef) 20.348985132s ago: executing program 1 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) 18.101137905s ago: executing program 7 (id=2599): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0xfffffffd}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x1c, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x43, 0xa0, 0x118, 0x98, 0x208, 0x178, 0x178, 0x208, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xd0, 0x118, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@connbytes={{0x38}, {[{0x100000000000000}, {0xe}], 0x0, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc, {0x80000001}}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0xe, 0x4c8}}, @common=@icmp={{0x28}, {0x11, "bccf"}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) vmsplice(r3, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000000000080000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa0aea4c19e0922ddcf1aa2a4"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) sendto$inet6(r3, 0x0, 0x0, 0x4048845, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000380)={{0x5, 0x4}, 'port1\x00', 0x3, 0x190000, 0x2941d28d, 0x1, 0xc, 0x80000001, 0xffffffff, 0x0, 0x7, 0x9}) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="c58452d184581ecd7c", 0x9, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c) 16.754231634s ago: executing program 1 (id=2600): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 16.222589456s ago: executing program 9 (id=2601): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setresgid(0x0, 0x0, 0x0) socket(0x2c, 0x4, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x145100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001240)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x8f7084bcb4e933bd}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) close(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000019980)=ANY=[@ANYBLOB="010000000000000002004e23ac141431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaa2000000000000000000000000000000000000000100000000000000"], 0x90) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x20000000) 13.356747441s ago: executing program 7 (id=2602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x14927e, 0x6) fallocate(r3, 0x0, 0x0, 0x1001f0) ftruncate(0xffffffffffffffff, 0x4f) open(&(0x7f0000000100)='./file1\x00', 0x521b7c, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) waitid(0x0, r7, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r7, 0x0, 0x4, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB='\b@\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="61de7fcd8528a79d855afe3e584c584fcd3d51c60cf1fafb6ab07e031b87e87687c8458f84576e93658cc7f181f0ae12909f7078886bdda7b5c1cb63674dc952f341ca1299e63396fae8259d6f03258d4681f601c0b51fd0"], 0x28}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000300)="240000001a005f0214f9f4070d0903ff81000000fd050000000200000800040001000000", 0x24) 12.936012545s ago: executing program 8 (id=2603): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 12.614002867s ago: executing program 1 (id=2604): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}]}, 0x70}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) fsetxattr$security_capability(r2, &(0x7f0000000280), &(0x7f0000000300)=@v3={0x3000000, [{0x8, 0xde3a}, {0x8, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/11, 0xfffffffffffffde1}}], 0x400000000000179, 0x10022, 0x0) 11.192402402s ago: executing program 9 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = gettid() (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) (async) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) r4 = timerfd_create(0x0, 0x0) (async, rerun: 32) r5 = io_uring_setup(0x5878, &(0x7f0000000500)={0x0, 0x53fc, 0x0, 0xfffffffe}) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000006300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2900}}, 0x1c}}, 0x0) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) timerfd_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async, rerun: 64) read(r4, &(0x7f0000000380)=""/189, 0x8) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000406010100000000000000000000000005000400000000000900020073797a3100000000050001"], 0x5c}}, 0x0) (rerun: 32) 10.764534084s ago: executing program 8 (id=2606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x10}, 0xc) futex_waitv(&(0x7f0000000ec0)=[{0x3, 0x0, 0x104}], 0x1, 0x0, 0x0, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x17) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r3, &(0x7f00000003c0), 0x100000000000022d) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, "000018d4583b261e63a22300"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unshare(0x2000600) fcntl$lock(r5, 0x6, &(0x7f00000000c0)) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') pread64(r6, 0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) getgid() 8.393081898s ago: executing program 7 (id=2607): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = dup(r2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ff"], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000030305000000000000000000000000000c0002"], 0x20}}, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x8, 0xa0, 0x6b, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, "648c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xb76, 0x0, 0xc35, 0xeb}, [@network_terminal={0x7, 0x24, 0xa, 0xf0, 0x4, 0xf9, 0x94}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0xff, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x5, 0x4c}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0x5, 0x3, 0x8, 0x7}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0xfa, 0x6, 0xa34, 0x78f, 0x1, [0xffc000, 0x3f00, 0xff0030, 0xff000f, 0x3f30, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e84aafea719d4679a1c3ae938e76b389"}]}, 0x2, [{0x90, &(0x7f0000000180)=@string={0x90, 0x3, "ee287bfd16c3dab14f665f21fb8f19e82e729adf1a58a9b74b5313d5fd0aa556e68441f9c18511061458b2b1850a2a15ddd806dc4b07f67f0bdd1ff5092f96e275e55be9ba808d84f52aad69cd0fa8310967a6dd480cd434fd8fd1f2e75a34fa5942525fb0329f1326e65a86126f3f4130a87f3d4155d364b385ba82772194a5a7915875928b586cb518497bcc6e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}]}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r7, 0x4b2f, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010103, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @local, {[@lsrr={0x83, 0xb, 0x0, [@dev, @empty]}, @cipso={0x86, 0x32, 0x0, [{0x6, 0x5, "df6116"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0294e2a3bdb4aa40b24"}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) 7.464040181s ago: executing program 8 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000020601"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000580)={r4, 0xd}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000002800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280), 0x200c480, 0x0) 7.310253783s ago: executing program 6 (id=2609): r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000110019708d961153573e00000783", @ANYRES32, @ANYBLOB="000900001020000018001a8009000100766c616e000000000800048004000480"], 0x38}}, 0x4050) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000140)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500010026bd08000400000000000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="000101000a01010500000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x20040010) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ppoll(&(0x7f00000004c0)=[{r6, 0x14}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0x1]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r8) ioctl$EVIOCRMFF(r8, 0x550c, 0x0) renameat2(r6, 0x0, r6, &(0x7f0000000480)='./cgroup/../file0\x00', 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000580)=0x401, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) write$vhost_msg(r6, &(0x7f0000000280)={0x1, {&(0x7f0000000340)=""/192, 0xc0, &(0x7f0000000200), 0x3, 0x2}}, 0x48) 7.126261129s ago: executing program 9 (id=2610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x0, 0xc8, &(0x7f00000007c0)=""/200}]}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x86783, 0x0) 6.881286031s ago: executing program 1 (id=2611): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192e20845050c800a03010203010902120001000000000904"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="64796e2c007281296d323f6d7ea1a3becd7a44e07c4c0222a065f22de536a9d7a4292cc185e3af37793bd77d7049f8331bd299cc2fb43cd9b655f0af7c4e12041da569b62c74239eaa0758434396ae337bb06c83d6246234c6e76732a1c7e56d"]) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="a912", 0x2}], 0x1}, 0x20000801) 6.661175478s ago: executing program 8 (id=2612): syz_open_dev$evdev(0x0, 0x0, 0x121c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x2, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x120, 0xa1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x354e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r6, 0x3ff}, &(0x7f0000000200)=0x8) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.085500167s ago: executing program 6 (id=2613): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000280)={0x4, 0x18, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000100)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x63, 0xffffffffffff0001, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./bus\x00', 0x0, 0x2fd6e5eb7401b47f, &(0x7f0000000580)=ANY=[]) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, &(0x7f0000000680)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfff9, 0x8, 0x1, 0x3, 0x3}) 5.084451618s ago: executing program 9 (id=2614): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 4.682536457s ago: executing program 8 (id=2615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x4040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r4 = epoll_create1(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000004000108000000000000000002620000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0xe4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x4000200a}) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f041}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x0, r5}, 0x0) 4.127304285s ago: executing program 6 (id=2616): munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000280)={0x5, 0x9, &(0x7f0000000300)="e0f3e04c5adf467aae"}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x84201) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x80000001, 0x3, @name="c8f405a54c609df18936c5bb93992b19dd38349981ea70b951852617b492b0f8"}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000003000/0x1000)=nil, r2, 0x0, 0x50, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 3.56706723s ago: executing program 7 (id=2617): syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) timer_create(0x8, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000001c0)=0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/210, 0xd2}], 0x1}, 0x61) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x0, 0xe1, 0x3, 0x2, 0x7, 0x3, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) r3 = syz_open_dev$sndctrl(&(0x7f0000002680), 0xa00, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f00000027c0)={0xa, 0x0, 0x800, 0x6, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000008c0)=""/192, 0xc0}, {&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000280)=""/34, 0x22}], 0x9, &(0x7f0000006580)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000000b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000000c00)=""/17, 0x11}, {&(0x7f0000000c40)=""/28, 0x1c}, {&(0x7f0000000c80)=""/30, 0x1e}], 0x4}, 0x4}, {{&(0x7f0000000d00)=@generic, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/122, 0x7a}, {&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/222, 0xde}], 0x3, &(0x7f0000000f40)=""/163, 0xa3}}], 0x3, 0x40012001, 0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, &(0x7f00000000c0)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r4, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, &(0x7f0000000180), &(0x7f00000002c0)) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=2618): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0xa000, @ipv4={'\x00', '\xff\xff', @local}}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)=""/47, &(0x7f0000000100)=0x1d) (async) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000000000003912f643df16efeb5530230b65247f6ca7444d22cc51eb34751400e64d3622c6df464af5682c5472793aa93a68dfd0a853d604000000f97e69c926cdf28f5fbc7ab33beb2165"], &(0x7f0000002300), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3a9b, @loopback}, {0xa, 0x0, 0x2, @mcast2}, r6}}, 0x48) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) (async) write$UHID_INPUT(r0, &(0x7f0000002340)={0xc, {"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", 0x1000}}, 0x1006) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ce903083ab", 0x5, 0xffffffffffffffff) (async) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000240)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4200) kernel console output (not intermixed with test programs): .2334 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 931.339482][T15531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 931.339493][T15531] Call Trace: [ 931.339499][T15531] [ 931.339507][T15531] dump_stack_lvl+0x16c/0x1f0 [ 931.339535][T15531] should_fail_ex+0x50a/0x650 [ 931.339562][T15531] ? fs_reclaim_acquire+0xae/0x150 [ 931.339590][T15531] should_failslab+0xc2/0x120 [ 931.339611][T15531] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 931.339630][T15531] ? getname_flags.part.0+0x4c/0x550 [ 931.339658][T15531] getname_flags.part.0+0x4c/0x550 [ 931.339682][T15531] getname_flags+0x93/0xf0 [ 931.339707][T15531] user_path_at+0x24/0x60 [ 931.339723][T15531] __x64_sys_mount+0x1fd/0x310 [ 931.339744][T15531] ? __pfx___x64_sys_mount+0x10/0x10 [ 931.339770][T15531] do_syscall_64+0xcd/0x250 [ 931.339793][T15531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.339816][T15531] RIP: 0033:0x7f0807b8d169 [ 931.339831][T15531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.339846][T15531] RSP: 002b:00007f0808921038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 931.339866][T15531] RAX: ffffffffffffffda RBX: 00007f0807da5fa0 RCX: 00007f0807b8d169 [ 931.339878][T15531] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000000 [ 931.339889][T15531] RBP: 00007f0808921090 R08: 0000000000000000 R09: 0000000000000000 [ 931.339899][T15531] R10: 0000000000001025 R11: 0000000000000246 R12: 0000000000000001 [ 931.339910][T15531] R13: 0000000000000000 R14: 00007f0807da5fa0 R15: 00007ffc5905b8b8 [ 931.339934][T15531] [ 931.577321][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.588959][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.040051][ T5900] usb 9-1: USB disconnect, device number 23 [ 932.117746][ T5900] appletouch 9-1:0.85: input: appletouch disconnected [ 932.212228][T15540] SELinux: syz.9.2338 (15540) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 932.239991][T11077] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 933.131087][T11077] usb 7-1: Using ep0 maxpacket: 16 [ 933.137693][T11077] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 933.170537][T11077] usb 7-1: config 0 has no interface number 0 [ 933.276752][T11077] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 933.899949][T11077] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 933.941438][T11077] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 933.970335][T11077] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 933.997308][T11077] usb 7-1: Product: syz [ 934.019833][T11077] usb 7-1: SerialNumber: syz [ 934.038523][ T29] audit: type=1400 audit(1741394314.077:1448): avc: denied { getopt } for pid=15561 comm="syz.8.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 934.048010][T11077] usb 7-1: config 0 descriptor?? [ 934.118514][T11077] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 934.141074][T11077] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input55 [ 934.151279][ T5900] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 934.330408][ T5900] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 934.359318][T15535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.367915][T15535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.377782][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 934.407741][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.441996][ T5900] usb 2-1: config 0 descriptor?? [ 934.643251][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.650384][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.657527][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.664745][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.672042][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.680026][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.687936][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.695390][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.709965][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 934.717410][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 935.562886][T11077] usb 7-1: USB disconnect, device number 63 [ 935.568795][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 935.681104][T11077] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 935.919815][ T5900] kaweth 2-1:0.0: Firmware present in device. [ 935.949961][ T5900] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 935.979222][ T5900] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 936.019626][ T5900] usb 2-1: USB disconnect, device number 94 [ 936.509366][ T29] audit: type=1400 audit(1741394316.547:1449): avc: denied { ioctl } for pid=15580 comm="syz.7.2350" path="socket:[49830]" dev="sockfs" ino=49830 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 936.570809][T15584] netdevsim netdevsim7: Direct firmware load for . [ 936.570809][T15584] failed with error -2 [ 936.582317][T15584] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 936.582317][T15584] [ 937.882785][T15603] »»»»»» speed is unknown, defaulting to 1000 [ 937.889751][T15603] lo speed is unknown, defaulting to 1000 [ 938.216079][T15598] Invalid ELF header len 8 [ 940.189835][T15633] netlink: 'syz.8.2364': attribute type 1 has an invalid length. [ 940.197715][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2364'. [ 941.129725][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2367'. [ 942.145044][T15654] Invalid ELF header len 8 [ 942.321617][ T116] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 942.499988][ T116] usb 9-1: Using ep0 maxpacket: 32 [ 942.520574][ T116] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 942.547228][ T116] usb 9-1: config 0 has no interface number 0 [ 942.601802][ T116] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 942.642664][ T116] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 942.670540][ T116] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.698673][ T116] usb 9-1: Product: syz [ 942.704865][ T116] usb 9-1: Manufacturer: syz [ 942.723823][ T116] usb 9-1: SerialNumber: syz [ 942.755545][ T116] usb 9-1: config 0 descriptor?? [ 942.781761][ T116] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 942.809988][ T116] em28xx 9-1:0.132: Video interface 132 found: [ 942.872245][ T29] audit: type=1326 audit(1741394322.917:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 942.919458][ T29] audit: type=1326 audit(1741394322.917:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 942.953050][ T29] audit: type=1326 audit(1741394322.917:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 942.985653][ T29] audit: type=1326 audit(1741394322.917:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 943.025925][ T29] audit: type=1326 audit(1741394322.917:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 943.058827][ T29] audit: type=1326 audit(1741394322.917:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32cab8bad0 code=0x7ffc0000 [ 943.071410][ T116] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 943.092064][ T29] audit: type=1326 audit(1741394322.917:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 943.133556][ T29] audit: type=1326 audit(1741394322.917:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 943.167325][ T29] audit: type=1326 audit(1741394322.917:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f32cab8bdca code=0x7ffc0000 [ 943.171967][ T116] em28xx 9-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 943.204073][ T29] audit: type=1326 audit(1741394322.917:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.9.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32cabbfa25 code=0x7ffc0000 [ 943.216029][ T116] em28xx 9-1:0.132: board has no eeprom [ 943.320035][ T116] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 943.327985][ T116] em28xx 9-1:0.132: analog set to bulk mode. [ 943.334212][T11077] em28xx 9-1:0.132: Registering V4L2 extension [ 943.352234][ T116] usb 9-1: USB disconnect, device number 24 [ 943.367102][ T116] em28xx 9-1:0.132: Disconnecting em28xx [ 943.578754][T11077] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 943.586671][T11077] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 943.596820][T11077] em28xx 9-1:0.132: No AC97 audio processor [ 943.632590][T11077] usb 9-1: Decoder not found [ 943.637354][T11077] em28xx 9-1:0.132: failed to create media graph [ 943.644927][T11077] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 943.663443][T11077] em28xx 9-1:0.132: Remote control support is not available for this card. [ 943.672666][ T116] em28xx 9-1:0.132: Closing input extension [ 943.730198][ T116] em28xx 9-1:0.132: Freeing device [ 945.984654][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2383'. [ 946.022630][T15694] »»»»»» speed is unknown, defaulting to 1000 [ 946.156580][T15694] lo speed is unknown, defaulting to 1000 [ 946.910784][T15714] netlink: 'syz.6.2388': attribute type 1 has an invalid length. [ 947.372523][T11077] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 947.539989][T11077] usb 10-1: Using ep0 maxpacket: 32 [ 947.557845][T11077] usb 10-1: unable to get BOS descriptor or descriptor too short [ 947.572837][T11077] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 947.581483][T11077] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 947.592672][T11077] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 947.601971][T11077] usb 10-1: config 128 has no interface number 0 [ 947.609606][T11077] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 947.622308][T11077] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.632807][T11077] usb 10-1: config 128 interface 127 has no altsetting 0 [ 947.641954][T11077] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 947.653651][T11077] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.661897][T11077] usb 10-1: Product: syz [ 947.674715][T11077] usb 10-1: Manufacturer: syz [ 947.679571][T11077] usb 10-1: SerialNumber: syz [ 947.945789][T11077] usb 10-1: USB disconnect, device number 7 [ 948.140232][T10938] udevd[10938]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.730128][ T116] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 948.914306][ T116] usb 10-1: Using ep0 maxpacket: 32 [ 948.934045][ T116] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.955635][ T116] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.967933][ T116] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 948.987763][ T116] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.016301][ T116] usb 10-1: config 0 descriptor?? [ 949.023678][ T116] hub 10-1:0.0: USB hub found [ 949.234453][ T116] hub 10-1:0.0: config failed, can't read hub descriptor (err -90) [ 949.442530][ T116] usbhid 10-1:0.0: can't add hid device: -71 [ 949.450398][ T116] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 949.481098][ T116] usb 10-1: USB disconnect, device number 8 [ 952.574877][T15714] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 952.577609][T15730] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 953.412784][T15745] FAULT_INJECTION: forcing a failure. [ 953.412784][T15745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.629989][T15745] CPU: 1 UID: 0 PID: 15745 Comm: syz.6.2397 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 953.630023][T15745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 953.630035][T15745] Call Trace: [ 953.630041][T15745] [ 953.630049][T15745] dump_stack_lvl+0x16c/0x1f0 [ 953.630078][T15745] should_fail_ex+0x50a/0x650 [ 953.630110][T15745] _copy_from_iter+0x2a1/0x1560 [ 953.630130][T15745] ? trace_lock_acquire+0x14e/0x1f0 [ 953.630153][T15745] ? __alloc_skb+0x1fe/0x380 [ 953.630178][T15745] ? __pfx__copy_from_iter+0x10/0x10 [ 953.630196][T15745] ? __virt_addr_valid+0x1a4/0x590 [ 953.630220][T15745] ? __virt_addr_valid+0x5e/0x590 [ 953.630240][T15745] ? __phys_addr_symbol+0x30/0x80 [ 953.630259][T15745] ? __check_object_size+0x488/0x710 [ 953.630285][T15745] netlink_sendmsg+0x813/0xd70 [ 953.630315][T15745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.630350][T15745] ____sys_sendmsg+0xaaf/0xc90 [ 953.630370][T15745] ? copy_msghdr_from_user+0x10b/0x160 [ 953.630395][T15745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.630425][T15745] ___sys_sendmsg+0x135/0x1e0 [ 953.630452][T15745] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.630483][T15745] ? __pfx_lock_release+0x10/0x10 [ 953.630505][T15745] ? trace_lock_acquire+0x14e/0x1f0 [ 953.630530][T15745] ? __fget_files+0x206/0x3a0 [ 953.630552][T15745] __sys_sendmsg+0x16e/0x220 [ 953.630575][T15745] ? __pfx___sys_sendmsg+0x10/0x10 [ 953.630613][T15745] do_syscall_64+0xcd/0x250 [ 953.630638][T15745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.630670][T15745] RIP: 0033:0x7f173718d169 [ 953.630686][T15745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.630701][T15745] RSP: 002b:00007f1737fd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.630718][T15745] RAX: ffffffffffffffda RBX: 00007f17373a5fa0 RCX: 00007f173718d169 [ 953.630731][T15745] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 953.630741][T15745] RBP: 00007f1737fd0090 R08: 0000000000000000 R09: 0000000000000000 [ 953.630752][T15745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.630764][T15745] R13: 0000000000000000 R14: 00007f17373a5fa0 R15: 00007fff605885a8 [ 953.630789][T15745] [ 954.511522][T15756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2401'. [ 954.534075][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 954.534094][ T29] audit: type=1326 audit(1741394334.577:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 954.637881][T15755] input: syz0 as /devices/virtual/input/input58 [ 954.641887][ T29] audit: type=1326 audit(1741394334.577:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.067631][ T29] audit: type=1326 audit(1741394334.577:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.160061][ T29] audit: type=1326 audit(1741394334.577:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.200497][ T29] audit: type=1326 audit(1741394334.577:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.278231][ T29] audit: type=1326 audit(1741394334.577:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.385283][ T29] audit: type=1326 audit(1741394334.577:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.557099][ T29] audit: type=1326 audit(1741394334.617:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.603326][ T29] audit: type=1326 audit(1741394334.617:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.629297][ T29] audit: type=1326 audit(1741394334.617:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 955.935821][T15778] sp0: Synchronizing with TNC [ 955.944498][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2407'. [ 955.955535][T15778] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2407'. [ 956.590068][T15783] Invalid ELF header len 8 [ 957.165698][ T5820] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 957.481888][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 957.504221][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.517471][T11664] bridge_slave_1: left allmulticast mode [ 957.537091][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.558316][T11664] bridge_slave_1: left promiscuous mode [ 957.566739][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.585868][ T5820] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 957.614818][T11664] bridge_slave_0: left allmulticast mode [ 957.626290][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.638940][T11664] bridge_slave_0: left promiscuous mode [ 957.650239][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.677717][ T5820] usb 7-1: config 0 descriptor?? [ 957.711300][ T5820] hub 7-1:0.0: USB hub found [ 957.911772][ T5820] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 958.195818][T15803] Invalid ELF header len 8 [ 958.221218][T15799] 9pnet_virtio: no channels available for device syz [ 958.242839][ T5820] usbhid 7-1:0.0: can't add hid device: -71 [ 958.242900][ T5820] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 958.376759][ T5820] usb 7-1: USB disconnect, device number 64 [ 959.754854][T11664] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 959.763940][ T116] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 959.927777][ T116] usb 9-1: Using ep0 maxpacket: 32 [ 959.943576][ T116] usb 9-1: unable to get BOS descriptor or descriptor too short [ 959.968947][ T116] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 959.993102][ T116] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 960.004449][ T116] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 960.031592][ T116] usb 9-1: config 128 has no interface number 0 [ 960.038047][ T116] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 960.049692][ T116] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 960.062196][ T116] usb 9-1: config 128 interface 127 has no altsetting 0 [ 960.071659][ T116] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 960.097727][ T116] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.108019][ T116] usb 9-1: Product: syz [ 960.112631][ T116] usb 9-1: Manufacturer: syz [ 960.117367][ T116] usb 9-1: SerialNumber: syz [ 960.286521][T11664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.301271][T11664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.317549][T11664] bond0 (unregistering): Released all slaves [ 960.346322][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2414'. [ 960.434455][ T116] usb 9-1: USB disconnect, device number 25 [ 960.721472][T10938] udevd[10938]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.261626][T15843] qnx4: no qnx4 filesystem (no root dir). [ 963.134036][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 963.134053][ T29] audit: type=1400 audit(1741394343.177:1542): avc: denied { listen } for pid=15851 comm="syz.7.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 963.340538][T11664] hsr_slave_0: left promiscuous mode [ 963.380171][T11077] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 963.393783][T11664] hsr_slave_1: left promiscuous mode [ 963.423582][ T5913] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 963.440528][T11664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.458307][T11664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.509150][T11664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.532306][T11664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.570215][T11077] usb 2-1: Using ep0 maxpacket: 32 [ 963.597634][T11077] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.646278][ T29] audit: type=1326 audit(1741394343.677:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 963.683155][T11077] usb 2-1: config 0 interface 0 has no altsetting 0 [ 963.741345][ T5913] usb 10-1: config 1 has an invalid interface number: 140 but max is 0 [ 963.750583][ T5913] usb 10-1: config 1 has no interface number 0 [ 963.756826][ T5913] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 963.762660][T15875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2430'. [ 963.776253][T11077] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 963.785136][ T5913] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.807937][ T5913] usb 10-1: MBOX3: Invalid descriptor size=18. [ 963.808726][T11077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.814508][ T29] audit: type=1326 audit(1741394343.687:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 963.882554][T11077] usb 2-1: Product: syz [ 963.909837][T11077] usb 2-1: Manufacturer: syz [ 963.917899][T11664] veth1_macvtap: left promiscuous mode [ 963.926407][T11664] veth0_macvtap: left promiscuous mode [ 963.940445][T11664] veth1_vlan: left promiscuous mode [ 963.940572][T11077] usb 2-1: SerialNumber: syz [ 963.950127][ T29] audit: type=1326 audit(1741394343.687:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 963.985872][T11664] veth0_vlan: left promiscuous mode [ 964.216407][ T29] audit: type=1326 audit(1741394343.687:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f173718bad0 code=0x7ffc0000 [ 964.316058][ T985] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 964.573732][T11077] usb 2-1: config 0 descriptor?? [ 964.586526][T11077] gs_usb 2-1:0.0: Required endpoints not found [ 964.616749][ T29] audit: type=1326 audit(1741394343.687:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 964.641298][ T29] audit: type=1326 audit(1741394343.687:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f173718bdca code=0x7ffc0000 [ 964.666372][ T29] audit: type=1326 audit(1741394343.737:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17371bfa25 code=0x7ffc0000 [ 964.690731][ T29] audit: type=1400 audit(1741394343.937:1550): avc: denied { create } for pid=15863 comm="syz.7.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 964.711893][ T29] audit: type=1326 audit(1741394343.937:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 965.912118][ T45] usb 10-1: USB disconnect, device number 9 [ 966.511393][T11664] team0 (unregistering): Port device team_slave_1 removed [ 966.762077][T11664] team0 (unregistering): Port device team_slave_0 removed [ 968.890277][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2431'. [ 969.070692][ T5820] usb 2-1: USB disconnect, device number 95 [ 969.368616][T15931] qnx4: no qnx4 filesystem (no root dir). [ 969.961227][T15933] FAULT_INJECTION: forcing a failure. [ 969.961227][T15933] name failslab, interval 1, probability 0, space 0, times 0 [ 970.021565][T15933] CPU: 0 UID: 0 PID: 15933 Comm: syz.1.2440 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 970.021594][T15933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 970.021605][T15933] Call Trace: [ 970.021612][T15933] [ 970.021619][T15933] dump_stack_lvl+0x16c/0x1f0 [ 970.021648][T15933] should_fail_ex+0x50a/0x650 [ 970.021675][T15933] ? fs_reclaim_acquire+0xae/0x150 [ 970.021703][T15933] should_failslab+0xc2/0x120 [ 970.021724][T15933] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 970.021745][T15933] ? __alloc_skb+0x2b1/0x380 [ 970.021774][T15933] __alloc_skb+0x2b1/0x380 [ 970.021796][T15933] ? __pfx___alloc_skb+0x10/0x10 [ 970.021818][T15933] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 970.021843][T15933] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 970.021876][T15933] netlink_alloc_large_skb+0x69/0x130 [ 970.021903][T15933] netlink_sendmsg+0x689/0xd70 [ 970.021932][T15933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 970.021967][T15933] ____sys_sendmsg+0xaaf/0xc90 [ 970.021987][T15933] ? copy_msghdr_from_user+0x10b/0x160 [ 970.022012][T15933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.022045][T15933] ___sys_sendmsg+0x135/0x1e0 [ 970.022072][T15933] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.022109][T15933] ? __pfx_lock_release+0x10/0x10 [ 970.022133][T15933] ? trace_lock_acquire+0x14e/0x1f0 [ 970.022163][T15933] ? __fget_files+0x206/0x3a0 [ 970.022194][T15933] __sys_sendmsg+0x16e/0x220 [ 970.022219][T15933] ? __pfx___sys_sendmsg+0x10/0x10 [ 970.022260][T15933] do_syscall_64+0xcd/0x250 [ 970.022285][T15933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.022310][T15933] RIP: 0033:0x7f0807b8d169 [ 970.022326][T15933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.022344][T15933] RSP: 002b:00007f0808921038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.022362][T15933] RAX: ffffffffffffffda RBX: 00007f0807da5fa0 RCX: 00007f0807b8d169 [ 970.022376][T15933] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000004 [ 970.022388][T15933] RBP: 00007f0808921090 R08: 0000000000000000 R09: 0000000000000000 [ 970.022400][T15933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.022412][T15933] R13: 0000000000000000 R14: 00007f0807da5fa0 R15: 00007ffc5905b8b8 [ 970.022437][T15933] [ 970.937419][T15947] Invalid ELF header len 8 [ 971.376913][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 971.376932][ T29] audit: type=1400 audit(1741394351.307:1554): avc: denied { append } for pid=15950 comm="syz.6.2447" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 972.080154][T15958] FAULT_INJECTION: forcing a failure. [ 972.080154][T15958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.117984][T15958] CPU: 1 UID: 0 PID: 15958 Comm: syz.1.2449 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 972.118015][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 972.118026][T15958] Call Trace: [ 972.118032][T15958] [ 972.118040][T15958] dump_stack_lvl+0x16c/0x1f0 [ 972.118077][T15958] should_fail_ex+0x50a/0x650 [ 972.118108][T15958] _copy_from_user+0x2e/0xd0 [ 972.118129][T15958] copy_msghdr_from_user+0x99/0x160 [ 972.118156][T15958] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 972.118191][T15958] ___sys_sendmsg+0xff/0x1e0 [ 972.118217][T15958] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.118253][T15958] ? __pfx_lock_release+0x10/0x10 [ 972.118278][T15958] ? trace_lock_acquire+0x14e/0x1f0 [ 972.118308][T15958] ? __fget_files+0x206/0x3a0 [ 972.118334][T15958] __sys_sendmsg+0x16e/0x220 [ 972.118361][T15958] ? __pfx___sys_sendmsg+0x10/0x10 [ 972.118403][T15958] do_syscall_64+0xcd/0x250 [ 972.118428][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.118454][T15958] RIP: 0033:0x7f0807b8d169 [ 972.118469][T15958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.118488][T15958] RSP: 002b:00007f0808921038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.118506][T15958] RAX: ffffffffffffffda RBX: 00007f0807da5fa0 RCX: 00007f0807b8d169 [ 972.118518][T15958] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 972.118530][T15958] RBP: 00007f0808921090 R08: 0000000000000000 R09: 0000000000000000 [ 972.118542][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.118553][T15958] R13: 0000000000000000 R14: 00007f0807da5fa0 R15: 00007ffc5905b8b8 [ 972.118578][T15958] [ 972.473563][T15960] syz.9.2448: attempt to access beyond end of device [ 972.473563][T15960] nbd9: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 972.486766][T15960] XFS (nbd9): SB validate failed with error -5. [ 972.627615][ T29] audit: type=1400 audit(1741394352.667:1555): avc: denied { write } for pid=15972 comm="syz.8.2453" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 972.863169][T15976] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2450'. [ 973.287224][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2452'. [ 973.836841][T15989] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2455'. [ 974.486384][T16000] ntfs3(nullb0): Primary boot signature is not NTFS. [ 974.517940][T16000] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 974.810072][ T116] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 974.903195][T16010] qnx4: no qnx4 filesystem (no root dir). [ 975.659968][ T116] usb 7-1: Using ep0 maxpacket: 8 [ 975.750135][ T116] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 975.789720][ T116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.841430][ T116] usb 7-1: config 0 descriptor?? [ 976.451807][ T116] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 976.550100][ T116] asix 7-1:0.0: probe with driver asix failed with error -71 [ 976.599062][ T116] usb 7-1: USB disconnect, device number 65 [ 976.850291][ T5862] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 976.859641][T14401] Bluetooth: hci4: command 0x0405 tx timeout [ 977.075845][ T5862] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 977.139620][ T5862] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.179930][ T5862] usb 10-1: config 0 has no interface number 0 [ 977.206498][ T5862] usb 10-1: config 0 interface 255 has no altsetting 0 [ 977.253170][ T29] audit: type=1400 audit(1741394357.277:1556): avc: denied { read } for pid=16033 comm="syz.1.2469" path="socket:[51773]" dev="sockfs" ino=51773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 977.276668][ T5862] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 977.330168][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.349675][ T5862] usb 10-1: config 0 descriptor?? [ 977.622418][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2471'. [ 978.484882][ T29] audit: type=1400 audit(1741394358.527:1557): avc: denied { execute } for pid=16047 comm="syz.1.2473" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 978.860091][ T116] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 979.035248][ T29] audit: type=1400 audit(1741394359.077:1558): avc: denied { unmount } for pid=15179 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 979.071516][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.118408][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.156866][ T5820] usb 10-1: USB disconnect, device number 10 [ 979.178326][ T116] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 979.230013][ T116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.256399][ T116] usb 7-1: config 0 descriptor?? [ 979.900375][ T116] usb 7-1: language id specifier not provided by device, defaulting to English [ 981.622741][ T116] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 981.676423][T16077] FAULT_INJECTION: forcing a failure. [ 981.676423][T16077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.690534][ T116] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 981.711407][ T116] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 981.719542][ T116] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 981.765735][T16077] CPU: 0 UID: 0 PID: 16077 Comm: syz.8.2480 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 981.765762][T16077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 981.765773][T16077] Call Trace: [ 981.765779][T16077] [ 981.765787][T16077] dump_stack_lvl+0x16c/0x1f0 [ 981.765815][T16077] should_fail_ex+0x50a/0x650 [ 981.765847][T16077] _copy_to_user+0x32/0xd0 [ 981.765869][T16077] simple_read_from_buffer+0xd0/0x160 [ 981.765898][T16077] proc_fail_nth_read+0x198/0x270 [ 981.765926][T16077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 981.765953][T16077] ? rw_verify_area+0xcf/0x680 [ 981.765979][T16077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 981.766004][T16077] vfs_read+0x1df/0xbf0 [ 981.766031][T16077] ? __fget_files+0x1fc/0x3a0 [ 981.766051][T16077] ? __pfx___mutex_lock+0x10/0x10 [ 981.766075][T16077] ? __pfx_vfs_read+0x10/0x10 [ 981.766110][T16077] ? __fget_files+0x206/0x3a0 [ 981.766136][T16077] ksys_read+0x12b/0x250 [ 981.766163][T16077] ? __pfx_ksys_read+0x10/0x10 [ 981.766198][T16077] do_syscall_64+0xcd/0x250 [ 981.766223][T16077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.766248][T16077] RIP: 0033:0x7f59ba98bb7c [ 981.766264][T16077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 981.766282][T16077] RSP: 002b:00007f59bb741030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 981.766300][T16077] RAX: ffffffffffffffda RBX: 00007f59baba5fa0 RCX: 00007f59ba98bb7c [ 981.766313][T16077] RDX: 000000000000000f RSI: 00007f59bb7410a0 RDI: 0000000000000004 [ 981.766331][T16077] RBP: 00007f59bb741090 R08: 0000000000000000 R09: 0000000000000000 [ 981.766343][T16077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.766355][T16077] R13: 0000000000000000 R14: 00007f59baba5fa0 R15: 00007ffd2b7060c8 [ 981.766381][T16077] [ 981.766839][ T116] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 982.065020][ T29] audit: type=1326 audit(1741394362.107:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 982.109382][ T29] audit: type=1326 audit(1741394362.107:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 982.229936][ T29] audit: type=1326 audit(1741394362.107:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 982.300191][ T29] audit: type=1326 audit(1741394362.107:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 982.462996][ T29] audit: type=1326 audit(1741394362.107:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 982.586571][ T29] audit: type=1326 audit(1741394362.107:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f445798bad0 code=0x7ffc0000 [ 982.701002][ T29] audit: type=1326 audit(1741394362.107:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 982.797008][ T29] audit: type=1326 audit(1741394362.107:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f445798bdca code=0x7ffc0000 [ 982.919995][ T29] audit: type=1326 audit(1741394362.147:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44579bfa25 code=0x7ffc0000 [ 983.015344][ T116] usb 7-1: USB disconnect, device number 66 [ 983.060845][ T29] audit: type=1326 audit(1741394362.417:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 983.215262][ T29] audit: type=1326 audit(1741394362.417:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 983.332338][T16103] qnx4: no qnx4 filesystem (no root dir). [ 983.870048][ T45] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 983.878382][ T29] audit: type=1326 audit(1741394362.417:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 983.988369][ T29] audit: type=1326 audit(1741394362.417:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.7.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445798d169 code=0x7ffc0000 [ 984.110146][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 984.114874][T16109] Invalid ELF header len 8 [ 984.148363][ T45] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 984.487145][ T45] usb 2-1: config 0 has no interface number 0 [ 984.510070][ T45] usb 2-1: config 0 interface 246 has no altsetting 0 [ 984.526523][ T45] usb 2-1: New USB device found, idVendor=0c8f, idProduct=e086, bcdDevice=74.90 [ 984.540479][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.564911][ T45] usb 2-1: Product: syz [ 984.593759][ T45] usb 2-1: Manufacturer: syz [ 984.614048][ T45] usb 2-1: SerialNumber: syz [ 984.650723][ T45] usb 2-1: config 0 descriptor?? [ 984.931871][ T45] usb 2-1: USB disconnect, device number 96 [ 985.049478][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2489'. [ 985.058785][T16118] nbd: nbd0 already in use [ 986.325737][T16143] qnx4: no qnx4 filesystem (no root dir). [ 987.538687][T16152] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2498'. [ 987.599006][T16153] veth0_to_bridge: entered allmulticast mode [ 987.634279][T16153] pim6reg: entered allmulticast mode [ 988.353659][T16160] dccp_xmit_packet: Payload too large (65472) for featneg. [ 988.639655][T16166] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2499'. [ 989.440030][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 989.440042][ T29] audit: type=1400 audit(1741394369.477:1583): avc: denied { ioctl } for pid=16169 comm="syz.9.2503" path="socket:[52028]" dev="sockfs" ino=52028 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 990.187922][T16180] ip6t_srh: unknown srh invflags 7863 [ 990.413437][T16188] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2509'. [ 990.562796][T16191] FAULT_INJECTION: forcing a failure. [ 990.562796][T16191] name failslab, interval 1, probability 0, space 0, times 0 [ 990.597207][T16191] CPU: 1 UID: 0 PID: 16191 Comm: syz.6.2510 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 990.597236][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 990.597247][T16191] Call Trace: [ 990.597253][T16191] [ 990.597261][T16191] dump_stack_lvl+0x16c/0x1f0 [ 990.597289][T16191] should_fail_ex+0x50a/0x650 [ 990.597317][T16191] ? fs_reclaim_acquire+0xae/0x150 [ 990.597347][T16191] ? tomoyo_encode2+0x100/0x3e0 [ 990.597372][T16191] should_failslab+0xc2/0x120 [ 990.597395][T16191] __kmalloc_noprof+0xcb/0x510 [ 990.597416][T16191] ? d_absolute_path+0x137/0x1b0 [ 990.597439][T16191] ? rcu_is_watching+0x12/0xc0 [ 990.597464][T16191] tomoyo_encode2+0x100/0x3e0 [ 990.597494][T16191] tomoyo_encode+0x29/0x50 [ 990.597518][T16191] tomoyo_realpath_from_path+0x19d/0x720 [ 990.597553][T16191] tomoyo_path_number_perm+0x248/0x590 [ 990.597576][T16191] ? tomoyo_path_number_perm+0x235/0x590 [ 990.597602][T16191] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 990.597652][T16191] ? __pfx_lock_release+0x10/0x10 [ 990.597677][T16191] ? trace_lock_acquire+0x14e/0x1f0 [ 990.597703][T16191] ? lock_acquire+0x2f/0xb0 [ 990.597725][T16191] ? __fget_files+0x40/0x3a0 [ 990.597748][T16191] ? __fget_files+0x206/0x3a0 [ 990.597771][T16191] security_file_ioctl+0x9b/0x240 [ 990.597798][T16191] __x64_sys_ioctl+0xb7/0x200 [ 990.597826][T16191] do_syscall_64+0xcd/0x250 [ 990.597852][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.597878][T16191] RIP: 0033:0x7f173718d169 [ 990.597894][T16191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.597912][T16191] RSP: 002b:00007f1737faf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 990.597930][T16191] RAX: ffffffffffffffda RBX: 00007f17373a6080 RCX: 00007f173718d169 [ 990.597943][T16191] RDX: 0000000000000000 RSI: 0000000080046601 RDI: 0000000000000004 [ 990.597955][T16191] RBP: 00007f1737faf090 R08: 0000000000000000 R09: 0000000000000000 [ 990.597975][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.597986][T16191] R13: 0000000000000000 R14: 00007f17373a6080 R15: 00007fff605885a8 [ 990.598013][T16191] [ 990.598033][T16191] ERROR: Out of memory at tomoyo_realpath_from_path. [ 990.891965][T16183] Invalid ELF header len 8 [ 991.358096][ T29] audit: type=1400 audit(1741394371.297:1584): avc: denied { accept } for pid=16195 comm="syz.7.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 991.522074][ T29] audit: type=1400 audit(1741394371.317:1585): avc: denied { setopt } for pid=16195 comm="syz.7.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 991.600921][ T29] audit: type=1400 audit(1741394371.317:1586): avc: denied { write } for pid=16195 comm="syz.7.2513" path="socket:[52970]" dev="sockfs" ino=52970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 992.090083][ T116] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 992.200461][T16217] xt_l2tp: v2 doesn't support IP mode [ 992.250588][ T116] usb 10-1: Using ep0 maxpacket: 8 [ 992.262238][ T116] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 992.282496][ T116] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 992.337077][ T116] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 992.374473][ T116] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 992.402693][ T116] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.449132][ T116] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 992.476961][ T116] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.508696][ T116] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 992.753582][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.773545][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.816843][ T116] usb 10-1: USB disconnect, device number 11 [ 993.001597][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.169453][T16230] Invalid ELF header len 8 [ 993.639129][ T29] audit: type=1326 audit(1741394373.677:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 993.662708][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.819976][ T29] audit: type=1326 audit(1741394373.677:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 994.023000][ T29] audit: type=1326 audit(1741394373.677:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 994.046509][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.061768][ T45] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 994.164577][ T29] audit: type=1326 audit(1741394373.677:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32cab8bad0 code=0x7ffc0000 [ 994.270674][ T29] audit: type=1326 audit(1741394373.677:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 994.281498][ T45] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 994.294599][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.524673][ T45] usb 2-1: config 0 has no interface number 0 [ 994.585179][ T45] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 994.686025][ T45] usb 2-1: config 0 interface 11 has no altsetting 0 [ 994.729190][ T45] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 994.747789][ T29] audit: type=1326 audit(1741394373.677:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f32cab8bdca code=0x7ffc0000 [ 994.749036][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.835250][ T29] audit: type=1326 audit(1741394373.747:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32cabbfa25 code=0x7ffc0000 [ 994.859363][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.877008][ T45] usb 2-1: config 0 descriptor?? [ 994.889984][T16236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 994.919715][ T45] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 994.938040][ T29] audit: type=1326 audit(1741394373.947:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 994.961571][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.984284][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 995.007191][ T29] audit: type=1326 audit(1741394373.947:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 995.015997][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 995.030796][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.056838][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 995.064763][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 995.074011][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 995.090076][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 995.114877][ T29] audit: type=1326 audit(1741394373.947:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 995.157874][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2527'. [ 995.170491][ T45] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 995.179682][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 995.220929][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2527'. [ 995.241106][ T29] audit: type=1326 audit(1741394373.947:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 995.252831][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 995.264594][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.285919][ T29] audit: type=1326 audit(1741394373.947:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 995.309460][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.340658][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2528'. [ 995.408595][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 995.415823][ T29] audit: type=1326 audit(1741394373.947:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 995.492628][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 995.510690][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 995.519277][ T45] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 995.545326][ T45] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 995.603619][ T45] usb 2-1: USB disconnect, device number 97 [ 995.860014][ T45] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 995.860494][ T29] audit: type=1326 audit(1741394373.947:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 995.892920][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.950071][ T45] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 995.971071][ T29] audit: type=1326 audit(1741394373.947:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32cab8d169 code=0x7ffc0000 [ 995.979700][ T45] keyspan 2-1:0.11: device disconnected [ 995.995881][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.170055][ T5865] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 996.332247][T16265] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2533'. [ 996.774442][ T5865] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 997.045995][ T5865] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 997.078700][ T5865] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 997.087972][ T5865] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.125725][T16250] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 997.213201][ T5865] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.346526][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2535'. [ 999.147830][T16291] FAULT_INJECTION: forcing a failure. [ 999.147830][T16291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.162291][ T5820] usb 10-1: USB disconnect, device number 12 [ 999.322351][T16291] CPU: 0 UID: 0 PID: 16291 Comm: syz.8.2539 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 999.322376][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 999.322383][T16291] Call Trace: [ 999.322386][T16291] [ 999.322391][T16291] dump_stack_lvl+0x16c/0x1f0 [ 999.322410][T16291] should_fail_ex+0x50a/0x650 [ 999.322430][T16291] _copy_from_user+0x2e/0xd0 [ 999.322443][T16291] copy_msghdr_from_user+0x99/0x160 [ 999.322460][T16291] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 999.322481][T16291] ___sys_sendmsg+0xff/0x1e0 [ 999.322497][T16291] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.322518][T16291] ? __pfx_lock_release+0x10/0x10 [ 999.322534][T16291] ? trace_lock_acquire+0x14e/0x1f0 [ 999.322551][T16291] ? __fget_files+0x206/0x3a0 [ 999.322566][T16291] __sys_sendmsg+0x16e/0x220 [ 999.322581][T16291] ? __pfx___sys_sendmsg+0x10/0x10 [ 999.322596][T16291] ? __pfx_lock_release+0x10/0x10 [ 999.322614][T16291] ? __might_fault+0xe3/0x190 [ 999.322628][T16291] ? rcu_is_watching+0x12/0xc0 [ 999.322642][T16291] do_syscall_64+0xcd/0x250 [ 999.322657][T16291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.322672][T16291] RIP: 0033:0x7f59ba98d169 [ 999.322682][T16291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.322692][T16291] RSP: 002b:00007f59bb741038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.322703][T16291] RAX: ffffffffffffffda RBX: 00007f59baba5fa0 RCX: 00007f59ba98d169 [ 999.322710][T16291] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 999.322717][T16291] RBP: 00007f59bb741090 R08: 0000000000000000 R09: 0000000000000000 [ 999.322723][T16291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.322730][T16291] R13: 0000000000000000 R14: 00007f59baba5fa0 R15: 00007ffd2b7060c8 [ 999.322743][T16291] [ 999.603008][T16298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2542'. [ 999.879803][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2540'. [ 1002.760291][T16334] qnx4: no qnx4 filesystem (no root dir). [ 1003.839760][T16375] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1004.934489][T16383] netlink: 'syz.8.2551': attribute type 1 has an invalid length. [ 1004.942875][T16383] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2551'. [ 1006.540049][ T5820] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1007.390097][ T5820] usb 10-1: Using ep0 maxpacket: 16 [ 1007.402025][ T5820] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.432976][ T5820] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.676430][ T116] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 1007.765546][ T5820] usb 10-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 1007.970767][ T5820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.038651][ T5820] usb 10-1: config 0 descriptor?? [ 1008.043939][ T116] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1008.080297][ T116] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1008.112542][ T116] usb 9-1: config 0 has no interface number 0 [ 1008.134580][ T116] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1008.180600][ T116] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1008.362751][ T116] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1008.466213][ T116] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.632308][ T116] usb 9-1: config 0 descriptor?? [ 1008.736257][T16395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.742125][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1008.742140][ T29] audit: type=1326 audit(1741394388.787:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1008.795886][T16395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.833391][ T29] audit: type=1326 audit(1741394388.787:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1009.124197][ T5820] usbhid 10-1:0.0: can't add hid device: -71 [ 1009.142511][ T5820] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1009.163577][ T5820] usb 10-1: USB disconnect, device number 13 [ 1009.170274][ T29] audit: type=1326 audit(1741394388.787:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1009.334191][T16430] Invalid ELF header len 8 [ 1009.361940][ T29] audit: type=1326 audit(1741394388.827:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f173718bad0 code=0x7ffc0000 [ 1009.543113][ T29] audit: type=1326 audit(1741394388.827:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1009.863362][ T29] audit: type=1326 audit(1741394388.827:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1010.062597][ T29] audit: type=1326 audit(1741394388.827:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f173718bdca code=0x7ffc0000 [ 1010.152445][ T29] audit: type=1326 audit(1741394388.847:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17371bfa25 code=0x7ffc0000 [ 1010.359195][ T29] audit: type=1326 audit(1741394389.147:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1010.444265][ T29] audit: type=1326 audit(1741394389.147:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1010.525393][T16442] »»»»»» speed is unknown, defaulting to 1000 [ 1010.566036][T16442] lo speed is unknown, defaulting to 1000 [ 1011.280399][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2568'. [ 1011.439168][T16452] xt_recent: Unsupported userspace flags (000000da) [ 1011.816479][ T5900] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1012.250104][ T5900] usb 7-1: Using ep0 maxpacket: 8 [ 1012.257170][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.270301][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 1012.290603][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.330072][ T5900] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1012.346609][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.681345][ T5900] usb 7-1: config 0 descriptor?? [ 1012.687030][T16457] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1012.812373][ T116] usb 9-1: USB disconnect, device number 26 [ 1013.270173][ T5900] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 1013.300221][ T45] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1013.390007][ T5900] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 1013.397295][ T5900] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 1013.423512][ T5900] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 1013.441775][ T5900] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 1013.474617][ T5900] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 1013.476104][ T45] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.510183][ T5900] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 1013.541825][ T5900] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v1.ff Device [HID 041e:2801] on usb-dummy_hcd.6-1/input0 [ 1013.548813][ T45] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1013.600900][ T45] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1013.628898][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.765184][ T5913] usb 7-1: USB disconnect, device number 67 [ 1013.771488][ T45] usb 10-1: config 0 descriptor?? [ 1014.131721][T16465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.286247][T16465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.384009][ T45] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1014.402886][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 1014.469282][ T45] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1014.479253][ T45] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1014.486643][ T45] usb 10-1: media controller created [ 1014.492960][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1014.504391][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 1014.510253][ T45] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1014.519619][ T45] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input60 [ 1014.535006][ T45] dvb-usb: schedule remote query interval to 150 msecs. [ 1014.559971][ T45] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1014.583210][T16476] Invalid ELF header len 8 [ 1014.619148][ T45] usb 10-1: USB disconnect, device number 14 [ 1014.655871][T16483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2577'. [ 1014.707960][ T45] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1014.776166][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1014.776183][ T29] audit: type=1326 audit(1741394394.817:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.6.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1014.890036][ T29] audit: type=1326 audit(1741394394.847:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.6.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1014.957997][ T29] audit: type=1326 audit(1741394394.847:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.6.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1015.034438][ T29] audit: type=1326 audit(1741394394.847:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.6.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1015.131750][T16491] netlink: 'syz.1.2580': attribute type 1 has an invalid length. [ 1015.155021][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 1015.172328][ T29] audit: type=1326 audit(1741394394.847:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.6.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1015.247064][ T29] audit: type=1326 audit(1741394394.847:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.6.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1015.274180][T16496] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1015.335406][ T29] audit: type=1326 audit(1741394394.847:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.6.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1015.365404][ T29] audit: type=1326 audit(1741394394.857:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.6.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1015.523130][T11077] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1015.830739][ T29] audit: type=1400 audit(1741394395.317:1671): avc: denied { audit_control } for pid=16494 comm="syz.9.2582" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1015.950767][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1015.958653][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1015.976217][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1015.990118][T11077] usb 9-1: Using ep0 maxpacket: 16 [ 1016.028045][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.036559][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.036688][T11077] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1016.054575][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.062486][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.375549][T16502] netlink: 'syz.9.2584': attribute type 1 has an invalid length. [ 1016.383345][T16502] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2584'. [ 1016.404501][T11077] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.450065][ T45] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1016.458335][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.550516][T11077] usb 9-1: Product: syz [ 1016.555339][T11077] usb 9-1: Manufacturer: syz [ 1016.567714][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.580758][T11077] usb 9-1: SerialNumber: syz [ 1016.614838][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.626912][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.645613][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.654201][T11077] usb 9-1: config 0 descriptor?? [ 1016.665206][T11077] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1016.682586][T11077] usb 9-1: Detected FT232H [ 1016.687226][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.699669][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.714292][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.722201][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.724399][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.749703][ T116] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1016.777122][ T116] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1016.787185][ T45] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1016.840416][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.873503][T11077] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1016.892957][ T45] usb 7-1: config 0 descriptor?? [ 1016.911504][T11077] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1016.931191][T11077] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 1016.947093][T11077] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1016.990503][T11077] usb 9-1: USB disconnect, device number 27 [ 1017.113066][T11077] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1017.164334][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 1017.170451][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1017.180228][ T45] usb 7-1: USB disconnect, device number 68 [ 1017.199459][T11077] ftdi_sio 9-1:0.0: device disconnected [ 1017.801262][ T45] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1018.000614][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 1018.053887][ T45] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.183656][ T45] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1018.392446][T16523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1018.404983][ T45] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1018.422469][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.498712][ T45] usb 7-1: config 0 descriptor?? [ 1018.520261][ T5900] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1018.523735][ C1] hrtimer: interrupt took 15152 ns [ 1018.611519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.623872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.636101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.648307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.660922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.673142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.685437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.697648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.709880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.722076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1018.768973][ T29] audit: type=1326 audit(1741394398.657:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.8.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ba98d169 code=0x7ffc0000 [ 1020.470463][ T5900] usb 10-1: Using ep0 maxpacket: 16 [ 1020.565583][ T5900] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1020.638301][ T5900] usb 10-1: config 0 has no interface number 0 [ 1020.684093][ T5900] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1020.717150][T16534] kvm: kvm [16533]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xb7f2 [ 1020.747575][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 1020.763720][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1020.784996][ T5900] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1020.861519][T14401] Bluetooth: hci6: command 0x0406 tx timeout [ 1020.870062][ T5900] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1020.879247][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1020.950767][ T45] usb 7-1: USB disconnect, device number 69 [ 1020.994669][ T5900] usb 10-1: Product: syz [ 1021.006203][ T5900] usb 10-1: SerialNumber: syz [ 1021.049426][ T5900] usb 10-1: config 0 descriptor?? [ 1021.106226][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1021.106244][ T29] audit: type=1400 audit(1741394401.147:1686): avc: denied { read } for pid=16535 comm="syz.7.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1021.174557][ T5900] usb 10-1: can't set config #0, error -71 [ 1021.266021][T16540] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1021.275767][T16540] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1021.286653][T16540] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1021.296319][T16540] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1021.356511][ T5900] usb 10-1: USB disconnect, device number 15 [ 1023.619961][ C1] net_ratelimit: 80464 callbacks suppressed [ 1023.619984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.637989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.650148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.662316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.674584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.686778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.698979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.711179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.723374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1023.735483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1024.843149][T16551] xt_connbytes: Forcing CT accounting to be enabled [ 1024.856842][T16551] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1024.922800][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2599'. [ 1024.931861][T16551] bridge_slave_1: left allmulticast mode [ 1024.937700][T16551] bridge_slave_1: left promiscuous mode [ 1024.951097][T16551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.700946][T16551] bridge_slave_0: left allmulticast mode [ 1025.790156][T16551] bridge_slave_0: left promiscuous mode [ 1025.920191][T16551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.005280][T16557] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1028.629932][ C1] net_ratelimit: 76438 callbacks suppressed [ 1028.629946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.647909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.659954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.671978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.684001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.696019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.708043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.720056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.732087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1028.744100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1030.790952][T16567] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2603'. [ 1033.639950][ C1] net_ratelimit: 72576 callbacks suppressed [ 1033.639974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.658855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.671021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.683191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.695328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.707406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.719552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.731660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.743740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1033.755797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1034.823346][T16584] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2607'. [ 1034.891054][T16586] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2608'. [ 1035.037869][ T29] audit: type=1326 audit(1741394415.077:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1035.141689][ T29] audit: type=1326 audit(1741394415.077:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1035.287567][ T29] audit: type=1326 audit(1741394415.077:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1035.362379][ T116] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1035.477501][T16602] 9pnet_fd: Insufficient options for proto=fd [ 1035.540654][ T29] audit: type=1326 audit(1741394415.077:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1035.579972][ T116] usb 2-1: Using ep0 maxpacket: 8 [ 1035.615024][ T29] audit: type=1326 audit(1741394415.077:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f173718bad0 code=0x7ffc0000 [ 1035.657428][ T116] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1035.760066][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.842016][ T116] usb 2-1: Product: syz [ 1035.857823][ T116] usb 2-1: Manufacturer: syz [ 1035.895444][ T29] audit: type=1326 audit(1741394415.077:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1035.984084][ T116] usb 2-1: SerialNumber: syz [ 1036.029504][ T116] usb 2-1: config 0 descriptor?? [ 1036.078532][ T116] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 1036.157391][ T29] audit: type=1326 audit(1741394415.077:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f173718bdca code=0x7ffc0000 [ 1036.188597][ T116] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input61 [ 1036.843135][ T29] audit: type=1326 audit(1741394415.127:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17371bfa25 code=0x7ffc0000 [ 1037.038680][ T29] audit: type=1326 audit(1741394415.327:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1037.690643][ T29] audit: type=1326 audit(1741394415.327:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16588 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f173718d169 code=0x7ffc0000 [ 1038.649903][ C1] net_ratelimit: 60123 callbacks suppressed [ 1038.649925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.667931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.680019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.692106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.704176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.716294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.728341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.740410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.752472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1038.764532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1043.659898][ C1] net_ratelimit: 71974 callbacks suppressed [ 1043.659921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1043.659947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.665917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1043.678171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.689914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1043.702031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.713824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1043.726052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.737712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1043.749776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.669953][ C1] net_ratelimit: 73594 callbacks suppressed [ 1048.669975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1048.670119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.675981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1048.688080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.699937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1048.713189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.723802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1048.735902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.747712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1048.759949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1050.449873][ C0] sched: DL replenish lagged too much [ 1053.680279][ C0] net_ratelimit: 80064 callbacks suppressed [ 1053.680295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.689930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1053.698458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.710240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1053.722357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.734070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1053.746175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.757996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1053.770135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.781838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1058.689876][ C1] net_ratelimit: 77852 callbacks suppressed [ 1058.689897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1058.690046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.695900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1058.708008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.719872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1058.732049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.743722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1058.755807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.767851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1058.779830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.699955][ C1] net_ratelimit: 79531 callbacks suppressed [ 1063.699976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1063.700023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.705992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1063.718073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.729940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1063.742136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.753806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1063.765883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.777814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1063.790033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.710021][ C0] net_ratelimit: 77455 callbacks suppressed [ 1068.710036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.719915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1068.728167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.739961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1068.752055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.763803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1068.775926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.787741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1068.799894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.811630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1073.719943][ C1] net_ratelimit: 62242 callbacks suppressed [ 1073.719966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1073.719976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.720241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.729999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1073.738122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.749830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1073.762035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.773771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1073.785807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.797643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1078.729905][ C1] net_ratelimit: 72566 callbacks suppressed [ 1078.729928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1078.730008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.735945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1078.748069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.770126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1078.772172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.783803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1078.795925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.808252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1078.820527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.739924][ C1] net_ratelimit: 64815 callbacks suppressed [ 1083.739947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1083.739972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.745942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1083.758613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.769790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1083.781894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.793716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1083.806409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.817581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1083.829650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.749942][ C1] net_ratelimit: 72692 callbacks suppressed [ 1088.749963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1088.749972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.750840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.755959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1088.768080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.779837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1088.792701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.803884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1088.815908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.827709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1093.759942][ C1] net_ratelimit: 74768 callbacks suppressed [ 1093.759964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1093.760324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.765966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1093.778101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.789965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1093.802719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.813860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1093.826126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.837879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1093.850703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.769921][ C1] net_ratelimit: 74754 callbacks suppressed [ 1098.769944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1098.769984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.775947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1098.788780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.800105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1098.812468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.824217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1098.837009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.848090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1098.860264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.779928][ C1] net_ratelimit: 75458 callbacks suppressed [ 1103.779951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1103.780322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.785946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1103.798053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.809933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1103.822683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.833745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1103.845854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.857667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1103.870463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.790002][ C0] net_ratelimit: 75138 callbacks suppressed [ 1108.790024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.790082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1108.796826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.807943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1108.820095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.831884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1108.844701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.855746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1108.867853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.879665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1113.799914][ C1] net_ratelimit: 74274 callbacks suppressed [ 1113.799938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1113.800538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.806009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1113.818800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.829902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1113.842057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.853827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1113.866626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.877787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1113.889914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.809919][ C1] net_ratelimit: 74678 callbacks suppressed [ 1118.809943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1118.810781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.815949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1118.828119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.839959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1118.852727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.863782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1118.875905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.887712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1118.900566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.819913][ C1] net_ratelimit: 76485 callbacks suppressed [ 1123.819935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1123.820559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.825938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1123.838112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.850010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1123.862231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1123.873863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1123.886618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.897819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1123.909994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.829950][ C1] net_ratelimit: 77465 callbacks suppressed [ 1128.829973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1128.830726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.836007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1128.848201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.860003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1128.872208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1128.883858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1128.896609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.907836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1128.919984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.839937][ C1] net_ratelimit: 77252 callbacks suppressed [ 1133.839958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1133.840462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.845962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1133.858079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.869938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1133.882778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1133.893792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1133.906457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.917733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1133.929882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.849920][ C1] net_ratelimit: 76784 callbacks suppressed [ 1138.849941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1138.851055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.855939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1138.868055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.880161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1138.892365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1138.904015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1138.916776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.927971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1138.940103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.859946][ C1] net_ratelimit: 76880 callbacks suppressed [ 1143.859967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1143.860145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.865963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1143.878164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1143.889819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1143.902561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.913741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1143.925857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.937696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1143.949895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1148.869882][ C1] net_ratelimit: 77627 callbacks suppressed [ 1148.869905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1148.870718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.875917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1148.888061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.899930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1148.912100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1148.923739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1148.936498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.947673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1148.959789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.879882][ C1] net_ratelimit: 76096 callbacks suppressed [ 1153.879905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1153.879963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.885941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1153.898140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1153.909788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1153.922534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.933712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1153.945868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.957642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1153.969864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1158.889934][ C1] net_ratelimit: 76033 callbacks suppressed [ 1158.889956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1158.890249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1158.895979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1158.908745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.919956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1158.932094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.943895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1158.956134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1158.967748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1158.980537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.899888][ C1] net_ratelimit: 76824 callbacks suppressed [ 1163.899911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1163.900507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1163.905933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1163.918822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.929981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1163.942109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.953906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1163.966133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1163.977778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1163.990607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.909910][ C1] net_ratelimit: 76979 callbacks suppressed [ 1168.909932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1168.910343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.915955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1168.928151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.939959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1168.952195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1168.963834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1168.976621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.987836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1168.999994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.919953][ C1] net_ratelimit: 76914 callbacks suppressed [ 1173.919976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1173.920683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.925992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1173.938155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.949989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1173.962229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1173.973867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1173.986652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.997859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1174.010020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.929886][ C1] net_ratelimit: 76454 callbacks suppressed [ 1178.929908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1178.930026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.935918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1178.948058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.959933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1178.972103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1178.983727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1178.996510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.007703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1179.019924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1182.709854][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1182.716846][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l P9805/1:b..l [ 1182.726296][ C1] rcu: (detected by 1, t=10503 jiffies, g=72981, q=261 ncpus=2) [ 1182.734037][ C1] task:syz-executor state:R running task stack:25232 pid:9805 tgid:9805 ppid:5804 task_flags:0x40050c flags:0x00004006 [ 1182.749385][ C1] Call Trace: [ 1182.752675][ C1] [ 1182.755613][ C1] __schedule+0xf43/0x5890 [ 1182.760043][ C1] ? hlock_class+0x4e/0x130 [ 1182.764556][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1182.769857][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1182.774635][ C1] ? __pfx___schedule+0x10/0x10 [ 1182.779500][ C1] ? find_held_lock+0x2d/0x110 [ 1182.784270][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1182.789660][ C1] preempt_schedule_common+0x44/0xc0 [ 1182.794966][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1182.800187][ C1] _raw_spin_unlock+0x3e/0x50 [ 1182.804872][ C1] unmap_page_range+0xee3/0x4390 [ 1182.809845][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1182.815231][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1182.820188][ C1] ? uprobe_munmap+0x20/0x5c0 [ 1182.824884][ C1] unmap_single_vma+0x194/0x2b0 [ 1182.829744][ C1] unmap_vmas+0x22f/0x490 [ 1182.834084][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1182.838957][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1182.843929][ C1] exit_mmap+0x1c1/0xba0 [ 1182.848208][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1182.852966][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1182.857772][ C1] __mmput+0x12a/0x410 [ 1182.861859][ C1] mmput+0x62/0x70 [ 1182.865654][ C1] do_exit+0x9ba/0x2d70 [ 1182.869813][ C1] ? get_signal+0x8f7/0x26c0 [ 1182.874398][ C1] ? __pfx_do_exit+0x10/0x10 [ 1182.878995][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1182.884026][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1182.889418][ C1] do_group_exit+0xd3/0x2a0 [ 1182.893915][ C1] get_signal+0x24ed/0x26c0 [ 1182.898440][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 1182.904087][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 1182.909374][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 1182.914747][ C1] ? __pfx_get_signal+0x10/0x10 [ 1182.919615][ C1] ? __do_sys_wait4+0xd2/0x170 [ 1182.924388][ C1] ? find_held_lock+0x2d/0x110 [ 1182.929153][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 1182.934695][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1182.940883][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1182.946535][ C1] do_syscall_64+0xda/0x250 [ 1182.951042][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.956948][ C1] RIP: 0033:0x7f4457983393 [ 1182.961364][ C1] RSP: 002b:00007ffcc74e5f28 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1182.969780][ C1] RAX: fffffffffffffe00 RBX: 0000000000002665 RCX: 00007f4457983393 [ 1182.977751][ C1] RDX: 0000000040000000 RSI: 00007ffcc74e5f3c RDI: 00000000ffffffff [ 1182.985820][ C1] RBP: 00007ffcc74e5f3c R08: 0000000000000000 R09: 0000000000000000 [ 1182.993885][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1183.001862][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1183.009837][ C1] [ 1183.012856][ C1] task:kthreadd state:R running task stack:25920 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 1183.026384][ C1] Call Trace: [ 1183.029663][ C1] [ 1183.032592][ C1] __schedule+0xf43/0x5890 [ 1183.037030][ C1] ? mark_lock+0xb5/0xc60 [ 1183.041382][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1183.046166][ C1] ? __pfx___schedule+0x10/0x10 [ 1183.051028][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1183.055812][ C1] ? mark_held_locks+0x9f/0xe0 [ 1183.060597][ C1] preempt_schedule_irq+0x51/0x90 [ 1183.065635][ C1] irqentry_exit+0x36/0x90 [ 1183.070059][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.076053][ C1] RIP: 0010:stack_trace_consume_entry+0xe3/0x170 [ 1183.082395][ C1] Code: 43 10 48 8b 03 48 8d 2c e8 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 75 64 48 89 75 00 8b 43 08 39 43 10 <0f> 92 c0 48 83 c4 08 5b 5d c3 cc cc cc cc 83 e8 01 89 43 0c 48 83 [ 1183.102019][ C1] RSP: 0018:ffffc900000774b0 EFLAGS: 00000287 [ 1183.108093][ C1] RAX: 0000000000000010 RBX: ffffc90000077590 RCX: 0000000000000000 [ 1183.116058][ C1] RDX: 1ffff9200000eec8 RSI: ffffffff821cded9 RDI: ffffc9000007759c [ 1183.124385][ C1] RBP: ffffc90000077640 R08: ffffc90000077504 R09: ffffffff9103fbca [ 1183.132369][ C1] R10: ffffc900000774d0 R11: 0000000000011d22 R12: ffffffff81a5acc0 [ 1183.140347][ C1] R13: ffffc90000077590 R14: 0000000000000000 R15: ffff88801c2da440 [ 1183.148318][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1183.154476][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 1183.159514][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1183.165166][ C1] arch_stack_walk+0x86/0x100 [ 1183.169850][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 1183.175011][ C1] stack_trace_save+0x95/0xd0 [ 1183.179809][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1183.185206][ C1] save_stack+0x162/0x1f0 [ 1183.189542][ C1] ? __pfx_save_stack+0x10/0x10 [ 1183.194389][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1183.200038][ C1] ? free_frozen_pages+0x6db/0xfb0 [ 1183.205156][ C1] ? __put_partials+0x14c/0x170 [ 1183.210025][ C1] ? qlist_free_all+0x4e/0x120 [ 1183.214810][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 1183.220447][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 1183.225496][ C1] __reset_page_owner+0x8d/0x400 [ 1183.230455][ C1] free_frozen_pages+0x6db/0xfb0 [ 1183.235406][ C1] __put_partials+0x14c/0x170 [ 1183.240106][ C1] qlist_free_all+0x4e/0x120 [ 1183.244714][ C1] ? lsm_blob_alloc+0x68/0x90 [ 1183.249400][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 1183.254871][ C1] __kasan_slab_alloc+0x69/0x90 [ 1183.259732][ C1] __kmalloc_noprof+0x1cd/0x510 [ 1183.264580][ C1] lsm_blob_alloc+0x68/0x90 [ 1183.269102][ C1] security_prepare_creds+0x30/0x270 [ 1183.274404][ C1] prepare_creds+0x540/0x750 [ 1183.278992][ C1] ? __pfx_get_random_u64+0x10/0x10 [ 1183.284188][ C1] copy_creds+0xa7/0xa50 [ 1183.288446][ C1] copy_process+0x10b2/0x8c50 [ 1183.293134][ C1] ? hlock_class+0x4e/0x130 [ 1183.297634][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 1183.302664][ C1] ? __pfx_copy_process+0x10/0x10 [ 1183.307789][ C1] ? hlock_class+0x4e/0x130 [ 1183.312302][ C1] ? mark_lock+0xb5/0xc60 [ 1183.316641][ C1] ? psi_task_switch+0x2c1/0x8e0 [ 1183.321584][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1183.326360][ C1] ? find_held_lock+0x2d/0x110 [ 1183.331139][ C1] ? __pfx_lock_release+0x10/0x10 [ 1183.336171][ C1] ? rcu_is_watching+0x12/0xc0 [ 1183.340945][ C1] kernel_clone+0xfd/0x960 [ 1183.345366][ C1] ? hlock_class+0x4e/0x130 [ 1183.349875][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 1183.354915][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1183.359962][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1183.365172][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1183.370385][ C1] ? __pfx_kthread+0x10/0x10 [ 1183.374985][ C1] kernel_thread+0xd5/0x120 [ 1183.379484][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 1183.384584][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 1183.389886][ C1] ? __pfx_kthread+0x10/0x10 [ 1183.394492][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1183.399869][ C1] ? lock_acquire+0x2f/0xb0 [ 1183.404379][ C1] ? kthreadd+0x382/0x7d0 [ 1183.408727][ C1] kthreadd+0x4ef/0x7d0 [ 1183.412896][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1183.417581][ C1] ret_from_fork+0x45/0x80 [ 1183.421991][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1183.426677][ C1] ret_from_fork_asm+0x1a/0x30 [ 1183.431464][ C1] [ 1183.434485][ C1] rcu: rcu_preempt kthread starved for 9741 jiffies! g72981 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1183.445597][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1183.455577][ C1] rcu: RCU grace-period kthread stack dump: [ 1183.461465][ C1] task:rcu_preempt state:R running task stack:27456 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1183.474981][ C1] Call Trace: [ 1183.478251][ C1] [ 1183.481176][ C1] __schedule+0xf43/0x5890 [ 1183.485604][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1183.490832][ C1] ? __pfx___schedule+0x10/0x10 [ 1183.495695][ C1] ? schedule+0x298/0x350 [ 1183.500031][ C1] ? __pfx_lock_release+0x10/0x10 [ 1183.505075][ C1] ? lock_acquire+0x2f/0xb0 [ 1183.509590][ C1] ? schedule+0x1fd/0x350 [ 1183.513938][ C1] schedule+0xe7/0x350 [ 1183.518032][ C1] schedule_timeout+0x124/0x280 [ 1183.522879][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1183.528269][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1183.533572][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1183.539378][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1183.544838][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1183.549620][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1183.554924][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1183.559608][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1183.564807][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1183.570629][ C1] rcu_gp_kthread+0x271/0x380 [ 1183.575324][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1183.580538][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1183.585753][ C1] ? __kthread_parkme+0x148/0x220 [ 1183.590786][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1183.596000][ C1] kthread+0x3af/0x750 [ 1183.600087][ C1] ? __pfx_kthread+0x10/0x10 [ 1183.604710][ C1] ? __pfx_kthread+0x10/0x10 [ 1183.609484][ C1] ret_from_fork+0x45/0x80 [ 1183.613917][ C1] ? __pfx_kthread+0x10/0x10 [ 1183.618513][ C1] ret_from_fork_asm+0x1a/0x30 [ 1183.623286][ C1] [ 1183.626308][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1183.632641][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1183.637851][ C0] NMI backtrace for cpu 0 [ 1183.637874][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1183.637894][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1183.637904][ C0] RIP: 0010:stack_access_ok+0x161/0x200 [ 1183.637933][ C0] Code: 03 80 3c 02 00 0f 85 95 00 00 00 49 39 ee 48 8b 43 10 77 29 48 39 e8 76 24 4c 01 e5 48 39 e8 0f 93 c0 49 39 ee 0f 92 c2 21 d0 <48> 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 83 c4 [ 1183.637950][ C0] RSP: 0018:ffffc90000006818 EFLAGS: 00000202 [ 1183.637965][ C0] RAX: 0000000000000001 RBX: ffffc900000068c8 RCX: ffffc90000008000 [ 1183.637977][ C0] RDX: ffffc90000007801 RSI: ffffc900000077f8 RDI: ffffc900000068c8 [ 1183.637989][ C0] RBP: ffffc900000077f8 R08: ffffffff919420c8 R09: ffffffff919420ba [ 1183.638001][ C0] R10: ffffc900000068c8 R11: 00000000000933e6 R12: 0000000000000008 [ 1183.638012][ C0] R13: ffffc900000068d8 R14: ffffc900000068d0 R15: ffffc90000000000 [ 1183.638024][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1183.638041][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.638053][ C0] CR2: 0000400000000448 CR3: 0000000064f92000 CR4: 00000000003526f0 [ 1183.638065][ C0] DR0: fffffffffffffffc DR1: 0000000000000006 DR2: 0200000000000000 [ 1183.638077][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1183.638088][ C0] Call Trace: [ 1183.638093][ C0] [ 1183.638100][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1183.638129][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1183.638151][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1183.638175][ C0] ? stack_access_ok+0x161/0x200 [ 1183.638200][ C0] ? default_do_nmi+0x6a/0x160 [ 1183.638226][ C0] ? exc_nmi+0x170/0x1e0 [ 1183.638250][ C0] ? end_repeat_nmi+0xf/0x53 [ 1183.638277][ C0] ? stack_access_ok+0x161/0x200 [ 1183.638302][ C0] ? stack_access_ok+0x161/0x200 [ 1183.638327][ C0] ? stack_access_ok+0x161/0x200 [ 1183.638351][ C0] [ 1183.638357][ C0] [ 1183.638364][ C0] unwind_next_frame+0xac7/0x20c0 [ 1183.638389][ C0] ? br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 1183.638409][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1183.638431][ C0] arch_stack_walk+0x95/0x100 [ 1183.638450][ C0] ? br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 1183.638469][ C0] stack_trace_save+0x95/0xd0 [ 1183.638488][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1183.638509][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1183.638534][ C0] kasan_save_stack+0x33/0x60 [ 1183.638551][ C0] ? kasan_save_stack+0x33/0x60 [ 1183.638566][ C0] ? kasan_save_track+0x14/0x30 [ 1183.638583][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1183.638605][ C0] ? __kasan_slab_free+0x51/0x70 [ 1183.638622][ C0] ? kmem_cache_free+0x2e2/0x4d0 [ 1183.638638][ C0] ? __skb_ext_put+0x102/0x2c0 [ 1183.638663][ C0] ? __skb_ext_del+0xf3/0x340 [ 1183.638681][ C0] ? br_nf_dev_queue_xmit+0x7a3/0x2c50 [ 1183.638697][ C0] ? br_nf_post_routing+0x8ee/0x11b0 [ 1183.638713][ C0] ? nf_hook_slow+0xbb/0x200 [ 1183.638729][ C0] ? nf_hook+0x474/0x7d0 [ 1183.638751][ C0] ? br_forward_finish+0xcd/0x130 [ 1183.638774][ C0] ? br_nf_hook_thresh+0x303/0x410 [ 1183.638790][ C0] ? br_nf_forward_finish+0x66a/0xba0 [ 1183.638807][ C0] ? br_nf_forward_ip.part.0+0x610/0x820 [ 1183.638824][ C0] ? br_nf_forward+0xf11/0x1bd0 [ 1183.638840][ C0] ? nf_hook_slow+0xbb/0x200 [ 1183.638856][ C0] ? nf_hook+0x474/0x7d0 [ 1183.638877][ C0] ? __br_forward+0x1be/0x5b0 [ 1183.638899][ C0] ? deliver_clone+0x5b/0xa0 [ 1183.638920][ C0] ? br_flood+0x491/0x5e0 [ 1183.638942][ C0] ? br_handle_frame_finish+0xea2/0x1c90 [ 1183.638958][ C0] ? br_nf_hook_thresh+0x303/0x410 [ 1183.638975][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1183.638993][ C0] ? br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 1183.639022][ C0] kasan_save_track+0x14/0x30 [ 1183.639039][ C0] kasan_save_free_info+0x3b/0x60 [ 1183.639061][ C0] __kasan_slab_free+0x51/0x70 [ 1183.639079][ C0] kmem_cache_free+0x2e2/0x4d0 [ 1183.639095][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1183.639114][ C0] ? __skb_ext_put+0x102/0x2c0 [ 1183.639135][ C0] __skb_ext_put+0x102/0x2c0 [ 1183.639155][ C0] __skb_ext_del+0xf3/0x340 [ 1183.639175][ C0] br_nf_dev_queue_xmit+0x7a3/0x2c50 [ 1183.639195][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1183.639214][ C0] br_nf_post_routing+0x8ee/0x11b0 [ 1183.639233][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1183.639250][ C0] nf_hook_slow+0xbb/0x200 [ 1183.639267][ C0] nf_hook+0x474/0x7d0 [ 1183.639289][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1183.639314][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1183.639338][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1183.639362][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1183.639387][ C0] br_forward_finish+0xcd/0x130 [ 1183.639410][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1183.639434][ C0] br_nf_hook_thresh+0x303/0x410 [ 1183.639451][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1183.639476][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1183.639492][ C0] ? __pfx_lock_release+0x10/0x10 [ 1183.639514][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1183.639534][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1183.639561][ C0] br_nf_forward_finish+0x66a/0xba0 [ 1183.639577][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1183.639603][ C0] br_nf_forward_ip.part.0+0x610/0x820 [ 1183.639623][ C0] br_nf_forward+0xf11/0x1bd0 [ 1183.639641][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1183.639661][ C0] nf_hook_slow+0xbb/0x200 [ 1183.639678][ C0] nf_hook+0x474/0x7d0 [ 1183.639700][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1183.639724][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1183.639748][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1183.639770][ C0] ? __asan_memcpy+0x3c/0x60 [ 1183.639797][ C0] __br_forward+0x1be/0x5b0 [ 1183.639819][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1183.639846][ C0] deliver_clone+0x5b/0xa0 [ 1183.639869][ C0] br_flood+0x491/0x5e0 [ 1183.639894][ C0] br_handle_frame_finish+0xea2/0x1c90 [ 1183.639913][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1183.639933][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 1183.639953][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 1183.639978][ C0] ? ip6t_do_table+0xd50/0x1d40 [ 1183.639998][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1183.640019][ C0] ? nf_hook_slow+0x132/0x200 [ 1183.640036][ C0] br_nf_hook_thresh+0x303/0x410 [ 1183.640053][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1183.640071][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1183.640090][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1183.640107][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1183.640132][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1183.640158][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1183.640176][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1183.640196][ C0] br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 1183.640214][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1183.640232][ C0] ? __pfx_lock_release+0x10/0x10 [ 1183.640254][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1183.640273][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1183.640296][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1183.640315][ C0] br_handle_frame+0xad7/0x14a0 [ 1183.640333][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1183.640351][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1183.640367][ C0] ? mark_lock+0xb5/0xc60 [ 1183.640390][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1183.640406][ C0] __netif_receive_skb_core.constprop.0+0xa20/0x4330 [ 1183.640429][ C0] ? kasan_quarantine_put+0xf0/0x240 [ 1183.640448][ C0] ? kmem_cache_free+0x2e2/0x4d0 [ 1183.640464][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1183.640483][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1183.640505][ C0] ? hlock_class+0x4e/0x130 [ 1183.640522][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 1183.640548][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1183.640571][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1183.640593][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1183.640619][ C0] ? process_backlog+0x3f1/0x15f0 [ 1183.640638][ C0] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1183.640663][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1183.640684][ C0] ? rcu_is_watching+0x12/0xc0 [ 1183.640703][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1183.640719][ C0] ? process_backlog+0x3f1/0x15f0 [ 1183.640739][ C0] ? process_backlog+0x3f1/0x15f0 [ 1183.640758][ C0] __netif_receive_skb+0x1d/0x160 [ 1183.640778][ C0] process_backlog+0x443/0x15f0 [ 1183.640800][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1183.640822][ C0] net_rx_action+0xa94/0x1010 [ 1183.640846][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1183.640868][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1183.640888][ C0] ? tmigr_handle_remote+0x133/0x380 [ 1183.640909][ C0] ? run_timer_base+0x121/0x190 [ 1183.640931][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1183.640955][ C0] handle_softirqs+0x213/0x8f0 [ 1183.640980][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1183.641006][ C0] __irq_exit_rcu+0x109/0x170 [ 1183.641029][ C0] irq_exit_rcu+0x9/0x30 [ 1183.641052][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1183.641071][ C0] [ 1183.641076][ C0] [ 1183.641083][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.641106][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1183.641130][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 08 58 ac 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 58 3a 87 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1183.641146][ C0] RSP: 0018:ffffffff8de07d70 EFLAGS: 00000246 [ 1183.641158][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b576469 [ 1183.641170][ C0] RDX: 0000000000000001 RSI: ffff888143ef4800 RDI: ffff888143ef4864 [ 1183.641181][ C0] RBP: ffff888143ef4864 R08: 0000000000000001 R09: ffffed10170c6f85 [ 1183.641192][ C0] R10: ffff8880b8637c2b R11: 0000000000000000 R12: ffff88801f3c6800 [ 1183.641203][ C0] R13: ffffffff8ee2e7e0 R14: 0000000000000000 R15: 0000000000000000 [ 1183.641217][ C0] ? ct_kernel_exit+0x139/0x190 [ 1183.641237][ C0] acpi_idle_enter+0xc5/0x160 [ 1183.641259][ C0] cpuidle_enter_state+0xaa/0x4f0 [ 1183.641281][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1183.641306][ C0] cpuidle_enter+0x4e/0xa0 [ 1183.641327][ C0] do_idle+0x310/0x3f0 [ 1183.641349][ C0] ? __pfx_do_idle+0x10/0x10 [ 1183.641373][ C0] cpu_startup_entry+0x4f/0x60 [ 1183.641395][ C0] rest_init+0x16b/0x2b0 [ 1183.641417][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1183.641437][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1183.641457][ C0] start_kernel+0x3e9/0x4d0 [ 1183.641474][ C0] x86_64_start_reservations+0x18/0x30 [ 1183.641491][ C0] x86_64_start_kernel+0xb2/0xc0 [ 1183.641507][ C0] common_startup_64+0x13e/0x148 [ 1183.641538][ C0] [ 1183.939909][ C1] net_ratelimit: 63357 callbacks suppressed [ 1183.939929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1183.942534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.947130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1183.952617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.958108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1183.963214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1183.967526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1183.972483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.976404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1183.981113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.949942][ C1] net_ratelimit: 73891 callbacks suppressed [ 1188.949964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1188.950070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1188.955973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1188.968630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.979938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1188.992074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.003933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1189.016145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1189.027795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:ae:b6:57:bf:22, vlan:0) [ 1189.041290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1192.222598][T14401] Bluetooth: hci4: command 0x0405 tx timeout