last executing test programs: 2m48.859559381s ago: executing program 2 (id=207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x29d, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000800)={0x0, 0x2, 0x81, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000c00)={r3, 0x5, 0x100000000}) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000001580)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x7ff8000, 0x3}, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000015c0)=[{0x10, 0x114, 0x1}], 0x10}}], 0x1, 0x0) sendmsg$rds(r2, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000acbc5840ba0d0030ea2600000001090212"], 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r0, @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m46.691082244s ago: executing program 2 (id=214): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0x9, 0x2, 0x401, 0xd}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 2m46.609228238s ago: executing program 2 (id=216): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2000000d200a7ea311df0"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0x5, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10012, 0xffffffffffffffff, 0x3000) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={0xffffffffffffffff, 0x400, 0x18}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2], 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x27) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)=@o_path={&(0x7f0000001240)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, &(0x7f0000000040), 0x0}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x40001, 0x40000000, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x17, 0x19, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6}]}, &(0x7f0000000c80)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000cc0), 0x40f00, 0x23, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0x9, 0x7, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3, r4, r5, r6, r8], 0x0, 0x10, 0x9, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) syz_usb_connect(0x2, 0x641, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x38, 0xa3, 0x44, 0x10, 0x403, 0x937c, 0x62cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62f, 0x1, 0x81, 0x4e, 0x4628106d90cea14, 0xf, [{{0x9, 0x4, 0xb6, 0x7, 0x9, 0x6f, 0xf3, 0xe9, 0xfd, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x3e}]}, @hid_hid={0x9, 0x21, 0x100, 0xc, 0x1, {0x22, 0x23a}}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x5, 0x7, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6b1}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0xfe, 0x80, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x7f, 0x29, [@generic={0x1f, 0x31, "10cb6ef14b3692db62f9d126962095c85394e8733c04bc38dd03d691f5"}, @generic={0xb3, 0x22, "236ed3655656828e4be550fee2ab4cc9011f3935cb75fb1f6bd2a46200e0b96e915a88c0d04ec2757f71c3db3d641aa99c2d3b45fa9c30fd93c41da1d7daa43128d60e890de84c9a4774882f57d7c9bc49dc6b53f2b50aa6a9e6ffce1a02d5f6e969e384385f896a2a84ce1b669916b9db3e8d08d99830bddb98904fab599ee804772876393d96514b29d6f82d95e48bfe6defeec3924e75fa4ccbd0516526cdf1071a36275fbe1c0d786809841a4816ab"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7f, 0x2, 0x5, [@generic={0x9e, 0x3, "9d2829f3ffc043a48cb1f11cd424a3814f4d0867b424ce461a98375827b5913f96f09611bb27d56677c4d2d4d05adea535ca69b9d653ab092bd866e03693197cc8b12a0f76cb51d072aa70977bd02565ac50ac7f2c5b94e2da7662e5a880e653a1c67ba95fc63761df0180e7d84905ae2871de76f492d4b07cdb0579038bd2be0ea529f4d862023d71a0985974284b9cc4d6591deb1664c924699c23"}, @generic={0x59, 0x9, "c88e70f2676a8ef6ffc881296bb483f91424127ec4f53fc8cb7ec2e2144c2783927cd59bf84cb0cefc6385ec4ae17220e293f9117498fef142bffabf20571c13ef15422d8e4737af75984335ebc58c09aaf4d3b51410af"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x1, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe7, 0x10}, @generic={0xc1, 0x8, "d2905a37d5f662470e81c5d444097463ca81961839c73cdc57e9b8f0a43234b1f05e7027ca1e9ba11ca4f64a01b46c6051ccc1997784e3e024c75d9b3e281acb4a533e85a311270885ba663b43179e53b2d83e29e7d6f12914913474d92861e5e8be6a9a79ae5d1712bff5c5f0907965a9ddd72e7e372a7369267ae6778c6aad5681132a243a0e7bc59bb217bd31c5ea596926679eda08cfcb60e66ef81aab2d73c209f9aa67b777a254871c07e2621414498fe75b2643321faac24698bd30"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x0, 0xf, 0x1, [@generic={0xb9, 0x9, "971bd5963efa20bb8c4d22e74b686c6496786c41ba2c1616806e3baa17f1689f1046445bd6bc2d4e585967fdb990318a0db9ad4a203da0b312d5118644f6b6f9da0481ddb8b0e7d6c162e27b454c6d9febee240caa6ed0fb86f98825e94f08c37ad0bbd918c3148f91901d270edf82b65cd2ef733d8eef21ca2c18b975bc0153bada3fa0ab3f2bf9d48f5955e56a9f140a68bf3f2120857254db0cc280af648bcc39e4d0daadaeed4aaed769eb7429e936eca412a7aa92"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x4, 0x1, 0xa, [@generic={0xbc, 0x11, "d508af9813559c01dc6e2c0cd15115978bb4b908744e7cc43256cab4370ba53de06d047ecf17c7939e88c75a798ef679d2f43230244b132a0b622c85ee958030cf6e43a5c8a6ea1fb0349d8bd5d34d05ca90e363690883bce341d71566d11bddad9371c81e10a67267cb3f80fb482f32a3ebcfd2dbbd43cd73bb864d109bd7bbb86a24ed19646618e87dcc0d36ac04c06167516121eb54fc0541c9c4de98c4b8460352eb4bc331f33cf9ddaba3932f45dd73dce9320081200306"}, @generic={0x81, 0xf, "af9496800e02c87a389ded5c0cfd9b326ff153e056be49e5941a0587cb00e59bada8aa682ee732df40db37a5952c800e163b43c06303acd1556455dfeb757c70a9ceb36c28173fb606192680c03ceaeaf2a88368d2c9519f12719bb61a9f3a2695151d799d578c9b7740d81072fb55006aaf01aafd5b3408467ab4336e504e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x4, 0x9, [@generic={0x31, 0x0, "842dbb361135b4463315d8c1b64baa4d77625a55928729525f781cf4c308ab39d851ffba515503d1ceea9229c37c57"}, @generic={0xf5, 0xb, "eeafbfabc91fa4e52e8f4f827228b80158fa1527fcd20827a935d3e22c804ce02db4353fccad46cd8da3f12e54bc097710d113df4c4586f543c80c156a6daf432391590b55c4fc3c8fb3f7055e65916f45e01312add37a44cc539f75ed4956a75ae0066f9a311d1034408b77d57a65e1e97600ad6127d68e500149aa8e9e8d1ad6048a65dd8212f4ea2620d797ba2a1264aa93667154c5aa8c38519c896bdc4b98afa968835c563369ffd04e652274dd6907bb86f7e7f2856c90f7cdd1e03bb1229e982b60e6ca95464f5e21bcbcf0c6a4f91583419327ee6e6e3964c6dc4e16224ab1e5ef894ae93214d2dce84b0c591e858f"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x77, 0x5a, 0x6}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x8, 0x5, 0xc, 0xf7, 0x1}, 0xb5, &(0x7f0000000280)={0x5, 0xf, 0xb5, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "701b51211774713ad6deba3b6ecf3a21"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x9, 0x6}, @generic={0x71, 0x10, 0x0, "3fad6bf91fc58f27e6fa46f19ac47e78f085a029f183b378160b92268678893b5c1fdcd7d36802dd3ac5803e0852f1d8a4b252e0a7067f304206a5258fb917440c871ef7aec62995034e82407aa6a2bdc2f1bd00fb453e337f82de9348678e26cc09519b773e63a2b18df0715470"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "7edc8ababc218fd75a60c42a8b6f6480"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x8, 0xff00, 0x1, [0x3f0f]}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42b}}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)=':', 0x1, 0x8845, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201002100000040c8"], 0x0) shutdown(0xffffffffffffffff, 0x1) 2m43.592930577s ago: executing program 2 (id=222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f00000001c0), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10d082, 0x0) (fail_nth: 2) 2m43.462182926s ago: executing program 2 (id=224): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f00007b9000/0x3000)=nil, 0x3000, 0x1000009, 0x110, 0xffffffffffffffff, 0x8000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 2m42.873425244s ago: executing program 2 (id=227): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYRES32=r0], 0x119) syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ebeaa220d0070141c087010203010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 2m27.83588761s ago: executing program 32 (id=227): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYRES32=r0], 0x119) syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ebeaa220d0070141c087010203010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 26.737875645s ago: executing program 3 (id=697): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) 25.661753375s ago: executing program 3 (id=699): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1fc, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 24.227339059s ago: executing program 5 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES64, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r6, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/243, 0xf3}], 0x1}, 0x7}], 0x1, 0x10120, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {0x5, 0xfff2}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x4, '\x00', r7, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) 23.140512475s ago: executing program 0 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000000008, 0x200010000086}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "3a71af0ea2f75484", "a76283595133cc09adc8764b32865053", "0fecda9a", "0d18c7fdcce037ea"}, 0x28) socket$netlink(0x10, 0x3, 0xf) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000006500)=[{{&(0x7f0000000440)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/25, 0x19}], 0x6, &(0x7f0000000a00)=""/48, 0x30}, 0xb68}, {{&(0x7f0000001e40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000ac0)=""/102, 0x66}, {&(0x7f0000000b40)=""/24, 0x18}, {&(0x7f0000000b80)=""/243, 0xf3}, {&(0x7f0000000c80)=""/103, 0x67}], 0x4, &(0x7f0000000d40)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000002040), 0x0, &(0x7f00000020c0)=""/143, 0x8f}, 0x10000}, {{&(0x7f0000002180)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, &(0x7f0000003240)=""/49, 0x31}, 0x8}, {{&(0x7f0000003280)=@nl=@proc, 0x80, &(0x7f0000003400)=[{&(0x7f0000003300)=""/138, 0x8a}, {&(0x7f00000033c0)=""/32, 0x20}], 0x2, &(0x7f0000003440)=""/249, 0xf9}, 0xccf}, {{&(0x7f0000003540)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000035c0)=""/195, 0xc3}], 0x1, &(0x7f0000003700)=""/37, 0x25}, 0x6}, {{&(0x7f0000003740)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003b40)=[{&(0x7f00000037c0)=""/129, 0x81}, {&(0x7f0000003880)=""/198, 0xc6}, {&(0x7f0000003980)=""/242, 0xf2}, {&(0x7f0000003a80)=""/61, 0x3d}, {&(0x7f0000003ac0)=""/125, 0x7d}], 0x5, &(0x7f0000003bc0)=""/7, 0x7}, 0x5}, {{&(0x7f0000003c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003c80)=""/102, 0x66}, {&(0x7f0000003d00)=""/207, 0xcf}, {&(0x7f0000003e00)=""/102, 0x66}, {&(0x7f0000003e80)=""/183, 0xb7}, {&(0x7f0000003f40)=""/72, 0x48}, {&(0x7f00000060c0)=""/151, 0x97}], 0x6, &(0x7f0000001d40)=""/255, 0xff}, 0x2}, {{&(0x7f0000006280)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000006300)=""/184, 0xb8}, {&(0x7f00000063c0)=""/67, 0x43}, {&(0x7f0000006440)=""/123, 0x7b}], 0x3}, 0x8}], 0x9, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000300000/0x3000)=nil) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) unshare(0x8000000) r4 = semget$private(0x0, 0x4000, 0x555) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="682400003e000701feffffff00000000037c000008004280040008000c0001"], 0x2468}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x3}, &(0x7f0000000080), &(0x7f00000000c0)=0x9, 0x10000, 0xb7e, 0x7ff, 0x9, 0x54, 0xffffffffffffffff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0xffff9b0c}, &(0x7f0000000140)=0x94aa, &(0x7f0000000200)=0x2, 0xcf, 0xd3, 0x7, 0x3, 0x8, 0x3}}], 0xb0, 0x4040000}, 0x0) semtimedop(r4, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) read$FUSE(0xffffffffffffffff, &(0x7f0000004080)={0x2020}, 0x1f27) 23.057039228s ago: executing program 3 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00'}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000480)=""/184, 0xb8) 22.561504644s ago: executing program 5 (id=707): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x8001, 0x4) syz_io_uring_setup(0x3cc1, &(0x7f0000000180)={0x0, 0x7c21, 0x800, 0x2, 0x68, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x8, 0x8, 0x1000, 0x3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae3d", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000003740)={r1, r2, r1}, &(0x7f0000003780)=""/194, 0xc2, &(0x7f00000038c0)={&(0x7f0000003880)={'sm3\x00'}}) 21.279680212s ago: executing program 5 (id=708): rename(&(0x7f0000000400)='./file2\x00', &(0x7f0000000440)='.\x00') socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000100)='fuseblk\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000480)='\xaf\xf1\xa9\x11cee\xb9s\xf1mJ\r-\xcd\vy\xb7\x18\xf1\f\xdf b\xd6\x98\xa3\x06q\\U\xd5\x1d\xc7\x84\x03JWV\xaa\x0f\x94x\x15\xc5\x83\x9cV+$\xb6\xa0\xd1\xd9d\xb10\xfb\xc0\x14I\r\xc8\xdb!\x97\xf2\xc2\x8a\n\xa0H9EQ\xd0\xadJ\x92\x10Y\xe47\xc3\x9eh\xb2|\x9b\xb4]\xec\x958\xca\xc0\x81\x13S\x801\xa1\xcd\xc0\xe2|\x8a\x81}R\x89\xab\xb2\xf3\xfa\xd3\x94\xd4\x8dEoM\x15vA\x99\x87\x1d\xd1\xde\x98[d\x06M\xc5b\xbd\xea\x11\x1b\x01\xf9=*\xd0\xef\x1f;\xa3\xa240\x0f\xdf\xdc\xc3{\xb25\b\x9c\xdc\xd5\x9b-\x17\v\x80\xd5\x14g\x97(:\x0672\x16\x9eY\xed\xef\xa0\xd9\xcb\xea\x1a+\xbc\xd9H6\xe9\x98\x04\xbd\x97\x84B_\x10<0m\x89fN\xfa\"\x9bS\xa6\x9a{\x8b\xa5\x10E\"]@\xc8\xe6\xbb\xc1\xa8A\x00M\xd3\xe6C\xfc\x9a\"7A!d(\xd5Y\xf0\xe2\xaeP\x8dr7\x19`\xb6\x97;\nF\xb3', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xc85984d157f19a04, &(0x7f0000000180)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000080)={0x397000, 0x388000, 0x8}) syz_open_dev$tty1(0xc, 0x4, 0x1) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 19.564687806s ago: executing program 0 (id=711): bind$xdp(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x96}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) 19.167280171s ago: executing program 1 (id=712): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x3, 0x0, 0x0, 0x0) 15.647066081s ago: executing program 3 (id=714): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="7eeb99b6f78ca44054798fa8d0e9", 0x36, 0x85, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x2}) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x30, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) poll(&(0x7f00000000c0)=[{r0, 0x1001}], 0x1, 0x26) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f000000fb80)=ANY=[@ANYBLOB="12015002000000086b1d010140000102030109029500030107200d0904000000010100000a24010700030201020624040109250c24020700020440060000070904010000010200000904010101010200000b24020214080f00a9c78e0a2402028000080001c609050109000204060907691f49c5cceab8d402000001020000090402010101020000082402010004091007240102080110090582090004096f0007250100060100"], &(0x7f000000fd80)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 14.998626302s ago: executing program 0 (id=715): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0x714, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0xc, 0x1}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "ff7524221aa325200e646f43051e171a6ee78ee10264a76d3a20bf5395bc779b002fbbc91670d25f8db56aafe4779ec1135f497c4c5d79bd301d0cb81aa6d1dd96c5060a1bafe919ef2c04f27cc973add776191b7b8a91923506555095cda956fc8fd38013043be3469946d3637b8a42e0759487ac6003bde17e4f1b72fd7048bf9427c072dc68b8c437517d1d77827b28c8cefc45d2a8f712204234f930428e45551332e51f4fdc45ecfd49cdb2378911b7eb2d04dc08c981b876b5d0e3356f46ff400937888169b4bbefca6832a157c392aa6e7633a26b89f685c7fd8eecc9a4955e2be6e4f3ef5b963f7ff969c87a9094c8c14ec100"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) recvmsg$can_raw(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1}, 0x10120) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) read$msr(r3, &(0x7f0000000100)=""/88, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7fffffffffffffff, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r6) 14.738347805s ago: executing program 1 (id=716): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000001400000000000000290000003e000000000000000000000014000000008747ee862701f451df8f6bcbc4000000290000"], 0x48}}], 0x1, 0x68034) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x3}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000900)={r4, 0x8000, 0x0, 0x8000000000000000, 0x1}, &(0x7f0000000940)=0x18) writev(r1, &(0x7f0000000800)=[{&(0x7f00000000c0)="f53a6558b6f060d9e13c953703129556b085d1ceca1cd4fe674cfa02411a7be54f2caa1b923c0cc8fdfef6f8780b5d98a03b317e7b2573f22283a56e5d0764602a653de94aba76e035a84d4d7dc74d4cf0e9fdca74862adec512669333deae7452a84e80c75a1e833814a6817bf1fc07ea6a8ffe330b", 0x76}, {&(0x7f00000002c0)="160eaaea1b773f0aa38f951be296d92f234e0a0c8ca310cd1ca1133df1a247608c97329404e60d62c32379ce932ab00109b496513643135a65297ad502e2cb1d349aeb223a04cf4a5a766207c9a578c95a2ef44ccdca86caebaf5cb067e57280a0fca78ad88fe778ce81ecb58d0e989da354d327214d68e11f1581a34265ba5fcda050ce31fa0c4969d8422d177ce1ea5605b68366da7883b0887f23e999101ceba6906161e8786cd23a6629ec3f9d63e3e8c949682c7efb2fd2", 0xba}, {&(0x7f0000000380)="d7601fcf5ae18a949b43f53353c97b20a2b390127d361332cd82457a99bf545b6a33777b4d6e52eb4aa888f648ca3597b04e394fb96ddb13f92ef87d5779e63a6fab36f7e0181dd67ec887da4d546f754583da4748ac24ef90e6c3a8b7edaba70faf742d4526f9a0fda9e58d78c164ebb9667e8a909cf0f8abb8d35bb0a9e9ee9690b1d4325a17ec5dd430890e3c8e7e77d6235c757fcf6e210b0c4859b0940ecf6da659971e2f63c23da1fd2c1749568b5bdd7f4de1d3f72d544b2c219d", 0xbe}, {&(0x7f0000000440)="e5f24092f2a9c2adc859c570279a0199685295c3bf164f8ccda8684cd5363a32f8cbf6c7d334c38d8d7e6eac70dd902cacfdc0c77f085e4d020e47057e3abc350286018ea2f4175832e773f4e55c8129b079e7000ec51aa5a1dfb9aace1bb6357b31fe2e7ea5cba8c3bcabd350b0b5354c700db25080e742fa2e5ac412e60a96179a3452fa8856f9485aa298eab6f2026ca92df059247a6f1f03b858c879e26867067fb5a5b3894fba4c019201a821884557c17ac3ed46edee93e358ed488fca7f78", 0xc2}, {&(0x7f0000000540)="7b9f6cfe6022dc78030872cfa55755ad4c13f3473ec0874148d21f32ed31065f9b47ad2caf9bdd75922ae7fe91f464a4abd3748f5a42106908eb9eece874b2e1e6b90590186ea6ef30ab53c4eea6d7e329edd6072e8240452a7dccb79ded81e5f91b1fd7281ecb539fdbb2fb53faeb14a0fe4a58792ecb5cd8c302ac4dfa6751579846c5d08f34ba0b4855d3a5dad5b6c442803952fcf59828c23c887d1a37ce40bf26ef0ab7fcd8e598971fd136b4b1e57f442c73442bf73a4ac55138169d14b26960ae", 0xc4}, {&(0x7f0000000640)="edfe25a7fafa83fe9c63b4d5f4782c6972a88d53223c040e7aedc0be64525682d3e81c96f87984b6c9d7800b9535e6c1e65c1255ffc1a530cdae37ef75e5dbad8d85f8de04cf3253f8d874cd657bb89cc2b373b3a9c686707284cadb7a228c14f6b78d55f97936dd2b4f2b2d71d56689891ca2da5b2bd61a5d44a97c591dd3047554c2521d767911a3da9171d8ebc9178fdec73c05982101eed086c107913cbecec3a154f013126d50541b272b1f82cf5f616e495855eb191a78623ceb56a546", 0xc0}, {&(0x7f0000000140)="1fe02c9adb3a4885ed91f2f22cb55dce2e471338cd7e78710bdaffc2249099c22a8e1e40d94e1ecc8dce58568d3212189163169809e975730cc29a1fb4098766f6c312ff96a672ff6c6ef6d2e7faaa34282dfc8926f3b4bbe6bc686c12c5f4d23dcc09", 0x63}, {&(0x7f0000000700)="9593619e1dfd249d8a1d97c7f6a8035b958044c8400836719b925ec50c74f6b1b5f0321ecfa9ee94971b107939212ddb4fd1bd270813a352b4b5df5dd6b6df94edf3eadf337a548ed91ff45c792fdb91b59ee57972676831aba5e8321da69a08a43197103d75c04c041f41cb02933e8d42468fd2fbc7421b975096e25cedce4d02c3ce00c7187e07a0e3d341211a7208970247d6c7fdf7628a496dda4db98fc4eeecf2962e660e4fff514f0854df7cc2f44d15060098e25d61b1921deeeb1cf66b4f79395c3f084e0d6679c77c9f26d26a3da3", 0xd3}], 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@enum64={0xd, 0x5, 0x0, 0x13, 0x0, 0xb, [{0x6, 0x2, 0xff}, {0x1, 0x1, 0x8000}, {0xc, 0x7, 0x2154}, {0xa, 0x80000000, 0x5}, {0x10, 0x0, 0x592f}]}, @union={0xc, 0x3, 0x0, 0x5, 0x0, 0xf, [{0xffffffff, 0x1, 0x7}, {0x9, 0x2, 0x9}, {0x0, 0x5, 0x1}]}]}, {0x0, [0x0]}}, &(0x7f0000000ac0)=""/25, 0x93, 0x19, 0x1, 0x4, 0x10000, @value}, 0x28) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='fd\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xa, 0x5, 0x2, 0x8, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) writev(r7, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0x1000}], 0x2) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r8, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r9, 0x0, 0x0, 0x60, 0x0, 0x0) r11 = socket(0xa, 0x2, 0x0) r12 = dup(r11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000280), &(0x7f0000000080)=r12}, 0x20) recvmmsg(r12, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x72c}], 0x1, 0x2000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) sendmsg$inet6(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000c80)="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", 0xfe}, {&(0x7f0000000d80)="fad56a1a5d5895d03e74e81e331191e7b9465b0c9562090b053a125edf828b85d562689f0bf5e8df480fe0b9863cdeb67e068cea2e17a815daa2b22b16eff23fe05f5145cc40afda22d9b3c7976befa271298f5031285290ab20d4c3f76838cab76c4f745f91d8308ab71483aab4a1b14f257711f5e6a6381e127e9b5e8c7be8522077c9e677a455da4ec57dfa337934dc95b0bed563495d82dd46518396d017c29f1e5a178e4ce58581413b25e95425d7e93909", 0xb4}], 0x2, &(0x7f0000001040)=ANY=[@ANYBLOB="140000000000000029000000080000000a0200000000400020000000000000002900000037000000330000000000000000010004013c000014000000000000002900000034000000060000000000000014000000000000002900000008000000000000b000000000000000290000003600000002120000000000000740000000000ec808000800000000000000030000000000000006000000000000000900000000000000620000000000000009000000000000000f0200000000000007500000000312010000060000000000000001000000000000007f04000000000000030000000000000099000000000000000100000000000000090000000000000002000000000000000b0000000000000001010000140000000000000029000000080000000400000000000000880000000000000029000000390000000c0e000600000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000001fe80000000000000000000000000001220010000000000000000000000000001ff010000000000000000000000000001fc0100000000000000000000000000011400000000000000290000000800000008000000000000005103f2bb98c0698b3e"], 0x1d0}, 0x4044) 13.060011175s ago: executing program 5 (id=718): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x8001, 0x4) syz_io_uring_setup(0x3cc1, &(0x7f0000000180)={0x0, 0x7c21, 0x800, 0x2, 0x68, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x8, 0x8, 0x1000, 0x3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae3d", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000003740)={r1, r2, r1}, &(0x7f0000003780)=""/194, 0xc2, &(0x7f00000038c0)={&(0x7f0000003880)={'sm3\x00'}}) 12.274469835s ago: executing program 5 (id=719): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xf5, 0x5, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0}, 0x0) r2 = syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000e80)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0xa9, 0x4, 0xff, 0x10, 0x9}, 0x47, &(0x7f0000000740)={0x5, 0xf, 0x47, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x2, 0x9, 0x3, 0x1a}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0xa, 0x5}, @generic={0x2a, 0x10, 0x1, "0921537aca978f58cf63fd3c13f5e433308f8e26e099780a9f0f3b7bb7e0af8544956ab4ce373a"}]}}) syz_usb_control_io(r2, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000400)={0x34, &(0x7f0000000100)={0x20, 0x0, 0x2, "15fd"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x10}, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x3}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") syz_usb_connect(0x5, 0x15fd, &(0x7f0000003dc0)=ANY=[@ANYBLOB="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", @ANYRES64], &(0x7f0000001b80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0x8, 0xfe, 0x10, 0x6}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x6, 0x4}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}, {0x102, &(0x7f0000000580)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x406}}, {0x89, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x843}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4080c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000001c00)=[{{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000480)="4d8afee49ea452a977d59a588b5f799f1b61364f1446c2251a4a659869bf3f43ef6aa58ad629b3befc86c4900a90d786afae79cccabbf795b0", 0x39}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x1c, 0x1, 0x1, [r6, r5, 0xffffffffffffffff]}}], 0x98, 0x80}}, {{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="00bbf82519376551e9c02f31338644edbf0ef0b64e08f05d1e07666427fe56ad0094991d3a2ed189a71394f93e2d7472087f668fee29fb56bbd41f3d463970d61a3013683b67a9fadbe55f19646a67c0081bffee9baf65b751a482429287280a3afb58ceb26a3a2e55608b9f64850916a48be0fa2777819a530d51bd3a5d19e8403622214f8a5db1817c72384522e9d706ea0e911b45cbd6cfa70e", 0x9b}, {&(0x7f0000000c80)="71a25646173456a9d2186122d8ae7e17eba5570a073ce27c50c50370e196988be074c3df8a00a832cba6fb882dcec22fbc", 0x31}, {&(0x7f0000000cc0)="dcc5c2d1c81018c5991140c5d5a03eac826a2d43f6a08844613fec4920a03bb112d044e7a657ef52b7f3c16cd306a6804259a6b4ae00e7bd854e2f288144d61bc590f7472b259462968e28f85f4cd5d7b6b9ced22835d58fd3d28a832ced3b90dc4d1b298e0b5f047bfb1705dbdca56b03924e0869d9e1cd3395949d08737c801c443ce51b5218b7b7ac60b60ab1537ce8c992b45917e0e5c7b0e39d4f03fc48bbcc3eae769a6c62c81d1ba6327cde4c658a782d599f67570e56ec69f0fabfeaa71ed90f55b4bf", 0xc7}], 0x3, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r3]}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x40080c3}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000f40)="357ca136051248e8eb33a4a3c9c0433237d28211771e474aeeae3a4b4f979566f6fb0f381dad015b064b90193bfc45dc53b4738415748794548f5c400b2ad253e386830a31991f15b6e593c6de251f5c5f82869c0993f416b8a951afa24e4a801c9f5087185202c39e233cccdc4da5f67c5777eb6f1851f2ffead6a17ac5194063991914122ca97e3a05f291325e8ad19a38f5b6a30c10c7d1c89f270422f38d3e2cd8deac", 0xa5}, {&(0x7f0000001000)="d1b9663c72285ad1e210438719f91f8ba48898bda8a8367d992d6d2d5ebe1598abfaaf23946ea0eeb578c3e8e904b3bbfcb2370ca8c56d897ca33fef3ab62f9c1a349412c335f2fd33e7223e8b94687888e31d3d0777229d4d91ae1baddedcadf700", 0x62}, {&(0x7f0000001080)="25f4059d7da7c6cb67a9d611e392f1", 0xf}], 0x3, &(0x7f0000001140)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x8000}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)="aa7e67552ba1ff31317d9330ffa6e96bd03cff190fb9055d8c45bb702453bbc3394a5334a148eb41510012ce033498f6d6206a6f5e90b5ef0505e5e22dc68bda5b7b363ca9e7fb33b950be9d7d2067f323350b3c07b922cffb81df781cf9771d8eeadc4124d33f6336a8c8f41e081c5793b89ad254cd75a764f9923d1e9b66d842bf971dfe3dedcd0720df5211d14a0d22eefe93f6598228a687cb0d4df034fb9c9e1387a86435dc8feb1c68219adaca50db8b7eedc2dbbf291896347d17a59b0b45edc98e", 0xc5}, {&(0x7f0000001340)="01024bab0152a3191072a24f2509e0d425ce13c45d39ea95301e49708af570", 0x1f}, {&(0x7f0000001380)="7a843ff623b6e05012225abe95f9b0035c81a847603595728464e773956fa09c6d8561cf1c8072a27e34c53bc6f336cefb3bf7cb0e9241e11f910b885b7c5a8d4fb6280b5baddd0ebc2e5c27285f24d31f9ce99b56c1f34a2c91dd1d37b4c72f61023093a832f7846ece0c6572", 0x6d}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f0000001440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000014c0)="99e9d2c18941d495d0bf4a7af473dfdf1383367672", 0x15}, {&(0x7f0000001500)="fff627d8d3a2435471628d7f212872ee5fa35a052193cf20e5e0c832cb2fda90a6f9a4859807bcf17668662e8c144479c11ac20533820b32766bf441e5637da6ef3058faf04bc2830467644752a2aff042394b653aff0ac865f75712b1d8c972c3ddcd683e6460ec480db7df199fa98473f61d39b1b0688030e42d88f70261d5bf17cb7fa1f95a2c24c701", 0x8b}, {&(0x7f00000015c0)="4e4bd1f8fe8cde7061696447e32812a4f4a6f972de8e37434a21d84030297a5e6c3ce7214c53a0dd0b23af4e908a6b55b78e63dbf7d4833ddb68b5b840633af599af29", 0x43}], 0x3, 0x0, 0x0, 0x4005040}}, {{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001700)="1378095a57e1e25c8040effb2dbdb5d00ae04bbd08b55dd159e9935cabc4bf11f087d803fd3d083793b276f426651123b56993f6510acd3918b924506ace27a0144ecdfeacdbb8b84a1b9695528c2e695ee9dcaa23de70a0ecde0f406c448c11dc137219461144cf22f5ec8355344bb1502144a956f3a1", 0x77}, {&(0x7f0000001780)="5085085619d2035bfa34081475f024b07e41e316d67772d1c0d347878fd2c0d9f1f901d88a72b40c7e5856cb61c9fd87ce98aca2fca1830c6d714f72ebe961ac3043bacd251c0246652fe19c8eaf75235c8cfb3104e523c9eb4eb2e79fdd0d4498c022fd24d6535c54caf530939fd436ffcd72bb1970e515ef4dba144fbd3a1004da2dc62983c56a7e3a31d8431a0a45e136e46a29ac13693afca48373bf79b8f4b72a8fc0e663b313424176846a37cc2cdea5c52432b1f93f", 0xb9}, {&(0x7f0000001840)="398b58a7e32edfbb2127bc9f3b548092df630ad7039e45deae07b397854371a9cb43b741436f68f4d083dbc1775ccb4c515e0090381462ff13acf6bcdba5e575ebd4761b9a721c5cf03d27b88773356a381a09287c56b98b624c486e4f3b1a6c921cdf540979322fd9597bda360826ea368014f925563400e253d7ac6390092e95d48ddb5437d61103e8ea90c34d8aef1c6f5c58ca6af56b36a54de773ee26", 0x9f}, {&(0x7f0000001900)="6f8defdb2ef48c300aebcb8514f636eaae0542259f935f8d3b9b407ddd9924399947148d05b5053b48254618c719818ca55b5d577a0ad24c3214fb08a58790d27de53db6b921459262ccaa9d369a1d22e99a3e85569f1301babb06c5a11b10f375ce70", 0x63}, {&(0x7f0000001980)="de2c8ebcd234554f51ee12d7475aa23a7530f819c158693e74fce41be84d2b", 0x1f}], 0x5, &(0x7f0000001a40), 0x0, 0x4048011}}], 0x6, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000400)=0x1) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) read(r8, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) 11.73314307s ago: executing program 1 (id=722): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x693c, &(0x7f00000002c0)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r5 = syz_open_dev$cec(0x0, 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.707141671s ago: executing program 3 (id=723): timer_create(0x7, &(0x7f0000000080)={0x0, 0x22, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x30002017}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b, 0xa8, "a124e6f74d126daf0549b448c61c708f63a4834c4ba04bda908b7b64021f9a895b2a8f91237679e1bfa5391f838af4b08d84a8413e095ea06b69aae07d9c5f90d50f1f795104de2c398a4e6c2eff0ed441e322b10a2a215e370d91b4f407cc6ff0269dc7b3c4a223b20855d91009ff107a3ac2393cdad282f08c4189e51e837ffa8c4bd4fe73da8e13ac4232e4232dc07662c7b967993ae4166041f42ef6d705ab5c2b97ceb1ca43"}}) socket(0xa, 0x4, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x153202, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f000000ae80)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 11.094009476s ago: executing program 4 (id=724): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='P', 0x1, r1) keyctl$read(0xb, r1, &(0x7f0000002e40)=""/72, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000005c0)={r3, 0xf0}, 0x8) 11.060735758s ago: executing program 0 (id=725): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f00000004c0)={0x0, 0x4661, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000001640)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x5a16, 0xa5, 0x0, 0x0) close_range(r0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 4) 10.96582013s ago: executing program 4 (id=726): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000900000000000019078ac14143aac1414bb05009078000000004d000000fffe000000110000ac141400ac1414aa0002440cfd037f00002f00001e000100000000ffffffff000000000000000000000000ffffffff000000007f000001000000000000000000000000e0000002ffffffffac1efc0100000000ac1e000100000000010000ec779f0d128f2ec1791e21b58b417f074688ec6412bf117f3ec11d00318cb8dd1f76338665a15f3ab21b6cb4857a02ee3aee1bc8108237ed685f834daeeba1145f6da0dac273f25700"/230], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1401030020000103000000000000000001000000e38400000000ab5439d5ac2e2b09fe014027e7662233ba1e438dc853f284fab03f332ba7c0cad839d064951f6dbc4686358a5e76d512c5ef0294b2e7bb168f368ee50e8e187ff8c5e002daf0dd22595f9790cb85f864890cf1f88f94839cb18c1a8b030e1b57914ecc13d955cab6cf08078083744f110ac4d1d98eb25c377428696ac0b443acafbdd9ca98f5b13a"], 0x14}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@register_looper], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x1000, 0x7ff, 0x0, 0x8291, r3, 0x3, '\x00', 0x0, r3, 0x0, 0x5, 0x5, 0xf, @value=r3, @void, @void, @value}, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x3, 0x10000000000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000400)=0x7) r10 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f00000081c0)=[{{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000640)="3eae04d28db87d4ac1aa0a1271551459d36636234eba1ae9faca1f57f7eb782408332cdea734e8268509d8bcaf1c54653e76599e880d008552e3720bd413273eb8399ad45689827e3cac0002ce273fbaab701af4ad0d04f7d685465edd6e0eec900c0049c68e014cde1020db0332fd1b6d39d54eb2e7c5fa4033fb93b26309adbb1ea78f317c7568ebdb8b61ee55c99db4232abba7b9204b9f8061001a7e21b18956584c13328476d1aaf70f7be17349e4c5848d972843bc94c60c9b119a9d", 0xbf}], 0x1, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [r7, r11, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0x60, 0x4000810}}, {{&(0x7f0000004140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000066c0)=[{&(0x7f00000041c0)="a3cfdc5f9da92540a22c367a97364e5ba4c7bc8495cb3e754ffeec8951bdf51d6d802febd0d64092c00232c0e4eb00bb1a741b23fd8439986b72e36c747d11bebf83d03954f00ecb91efd22c97dea713f104bb727c9c0c51d435410043f6f27aaf4009f0dd158f791056d987aadb56bc62d49650d5d8f90e9fb8920d4190f3ebabb6ccc6705cf9ea8129de644ee5a4ab892b7e5305f2ed123e7334675eba748360fce32bd463b6e5bcf097a83edf1585884aec9b03c84d0eafefce85b0f6f73d116d2fc0eb283ce9f8b6a057e8d844c140bf0bcb41d80a788601eb71f21b3835adc6", 0xe2}, {&(0x7f0000006380)="64d392e5ed3a6ec972734130514696d3594d6358bf092a9de57d7102a05738cb05527b835c1e601d3d0f77ad90549ce7f3e58e96129c7d30bcb93f68ce3d86ab2e5ed69b739d022fc4a48136664ebb2ff1b3c5ac61c0e29e55711739cf18a12d0f9b", 0x62}, {&(0x7f0000006400)="7cd8b2963253216a7dc06ba2c788b6792f17f8d1b5326f2d4040ad36a52ed2027a89de423464646a24b731494847a4baacaf5af063c1ca6ba078947f822e2ee55eb69fb1c12658ca7a8178f6a42510fe7ccba3bb2aacaa47d3d2afac26470ceb924ac6e299eb5cd8e93a0bedfd00cf6491fd2cc771fb61c19d4a6f2e73b87530f4966b3e9a7be11842d5a83e88cef4f18e55a61e5e38f8aa641373d31f41968e91d6887c448af8ce1a8381efe9a2ee2b91608471ca38bb860cfde1ce56462bfc486509f18824975be4d62e34e3975710a104052d8d93075ece0d7491fd656c35f23b47aa3956f3204563c3da878c8771e2", 0xf1}, {&(0x7f00000042c0)="57105d321f5dab3759e1a1cf4a35af7432f0a1ecdd8b", 0x16}, {&(0x7f0000006500)="3251b3ec9c42ae78d622fec91a6a90e36ab5edf3c64e462c59fa2cb1d50cebabf52dbe8bcb47d45fa2e49455f58d72db094ad77a909b5bac7d35e58f9efcce17eda11151d234b16f80aa2904ce7287c23515e32b13aa4ace1cb066b9506fbbfefa7c4eebd541b85d492c66c9c7509a660d57", 0x72}, {&(0x7f0000006580)="d98284d4cff7127222683c1371083d35275e294631addeb231a1290af7d356dc3b4bc9e76476fd690661e55eb5cbf6ef91fcffa487dcf9efe738d5", 0x3b}, {&(0x7f00000065c0)="d4d03f99f75382a8210fc52edd0636fa82f85c012e9a92c61bd0fe6b1edb4ef76789dc4aefcd5212290fe67f09846758a7e4567fdfe71d2102a8c7966d6d79c2dfac28c1588762a3c9f2b7f89bb1a1aafae71a2de53591f925a891fb3bf68e6f130ada52252666779ab00e501f797c516b24820786952837b35d046bc24768cac0bb8fec55", 0x85}, {&(0x7f0000006680)="4f85e64137876b0bb919e60d73e64d4d87bcae9833f0de1ee90469660491ea27e96f713a0f79af44fa23e45f7d3d49f1a76786", 0x33}], 0x8, &(0x7f00000067c0)=[@rights={{0x18, 0x1, 0x1, [r12, r10]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x2c, 0x1, 0x1, [r11, r6, r5, r6, r11, r8, r4]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r10]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0xd8, 0x4}}, {{&(0x7f00000068c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006b80)=[{&(0x7f0000006940)="6682a8dae987b76813262440351d56762f7414c34639679f44f2904ef6605c831c866450279214f97a4c595b745fb84c603daebd9186ce65399131e523b989597122e75d", 0x44}, {&(0x7f00000069c0)="fec864766b09e8c02c604092b5af288cbc6d56cce26ddb61fd16467bbc2f7e66d99e1475c131e26c05073de4", 0x2c}, {&(0x7f0000006a00)="cebffb50e08a6eba506327353840af446a8e4b901de45753e432aea47b9bb816620da5fa710c97f7a7d02a6e5e56911a48f358f2c583529c5a96734e900ef8d26a2bb71759f5", 0x46}, {&(0x7f0000006a80)="7ed808a39e2a6450a41fce2017d2c78e4ff0a7e0ae1e58cb1e157a72e14f42520bf30c2035a58f2ceea4730e379c5c7b0215be07c7bb8cbd04a9f97156654f0c5893e752579485ecdbede5bc2118576ca8c2a4cc9a81500ecc52e4221b18ff34cc93f02865e1414900814fba94a73d8c99c76bc6d5c0ce84b990e54529195146a0d2e24e5aede830a52c739aa4841e51ef51e5521e", 0x95}, {&(0x7f0000006b40)="58a6bbadbe80c6baeb15bdbd03ccb40571f51261f1656e7313926f5c9baebfbc9fc1f14b9f521f19638117f0b8e06f5655f90e1dbd", 0x35}], 0x5, &(0x7f0000006d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x34, 0x1, 0x1, [r10, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8, 0x8010}}, {{0x0, 0x0, &(0x7f0000007f40)=[{&(0x7f0000000100)="a1ca1f26bab0b12541e82c202d53b9ba49", 0x11}, {&(0x7f0000006e40)="304492b804caebc1d77c52a9b2e6ce59a39ff5225b095c21a131ed87bd20c6ded96473835b5821e9c16bb4826e2aa9249875255b3e94418cb52bdf2da1e614e311a3d0da888f62458635d5991e190795dd5ab9fc5fcc8051b27d4a1c3144651146aa3e5cee89c26a6f54010280cf785fc85128b9ffec134744eaf1ab8284d773b9bec9d17dd208bde13eed2dcc06496ecda38b9b3de1a96a07fdd86cb64632f1ab64dc942c8514faa30104b94d5cac09a6441a44e08aac8943fd17dd908da35c9608f3cc48dd465112c1ea38e5059ac6cba3f87d2334f3a33e65c5c4ff879374d6d1844ec19716d6b4e9d40913", 0xed}, {&(0x7f0000006f40)="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", 0x1000}, {&(0x7f000000a400)="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", 0x1000}], 0x4, &(0x7f0000008140)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r3, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48, 0x80}}], 0x4, 0x1) statx(r8, 0x0, 0x1000, 0x8, 0x0) 10.759934611s ago: executing program 1 (id=727): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.384696883s ago: executing program 4 (id=728): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast2, @local, @broadcast}}}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = request_key(&(0x7f0000000400)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0xfffffffffffffff9) request_key(0x0, 0x0, &(0x7f00000003c0)='\x00', r1) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d9, 0x1, 0x2, 0x2b1}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 9.705129767s ago: executing program 4 (id=729): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r0, 0x0, 0x0) 9.591292815s ago: executing program 4 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x3, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES64], 0x40}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) sync_file_range(r1, 0x2, 0x8, 0x3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000400f9000800350000000000"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 9.590873992s ago: executing program 0 (id=731): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0x714, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0xc, 0x1}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "ff7524221aa325200e646f43051e171a6ee78ee10264a76d3a20bf5395bc779b002fbbc91670d25f8db56aafe4779ec1135f497c4c5d79bd301d0cb81aa6d1dd96c5060a1bafe919ef2c04f27cc973add776191b7b8a91923506555095cda956fc8fd38013043be3469946d3637b8a42e0759487ac6003bde17e4f1b72fd7048bf9427c072dc68b8c437517d1d77827b28c8cefc45d2a8f712204234f930428e45551332e51f4fdc45ecfd49cdb2378911b7eb2d04dc08c981b876b5d0e3356f46ff400937888169b4bbefca6832a157c392aa6e7633a26b89f685c7fd8eecc9a4955e2be6e4f3ef5b963f7ff969c87a9094c8c14ec100"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) recvmsg$can_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1}, 0x10120) 7.601890906s ago: executing program 1 (id=732): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000010000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="140005"], 0x3c}, 0x1, 0x11}, 0x0) (fail_nth: 6) 6.334404777s ago: executing program 5 (id=733): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="7eeb99b6f78ca44054798fa8d0e9", 0x36, 0x85, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x2}) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x30, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) poll(&(0x7f00000000c0)=[{r0, 0x1001}], 0x1, 0x26) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f000000fb80)=ANY=[@ANYBLOB="12015002000000086b1d010140000102030109029500030107200d0904000000010100000a24010700030201020624040109250c24020700020440060000070904010000010200000904010101010200000b24020214080f00a9c78e0a2402028000080001c609050109000204060907691f49c5cceab8d402000001020000090402010101020000082402010004091007240102080110090582090004096f0007250100060100"], &(0x7f000000fd80)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 6.193782714s ago: executing program 0 (id=734): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast2, @local, @broadcast}}}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = request_key(&(0x7f0000000400)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0xfffffffffffffff9) request_key(0x0, 0x0, &(0x7f00000003c0)='\x00', r1) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d9, 0x1, 0x2, 0x2b1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r4}, 0x18) socket$packet(0x11, 0x3, 0x300) 5.63848752s ago: executing program 3 (id=735): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000004c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/56, 0x0}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r5 = dup(r3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r7, &(0x7f0000002200)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000020240), 0x10010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, 0x0, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffedf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x805) 5.159661024s ago: executing program 1 (id=736): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fsopen(&(0x7f0000000540)='mqueue\x00', 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(0x0, 0x480, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8}) 0s ago: executing program 4 (id=737): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x693c, &(0x7f00000002c0)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r5 = syz_open_dev$cec(0x0, 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ex+0x512/0x640 [ 227.306014][ T8002] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 227.306060][ T8002] should_failslab+0xc2/0x120 [ 227.306083][ T8002] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 227.306103][ T8002] ? __alloc_skb+0x2b2/0x380 [ 227.306129][ T8002] __alloc_skb+0x2b2/0x380 [ 227.306148][ T8002] ? __pfx___alloc_skb+0x10/0x10 [ 227.306163][ T8002] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 227.306177][ T8002] netlink_alloc_large_skb+0x69/0x130 [ 227.306189][ T8002] netlink_sendmsg+0x6a1/0xdd0 [ 227.306202][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.306218][ T8002] ____sys_sendmsg+0xa95/0xc70 [ 227.306230][ T8002] ? copy_msghdr_from_user+0x10a/0x160 [ 227.306245][ T8002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.306262][ T8002] ___sys_sendmsg+0x134/0x1d0 [ 227.306278][ T8002] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.306291][ T8002] ? __lock_acquire+0x622/0x1c90 [ 227.306325][ T8002] __sys_sendmsg+0x16d/0x220 [ 227.306339][ T8002] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.306363][ T8002] do_syscall_64+0xcd/0x4c0 [ 227.306379][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.306390][ T8002] RIP: 0033:0x7f24c118e929 [ 227.306398][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.306409][ T8002] RSP: 002b:00007f24c2047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.306419][ T8002] RAX: ffffffffffffffda RBX: 00007f24c13b5fa0 RCX: 00007f24c118e929 [ 227.306426][ T8002] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 227.306431][ T8002] RBP: 00007f24c2047090 R08: 0000000000000000 R09: 0000000000000000 [ 227.306437][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.306442][ T8002] R13: 0000000000000000 R14: 00007f24c13b5fa0 R15: 00007ffe6a520598 [ 227.306455][ T8002] [ 227.316299][ T30] audit: type=1400 audit(2000000013.240:1543): avc: denied { open } for pid=7998 comm="syz.4.531" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 227.325179][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.339846][ T8005] block device autoloading is deprecated and will be removed. [ 227.340941][ T5933] usb 4-1: Product: à° [ 227.842109][ T30] audit: type=1400 audit(2000000013.240:1544): avc: denied { mount } for pid=7998 comm="syz.4.531" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 227.875980][ T30] audit: type=1400 audit(2000000013.370:1545): avc: denied { read } for pid=7998 comm="syz.4.531" name="file0" dev="fuse" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 227.910400][ T30] audit: type=1400 audit(2000000013.370:1546): avc: denied { open } for pid=7998 comm="syz.4.531" path="/114/file0/file0" dev="fuse" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 227.936630][ T5933] usb 4-1: Manufacturer: Ì鶓蓛걥ìä¦šé¶•é¸ˆîµ†ä­†éŸ©â·žã“¬é’Šê¬†î‡æ»é¶šÜ«쀵△秀轰즭á€î„©è‘Œë¹¼ë³»í‡·ç´Žçšã¨¦á™¦æ‰‡ [ 227.944033][ T30] audit: type=1400 audit(2000000014.010:1547): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 227.978214][ T5933] usb 4-1: SerialNumber: ﰻ賬ᨖ㔈붖쮂 [ 227.987672][ T7981] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 228.020122][ T30] audit: type=1400 audit(2000000014.120:1548): avc: denied { read } for pid=8015 comm="syz.4.534" dev="nsfs" ino=4026532875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 228.041581][ T30] audit: type=1400 audit(2000000014.120:1549): avc: denied { open } for pid=8015 comm="syz.4.534" path="net:[4026532875]" dev="nsfs" ino=4026532875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 228.065504][ T30] audit: type=1400 audit(2000000014.120:1550): avc: denied { create } for pid=8015 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.319820][ T8019] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.331385][ T8019] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 228.670575][ T5933] cxacru 4-1:204.26: cxacru_bind: interface has incorrect endpoints [ 228.678704][ T5933] cxacru 4-1:204.26: usbatm_usb_probe: bind failed: -19! [ 228.718293][ T5933] cxacru 4-1:204.44: cxacru_bind: interface has incorrect endpoints [ 228.727651][ T5933] cxacru 4-1:204.44: usbatm_usb_probe: bind failed: -19! [ 229.134365][ T8025] tipc: Started in network mode [ 229.139310][ T8025] tipc: Node identity 7f000001, cluster identity 4711 [ 229.157201][ T8025] tipc: Enabling of bearer rejected, failed to enable media [ 229.227299][ T5933] usb 4-1: USB disconnect, device number 21 [ 230.602694][ T944] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 230.946965][ T8049] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 231.038940][ T944] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.063307][ T944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.078299][ T944] usb 6-1: Product: syz [ 231.084768][ T944] usb 6-1: Manufacturer: syz [ 231.089659][ T944] usb 6-1: SerialNumber: syz [ 231.115911][ T944] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.133378][ T48] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 231.345080][ T8051] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.433252][ T8051] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 231.453179][ T8051] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 231.462398][ T8051] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 231.471758][ T8051] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 231.480030][ T8051] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 231.488394][ T8051] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 231.502797][ T8051] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 231.512521][ T8051] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 231.520690][ T8051] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 231.873346][ T5867] usb 6-1: USB disconnect, device number 10 [ 232.460516][ T48] usb 6-1: Service connection timeout for: 256 [ 232.466836][ T48] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 232.478919][ T48] ath9k_htc: Failed to initialize the device [ 232.487758][ T5867] usb 6-1: ath9k_htc: USB layer deinitialized [ 232.756866][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.849399][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.932414][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.378440][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 233.378473][ T30] audit: type=1400 audit(2000000019.190:1568): avc: denied { read write } for pid=8077 comm="syz.0.550" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 233.546184][ T8085] hub 8-0:1.0: USB hub found [ 233.547692][ T8085] hub 8-0:1.0: 1 port detected [ 234.013410][ T30] audit: type=1400 audit(2000000019.190:1569): avc: denied { open } for pid=8077 comm="syz.0.550" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 234.286264][ T30] audit: type=1400 audit(2000000019.320:1570): avc: denied { ioctl } for pid=8077 comm="syz.0.550" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 234.526769][ T30] audit: type=1400 audit(2000000019.600:1571): avc: denied { write } for pid=8079 comm="syz.5.551" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 234.824677][ T30] audit: type=1400 audit(2000000019.920:1572): avc: denied { read } for pid=8079 comm="syz.5.551" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.006971][ T30] audit: type=1400 audit(2000000019.920:1573): avc: denied { open } for pid=8079 comm="syz.5.551" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.008178][ T8111] FAULT_INJECTION: forcing a failure. [ 235.008178][ T8111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.045342][ T30] audit: type=1400 audit(2000000020.150:1574): avc: denied { sys_module } for pid=8079 comm="syz.5.551" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 235.055724][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.5.559 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 235.055749][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.055758][ T8111] Call Trace: [ 235.055763][ T8111] [ 235.055769][ T8111] dump_stack_lvl+0x16c/0x1f0 [ 235.055795][ T8111] should_fail_ex+0x512/0x640 [ 235.055818][ T8111] _copy_from_user+0x2e/0xd0 [ 235.055841][ T8111] csum_and_copy_from_iter_full+0x6fa/0x1f70 [ 235.055870][ T8111] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 235.055887][ T8111] ? sock_alloc_send_pskb+0x757/0x990 [ 235.055910][ T8111] ? mm_account_pinned_pages+0x270/0x480 [ 235.055935][ T8111] ip_generic_getfrag+0x170/0x270 [ 235.055953][ T8111] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 235.055969][ T8111] ? msg_zerocopy_realloc+0x457/0x8f0 [ 235.056000][ T8111] __ip6_append_data+0x2e8b/0x4780 [ 235.056023][ T8111] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 235.056048][ T8111] ? __pfx___ip6_append_data+0x10/0x10 [ 235.056066][ T8111] ? __pfx_ip6_mtu+0x10/0x10 [ 235.056079][ T8111] ? ip6_setup_cork+0xc51/0x1530 [ 235.056098][ T8111] ip6_make_skb+0x2c8/0x3f0 [ 235.056116][ T8111] ? ip6_dst_check+0x343/0x940 [ 235.056130][ T8111] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 235.056147][ T8111] ? __pfx_ip6_make_skb+0x10/0x10 [ 235.056166][ T8111] ? find_held_lock+0x2b/0x80 [ 235.056189][ T8111] ? sk_dst_check+0x1da/0x540 [ 235.056213][ T8111] ? udpv6_sendmsg+0x24de/0x3050 [ 235.056233][ T8111] udpv6_sendmsg+0x24de/0x3050 [ 235.056254][ T8111] ? find_held_lock+0x2b/0x80 [ 235.056271][ T8111] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 235.056293][ T8111] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 235.056321][ T8111] ? avc_has_perm+0x11a/0x1c0 [ 235.056356][ T8111] ? __import_iovec+0x1dd/0x650 [ 235.056377][ T8111] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 235.056400][ T8111] ? inet6_sendmsg+0x105/0x140 [ 235.056411][ T8111] inet6_sendmsg+0x105/0x140 [ 235.056425][ T8111] ____sys_sendmsg+0x705/0xc70 [ 235.056442][ T8111] ? copy_msghdr_from_user+0x10a/0x160 [ 235.056462][ T8111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.056481][ T8111] ? __pfx__kstrtoull+0x10/0x10 [ 235.056501][ T8111] ___sys_sendmsg+0x134/0x1d0 [ 235.056523][ T8111] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.056553][ T8111] ? find_held_lock+0x2b/0x80 [ 235.056583][ T8111] __sys_sendmmsg+0x200/0x420 [ 235.056606][ T8111] ? __pfx___sys_sendmmsg+0x10/0x10 [ 235.056634][ T8111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.056665][ T8111] ? fput+0x70/0xf0 [ 235.056686][ T8111] ? ksys_write+0x1ac/0x250 [ 235.056703][ T8111] ? __pfx_ksys_write+0x10/0x10 [ 235.056724][ T8111] __x64_sys_sendmmsg+0x9c/0x100 [ 235.056744][ T8111] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.056764][ T8111] do_syscall_64+0xcd/0x4c0 [ 235.056787][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.056802][ T8111] RIP: 0033:0x7fb8c258e929 [ 235.056815][ T8111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.056828][ T8111] RSP: 002b:00007fb8c03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 235.056843][ T8111] RAX: ffffffffffffffda RBX: 00007fb8c27b5fa0 RCX: 00007fb8c258e929 [ 235.056852][ T8111] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 235.056861][ T8111] RBP: 00007fb8c03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.056870][ T8111] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 235.056878][ T8111] R13: 0000000000000000 R14: 00007fb8c27b5fa0 R15: 00007ffc07c3b228 [ 235.056897][ T8111] [ 235.163921][ T8118] 9pnet_fd: Insufficient options for proto=fd [ 235.175643][ T30] audit: type=1400 audit(2000000020.910:1575): avc: denied { mount } for pid=8092 comm="syz.3.554" name="/" dev="ramfs" ino=17360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 235.175689][ T30] audit: type=1400 audit(2000000020.930:1576): avc: denied { ioctl } for pid=8105 comm="syz.5.556" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17363 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.175733][ T30] audit: type=1400 audit(2000000021.250:1577): avc: denied { read write } for pid=8114 comm="syz.0.560" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 236.764471][ T8136] nvme_fabrics: missing parameter 'transport=%s' [ 236.781984][ T8136] nvme_fabrics: missing parameter 'nqn=%s' [ 236.881258][ T8149] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 237.172749][ T8147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.568'. [ 237.537573][ T8160] input: syz0 as /devices/virtual/input/input13 [ 237.883927][ T8158] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 238.439792][ T8169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.554977][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 238.555013][ T30] audit: type=1400 audit(2000000024.570:1615): avc: denied { ioctl } for pid=8162 comm="syz.5.573" path="socket:[19570]" dev="sockfs" ino=19570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 238.604305][ T8174] netlink: 32 bytes leftover after parsing attributes in process `syz.5.573'. [ 238.613858][ T8174] netlink: 32 bytes leftover after parsing attributes in process `syz.5.573'. [ 238.818162][ T8169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.898071][ T8170] nvme_fabrics: missing parameter 'transport=%s' [ 238.905778][ T8170] nvme_fabrics: missing parameter 'nqn=%s' [ 239.018795][ T8169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.028280][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 239.044786][ T8184] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 239.939745][ T5880] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 240.717825][ T30] audit: type=1400 audit(2000000026.820:1616): avc: denied { watch watch_reads } for pid=8198 comm="syz.3.581" path="/118" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 240.730307][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 240.772522][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.785192][ T5880] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 241.353077][ T5880] usb 1-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 241.364085][ T5880] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 241.374081][ T5880] usb 1-1: too many endpoints for config 1 interface 1 altsetting 9: 37, using maximum allowed: 30 [ 241.384978][ T5880] usb 1-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 241.398066][ T5880] usb 1-1: config 1 interface 1 has no altsetting 0 [ 241.436046][ T5880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.477812][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.496293][ T5880] usb 1-1: Product: syz [ 241.506769][ T30] audit: type=1400 audit(2000000027.610:1617): avc: denied { map } for pid=8203 comm="syz.4.583" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 241.507056][ T5880] usb 1-1: Manufacturer: syz [ 241.535891][ T5821] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 241.555892][ T5880] usb 1-1: SerialNumber: syz [ 241.569897][ T30] audit: type=1400 audit(2000000027.640:1618): avc: denied { create } for pid=8203 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 241.693510][ T8214] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 241.709291][ T30] audit: type=1400 audit(2000000027.790:1619): avc: denied { read } for pid=8215 comm="syz.4.585" name="sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.872080][ T30] audit: type=1400 audit(2000000027.820:1620): avc: denied { create } for pid=8215 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.633276][ T30] audit: type=1400 audit(2000000028.110:1621): avc: denied { ioctl } for pid=8215 comm="syz.4.585" path="socket:[18716]" dev="sockfs" ino=18716 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.716848][ T30] audit: type=1400 audit(2000000028.170:1622): avc: denied { create } for pid=8218 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 242.747554][ T5880] usb 1-1: 0:2 : does not exist [ 242.831647][ T5880] usb 1-1: USB disconnect, device number 20 [ 243.011964][ T30] audit: type=1400 audit(2000000029.120:1623): avc: denied { mount } for pid=8224 comm="syz.1.588" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 244.819967][ T30] audit: type=1400 audit(2000000030.920:1624): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 244.928598][ T8249] mkiss: ax0: crc mode is auto. [ 244.989115][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 245.008527][ T30] audit: type=1400 audit(2000000030.980:1625): avc: denied { execute } for pid=8238 comm="syz.0.591" name="file1" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 245.093134][ T30] audit: type=1400 audit(2000000030.980:1626): avc: denied { execute_no_trans } for pid=8238 comm="syz.0.591" path="/128/file1" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 245.187603][ T30] audit: type=1400 audit(2000000031.000:1627): avc: denied { mount } for pid=8238 comm="syz.0.591" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 245.260054][ T30] audit: type=1400 audit(2000000031.350:1628): avc: denied { create } for pid=8253 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.283001][ T30] audit: type=1400 audit(2000000031.350:1629): avc: denied { setopt } for pid=8253 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.305594][ T30] audit: type=1400 audit(2000000031.350:1630): avc: denied { create } for pid=8253 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.363079][ T8257] netlink: 56 bytes leftover after parsing attributes in process `syz.4.597'. [ 245.380441][ T5933] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 245.399205][ T30] audit: type=1400 audit(2000000031.350:1631): avc: denied { bind } for pid=8253 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.419626][ T30] audit: type=1400 audit(2000000031.350:1632): avc: denied { name_bind } for pid=8253 comm="syz.5.596" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 245.422623][ T5880] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 245.450585][ T30] audit: type=1400 audit(2000000031.350:1633): avc: denied { node_bind } for pid=8253 comm="syz.5.596" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 245.553290][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.565779][ T5933] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.576752][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.591465][ T5933] usb 4-1: config 0 descriptor?? [ 245.620392][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 245.626847][ T5880] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 245.635143][ T5880] usb 2-1: config 0 has no interface number 0 [ 245.641394][ T9] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 245.649075][ T5880] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.660946][ T5880] usb 2-1: config 0 interface 85 has no altsetting 0 [ 245.670121][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 245.682488][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.691799][ T5880] usb 2-1: Product: syz [ 245.696016][ T5880] usb 2-1: Manufacturer: syz [ 245.700811][ T5880] usb 2-1: SerialNumber: syz [ 245.708041][ T5880] usb 2-1: config 0 descriptor?? [ 245.812186][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.824878][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.834660][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.849456][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 245.870139][ T9] usb 5-1: string descriptor 0 read error: -22 [ 245.876571][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.885656][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.897866][ T9] usb 5-1: 0:2 : does not exist [ 246.003028][ T5933] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 246.014601][ T5933] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input15 [ 246.093519][ T5933] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 246.189106][ T5880] appletouch 2-1:0.85: Geyser mode initialized. [ 246.198589][ T5880] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input14 [ 246.397058][ T5880] usb 2-1: USB disconnect, device number 24 [ 246.666195][ T5880] appletouch 2-1:0.85: input: appletouch disconnected [ 246.693467][ T5933] usb 4-1: USB disconnect, device number 22 [ 246.789239][ T8275] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 247.360444][ T944] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 247.583187][ T5880] usb 5-1: USB disconnect, device number 24 [ 247.600438][ T944] usb 6-1: device descriptor read/64, error -71 [ 247.635720][ T8289] netlink: 56 bytes leftover after parsing attributes in process `syz.3.606'. [ 247.670490][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 247.871259][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 247.882335][ T5906] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 247.892336][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.909144][ T5906] usb 2-1: config 0 descriptor?? [ 247.914274][ T944] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 248.082175][ T8297] mkiss: ax0: crc mode is auto. [ 248.138709][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 248.390556][ T5906] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 248.520355][ T944] usb 6-1: device descriptor read/64, error -71 [ 248.631098][ T944] usb usb6-port1: attempt power cycle [ 248.890554][ T8300] FAULT_INJECTION: forcing a failure. [ 248.890554][ T8300] name failslab, interval 1, probability 0, space 0, times 0 [ 248.900596][ T5906] gspca_vc032x: reg_r err -110 [ 248.905623][ T8300] CPU: 0 UID: 0 PID: 8300 Comm: syz.4.609 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 248.905644][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.905653][ T8300] Call Trace: [ 248.905658][ T8300] [ 248.905665][ T8300] dump_stack_lvl+0x16c/0x1f0 [ 248.905691][ T8300] should_fail_ex+0x512/0x640 [ 248.905711][ T8300] ? fs_reclaim_acquire+0xae/0x150 [ 248.905728][ T8300] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 248.905749][ T8300] should_failslab+0xc2/0x120 [ 248.905769][ T8300] __kmalloc_noprof+0xd2/0x510 [ 248.905793][ T8300] tomoyo_realpath_from_path+0xc2/0x6e0 [ 248.905815][ T8300] ? tomoyo_profile+0x47/0x60 [ 248.905839][ T8300] tomoyo_path_number_perm+0x245/0x580 [ 248.905854][ T8300] ? tomoyo_path_number_perm+0x237/0x580 [ 248.905873][ T8300] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.905892][ T8300] ? find_held_lock+0x2b/0x80 [ 248.905929][ T8300] ? find_held_lock+0x2b/0x80 [ 248.905945][ T8300] ? hook_file_ioctl_common+0x145/0x410 [ 248.905972][ T8300] ? __fget_files+0x20e/0x3c0 [ 248.905994][ T8300] security_file_ioctl+0x9b/0x240 [ 248.906015][ T8300] __x64_sys_ioctl+0xb7/0x210 [ 248.906033][ T8300] do_syscall_64+0xcd/0x4c0 [ 248.906056][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.906070][ T8300] RIP: 0033:0x7fc180f8e929 [ 248.906083][ T8300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.906096][ T8300] RSP: 002b:00007fc181d45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.906111][ T8300] RAX: ffffffffffffffda RBX: 00007fc1811b5fa0 RCX: 00007fc180f8e929 [ 248.906120][ T8300] RDX: 0000200000000040 RSI: 000000004188aec6 RDI: 0000000000000006 [ 248.906129][ T8300] RBP: 00007fc181d45090 R08: 0000000000000000 R09: 0000000000000000 [ 248.906138][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.906146][ T8300] R13: 0000000000000000 R14: 00007fc1811b5fa0 R15: 00007ffced094bf8 [ 248.906166][ T8300] [ 248.906172][ T8300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.580408][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.592193][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.648139][ T944] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 249.655811][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.666585][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.673036][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.700389][ T944] usb 6-1: device descriptor read/8, error -71 [ 249.707193][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.756504][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.763399][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.768885][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.774813][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.783250][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.788817][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.794717][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.803899][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.812278][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.817624][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.823406][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.828784][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.838953][ T5906] gspca_vc032x: Unknown sensor... [ 249.845926][ T5906] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 249.940495][ T944] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 250.158307][ T944] usb 6-1: device descriptor read/8, error -71 [ 250.173935][ T5906] usb 2-1: USB disconnect, device number 25 [ 250.283430][ T944] usb usb6-port1: unable to enumerate USB device [ 250.587602][ T8325] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.691600][ T8324] netlink: 256 bytes leftover after parsing attributes in process `syz.5.616'. [ 250.980404][ T944] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 251.300338][ T944] usb 6-1: device descriptor read/64, error -71 [ 251.317494][ T8337] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 251.331152][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 251.445733][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 251.493929][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 251.493944][ T30] audit: type=1400 audit(2000000037.600:1648): avc: denied { write } for pid=8339 comm="syz.4.621" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 251.511425][ T8343] FAULT_INJECTION: forcing a failure. [ 251.511425][ T8343] name failslab, interval 1, probability 0, space 0, times 0 [ 251.537019][ T5933] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 251.545308][ T30] audit: type=1400 audit(2000000037.600:1649): avc: denied { open } for pid=8339 comm="syz.4.621" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 251.570678][ T30] audit: type=1400 audit(2000000037.600:1650): avc: denied { ioctl } for pid=8339 comm="syz.4.621" path="/dev/video7" dev="devtmpfs" ino=950 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 251.572634][ T8343] CPU: 1 UID: 0 PID: 8343 Comm: syz.1.622 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 251.572655][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.572664][ T8343] Call Trace: [ 251.572669][ T8343] [ 251.572675][ T8343] dump_stack_lvl+0x16c/0x1f0 [ 251.572702][ T8343] should_fail_ex+0x512/0x640 [ 251.572726][ T8343] should_failslab+0xc2/0x120 [ 251.572747][ T8343] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 251.572767][ T8343] ? skb_clone+0x190/0x3f0 [ 251.572793][ T8343] skb_clone+0x190/0x3f0 [ 251.572814][ T8343] netlink_deliver_tap+0xabd/0xd30 [ 251.572835][ T8343] netlink_unicast+0x5df/0x7f0 [ 251.572862][ T8343] ? __pfx_netlink_unicast+0x10/0x10 [ 251.572884][ T8343] netlink_sendmsg+0x8d1/0xdd0 [ 251.572904][ T8343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.572928][ T8343] ____sys_sendmsg+0xa95/0xc70 [ 251.572946][ T8343] ? copy_msghdr_from_user+0x10a/0x160 [ 251.572967][ T8343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.572993][ T8343] ___sys_sendmsg+0x134/0x1d0 [ 251.573015][ T8343] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.573034][ T8343] ? __lock_acquire+0x622/0x1c90 [ 251.573083][ T8343] __sys_sendmsg+0x16d/0x220 [ 251.573104][ T8343] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.573140][ T8343] do_syscall_64+0xcd/0x4c0 [ 251.573163][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.573177][ T8343] RIP: 0033:0x7f24c118e929 [ 251.573189][ T8343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.573203][ T8343] RSP: 002b:00007f24c2047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.573218][ T8343] RAX: ffffffffffffffda RBX: 00007f24c13b5fa0 RCX: 00007f24c118e929 [ 251.573227][ T8343] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 251.573236][ T8343] RBP: 00007f24c2047090 R08: 0000000000000000 R09: 0000000000000000 [ 251.573244][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.573252][ T8343] R13: 0000000000000000 R14: 00007f24c13b5fa0 R15: 00007ffe6a520598 [ 251.573272][ T8343] [ 251.607614][ T944] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 251.698979][ T8340] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 251.910126][ T944] usb 6-1: device descriptor read/64, error -71 [ 251.927766][ T5933] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 251.938667][ T8348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.624'. [ 251.958644][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.960339][ T5906] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 251.978198][ T5933] usb 4-1: Product: syz [ 251.983464][ T5933] usb 4-1: Manufacturer: syz [ 251.989408][ T5933] usb 4-1: SerialNumber: syz [ 252.006609][ T5933] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 252.022508][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 252.054766][ T944] usb usb6-port1: attempt power cycle [ 252.296814][ T5906] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 252.310153][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.319276][ T5906] usb 1-1: Product: syz [ 252.399524][ T5906] usb 1-1: Manufacturer: syz [ 252.486848][ T5906] usb 1-1: SerialNumber: syz [ 252.540708][ T944] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 252.624382][ T5906] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 252.645741][ T944] usb 6-1: device descriptor read/8, error -71 [ 252.712852][ T5861] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 253.037135][ T944] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 253.100654][ T944] usb 6-1: device descriptor read/8, error -71 [ 253.213230][ T944] usb usb6-port1: unable to enumerate USB device [ 253.505009][ T5906] usb 1-1: USB disconnect, device number 21 [ 253.614326][ T8372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.629'. [ 253.900491][ T9] usb 4-1: Service connection timeout for: 256 [ 253.916977][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 253.965579][ T9] ath9k_htc: Failed to initialize the device [ 253.974648][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 254.030496][ T5933] usb 4-1: USB disconnect, device number 23 [ 254.168840][ T8376] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 254.230376][ T5861] usb 1-1: Service connection timeout for: 256 [ 254.239214][ T5861] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 254.323879][ T5861] ath9k_htc: Failed to initialize the device [ 254.437028][ T5906] usb 1-1: ath9k_htc: USB layer deinitialized [ 254.890074][ T8390] netlink: 48 bytes leftover after parsing attributes in process `syz.5.635'. [ 255.104867][ T5933] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 255.205703][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.360365][ T5906] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 255.440295][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 255.470398][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.620010][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.643738][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.810713][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.820829][ T5906] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 255.831811][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.842089][ T5906] usb 1-1: config 0 descriptor?? [ 255.910390][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.959848][ T5933] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 256.003090][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.134506][ T5933] usb 5-1: config 0 descriptor?? [ 257.022648][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 257.028789][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 257.189121][ T5906] usb 1-1: USB disconnect, device number 22 [ 257.231941][ T5933] microsoft 0003:045E:07DA.0012: unknown main item tag 0x1 [ 257.526348][ T8424] mkiss: ax0: crc mode is auto. [ 257.585325][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 257.686118][ T5933] microsoft 0003:045E:07DA.0012: report is too long [ 257.693218][ T5933] microsoft 0003:045E:07DA.0012: item 0 2 0 11 parsing failed [ 257.702455][ T5933] microsoft 0003:045E:07DA.0012: parse failed [ 257.708736][ T5933] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 257.886509][ T5933] usb 5-1: USB disconnect, device number 25 [ 257.976733][ T30] audit: type=1400 audit(2000000044.080:1651): avc: denied { audit_write } for pid=8428 comm="syz.5.645" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 257.998555][ T30] audit: type=1107 audit(2000000044.080:1652): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 258.110409][ T30] audit: type=1400 audit(2000000044.080:1653): avc: denied { append } for pid=8428 comm="syz.5.645" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 259.325699][ T30] audit: type=1400 audit(2000000045.430:1654): avc: denied { getopt } for pid=8449 comm="syz.5.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.370739][ T8453] overlayfs: failed to resolve './file1': -2 [ 259.509703][ T8448] bridge_slave_1: entered allmulticast mode [ 259.599348][ T8459] netlink: 48 bytes leftover after parsing attributes in process `syz.3.651'. [ 259.890396][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.5.655'. [ 259.899325][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.5.655'. [ 260.770903][ T8470] nvme_fabrics: missing parameter 'transport=%s' [ 260.835004][ T8470] nvme_fabrics: missing parameter 'nqn=%s' [ 260.954143][ T8487] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 260.954966][ T8475] nvme_fabrics: missing parameter 'transport=%s' [ 261.120593][ T5906] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 261.199879][ T8475] nvme_fabrics: missing parameter 'nqn=%s' [ 261.210462][ T944] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 261.308286][ T30] audit: type=1400 audit(2000000047.410:1655): avc: denied { create } for pid=8489 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 261.375979][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.391265][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.440596][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.530538][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.573577][ T5906] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 261.584995][ T944] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 261.620975][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.635233][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.731971][ T5906] usb 4-1: config 0 descriptor?? [ 261.769814][ T944] usb 2-1: config 0 descriptor?? [ 262.277494][ T944] usbhid 2-1:0.0: can't add hid device: -71 [ 262.344205][ T944] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.410714][ T944] usb 2-1: USB disconnect, device number 26 [ 262.468559][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 262.474656][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 262.487670][ T5906] usb 4-1: USB disconnect, device number 24 [ 263.253494][ T48] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 263.510441][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 263.518997][ T48] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 263.528862][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.551793][ T48] usb 1-1: config 0 descriptor?? [ 263.560936][ T8517] netlink: 48 bytes leftover after parsing attributes in process `syz.5.668'. [ 263.696370][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'. [ 263.980545][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'. [ 263.990107][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'. [ 265.132312][ T30] audit: type=1800 audit(2000000050.390:1656): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.671" name="bus" dev="overlay" ino=771 res=0 errno=0 [ 265.156370][ T48] nti 0003:0757:0A00.0013: reserved main item tag 0xd [ 265.163650][ T48] nti 0003:0757:0A00.0013: unexpected long global item [ 265.177334][ T48] nti 0003:0757:0A00.0013: probe with driver nti failed with error -22 [ 265.344292][ T8532] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 265.568614][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.726793][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.381247][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.652384][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.857402][ T944] usb 1-1: USB disconnect, device number 23 [ 266.876489][ T8539] nvme_fabrics: missing parameter 'transport=%s' [ 266.907456][ T8539] nvme_fabrics: missing parameter 'nqn=%s' [ 266.971882][ T30] audit: type=1400 audit(2000000053.080:1657): avc: denied { create } for pid=8554 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.998370][ T30] audit: type=1400 audit(2000000053.100:1658): avc: denied { ioctl } for pid=8554 comm="syz.4.679" path="socket:[21519]" dev="sockfs" ino=21519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.221196][ T8558] FAULT_INJECTION: forcing a failure. [ 267.221196][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 267.240460][ T30] audit: type=1400 audit(2000000053.320:1659): avc: denied { create } for pid=8556 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.291329][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz.1.681 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 267.291356][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.291366][ T8558] Call Trace: [ 267.291372][ T8558] [ 267.291379][ T8558] dump_stack_lvl+0x16c/0x1f0 [ 267.291410][ T8558] should_fail_ex+0x512/0x640 [ 267.291432][ T8558] ? fs_reclaim_acquire+0xae/0x150 [ 267.291450][ T8558] ? tomoyo_encode2+0x100/0x3e0 [ 267.291471][ T8558] should_failslab+0xc2/0x120 [ 267.291499][ T8558] __kmalloc_noprof+0xd2/0x510 [ 267.291524][ T8558] tomoyo_encode2+0x100/0x3e0 [ 267.291548][ T8558] tomoyo_encode+0x29/0x50 [ 267.291569][ T8558] tomoyo_realpath_from_path+0x18f/0x6e0 [ 267.291594][ T8558] ? tomoyo_profile+0x47/0x60 [ 267.291621][ T8558] tomoyo_path_number_perm+0x245/0x580 [ 267.291639][ T8558] ? tomoyo_path_number_perm+0x237/0x580 [ 267.291661][ T8558] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 267.291683][ T8558] ? find_held_lock+0x2b/0x80 [ 267.291725][ T8558] ? find_held_lock+0x2b/0x80 [ 267.291744][ T8558] ? hook_file_ioctl_common+0x145/0x410 [ 267.291776][ T8558] ? __fget_files+0x20e/0x3c0 [ 267.291803][ T8558] security_file_ioctl+0x9b/0x240 [ 267.291828][ T8558] __x64_sys_ioctl+0xb7/0x210 [ 267.291849][ T8558] do_syscall_64+0xcd/0x4c0 [ 267.291876][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.291892][ T8558] RIP: 0033:0x7f24c118e929 [ 267.291906][ T8558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.291922][ T8558] RSP: 002b:00007f24c2047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.291938][ T8558] RAX: ffffffffffffffda RBX: 00007f24c13b5fa0 RCX: 00007f24c118e929 [ 267.291948][ T8558] RDX: 0000200000000280 RSI: 000000000000541b RDI: 0000000000000003 [ 267.291958][ T8558] RBP: 00007f24c2047090 R08: 0000000000000000 R09: 0000000000000000 [ 267.291967][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.291976][ T8558] R13: 0000000000000000 R14: 00007f24c13b5fa0 R15: 00007ffe6a520598 [ 267.291998][ T8558] [ 267.292638][ T8558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.480306][ T944] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 267.852766][ T8570] netlink: 48 bytes leftover after parsing attributes in process `syz.0.683'. [ 268.125568][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.227989][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.251773][ T944] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 268.303736][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.503944][ T944] usb 5-1: config 0 descriptor?? [ 268.509114][ T8577] nvme_fabrics: missing parameter 'transport=%s' [ 268.517310][ T8577] nvme_fabrics: missing parameter 'nqn=%s' [ 268.731199][ T944] usbhid 5-1:0.0: can't add hid device: -71 [ 268.737177][ T944] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 268.760022][ T944] usb 5-1: USB disconnect, device number 26 [ 268.960422][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 269.076510][ T8590] overlayfs: failed to resolve './file1': -2 [ 269.544398][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.561814][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.571196][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.584441][ T9] usb 1-1: config 0 descriptor?? [ 269.584757][ T30] audit: type=1400 audit(2000000055.690:1660): avc: denied { create } for pid=8593 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 269.609861][ T30] audit: type=1326 audit(2000000055.690:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad5bf8e929 code=0x0 [ 270.315039][ T8602] netlink: 292 bytes leftover after parsing attributes in process `syz.3.688'. [ 270.610620][ T944] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 270.646109][ T30] audit: type=1400 audit(2000000056.750:1662): avc: denied { sqpoll } for pid=8605 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 270.682102][ T9] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 270.694010][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0014/input/input18 [ 270.716393][ T30] audit: type=1400 audit(2000000056.780:1663): avc: denied { bind } for pid=8605 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 270.737521][ T30] audit: type=1400 audit(2000000056.780:1664): avc: denied { read } for pid=8605 comm="syz.3.693" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.768475][ T30] audit: type=1400 audit(2000000056.780:1665): avc: denied { open } for pid=8605 comm="syz.3.693" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.771992][ T9] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 270.799532][ T30] audit: type=1400 audit(2000000056.780:1666): avc: denied { ioctl } for pid=8605 comm="syz.3.693" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.838533][ T30] audit: type=1400 audit(2000000056.790:1667): avc: denied { read } for pid=8605 comm="syz.3.693" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 270.843676][ T944] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.861643][ T30] audit: type=1400 audit(2000000056.790:1668): avc: denied { open } for pid=8605 comm="syz.3.693" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 270.873673][ T944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.894769][ T30] audit: type=1400 audit(2000000056.900:1669): avc: denied { create } for pid=8605 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 270.894813][ T30] audit: type=1400 audit(2000000056.900:1670): avc: denied { write } for pid=8605 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 270.945101][ T944] usb 6-1: Product: syz [ 270.949317][ T944] usb 6-1: Manufacturer: syz [ 270.960409][ T5933] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 270.962833][ T944] usb 6-1: SerialNumber: syz [ 270.981501][ T8606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.039349][ T8606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.039675][ T944] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 271.085585][ T5861] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.161625][ T5933] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 271.171405][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.179945][ T8606] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.201610][ T8606] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 271.211641][ T8606] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 271.247858][ T5933] usb 2-1: Product: syz [ 271.249938][ T8606] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 271.252162][ T5933] usb 2-1: Manufacturer: syz [ 271.252179][ T5933] usb 2-1: SerialNumber: syz [ 271.280834][ T5933] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 271.336567][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.442330][ T5933] usb 1-1: USB disconnect, device number 24 [ 271.730452][ T944] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 271.912484][ T944] usb 5-1: Using ep0 maxpacket: 8 [ 271.940354][ T944] usb 5-1: config 0 has an invalid interface number: 177 but max is 0 [ 271.950664][ T944] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 272.035052][ T1540] usb 6-1: USB disconnect, device number 19 [ 272.055518][ T944] usb 5-1: config 0 has no interface number 0 [ 272.082218][ T944] usb 5-1: config 0 interface 177 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.194827][ T944] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a0, bcdDevice=12.6a [ 272.235482][ T944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.265243][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 272.274099][ T944] usb 5-1: Product: syz [ 272.274118][ T944] usb 5-1: Manufacturer: syz [ 272.274132][ T944] usb 5-1: SerialNumber: syz [ 272.289896][ T944] usb 5-1: config 0 descriptor?? [ 272.293344][ T8618] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 272.297018][ T944] ftdi_sio 5-1:0.177: FTDI USB Serial Device converter detected [ 272.399691][ T8618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8618 comm=syz.0.696 [ 272.472737][ T30] audit: type=1800 audit(2000000058.530:1671): pid=8621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.697" name="bus" dev="overlay" ino=815 res=0 errno=0 [ 272.540319][ T5861] usb 6-1: Service connection timeout for: 256 [ 272.546553][ T5861] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 272.623468][ T9] usb 2-1: Service connection timeout for: 256 [ 272.702228][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 272.860688][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.875210][ T9] ath9k_htc: Failed to initialize the device [ 272.943626][ T5880] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 273.090856][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 273.107098][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.175944][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 273.184155][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.217751][ T944] ftdi_sio ttyUSB0: unknown device type: 0x126a [ 273.275365][ T5861] ath9k_htc: Failed to initialize the device [ 273.281683][ T944] usb 5-1: USB disconnect, device number 27 [ 273.288607][ T944] ftdi_sio 5-1:0.177: device disconnected [ 273.289495][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.303588][ T5821] Bluetooth: hci5: command 0x0405 tx timeout [ 273.305778][ T1540] usb 6-1: ath9k_htc: USB layer deinitialized [ 273.358449][ T5880] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 273.382339][ T5880] usb 1-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 273.639319][ T5880] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 273.716204][ T48] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 273.738584][ T1540] usb 2-1: USB disconnect, device number 27 [ 273.748907][ T5880] usb 1-1: too many endpoints for config 1 interface 1 altsetting 9: 37, using maximum allowed: 30 [ 273.772639][ T5880] usb 1-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 273.806636][ T5880] usb 1-1: config 1 interface 1 has no altsetting 0 [ 273.823382][ T5880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.907960][ T48] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 273.951380][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.998499][ T48] usb 4-1: Product: syz [ 274.020646][ T48] usb 4-1: Manufacturer: syz [ 274.055078][ T48] usb 4-1: SerialNumber: syz [ 274.134860][ T48] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 274.150379][ T1540] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 274.316725][ T5861] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.690104][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.698207][ T5880] usb 1-1: Product: syz [ 274.702492][ T5880] usb 1-1: Manufacturer: syz [ 274.707092][ T5880] usb 1-1: SerialNumber: syz [ 274.941581][ T5880] usb 1-1: 0:2 : does not exist [ 274.963206][ T1540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.000064][ T1540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.015222][ T5880] usb 1-1: USB disconnect, device number 25 [ 275.054759][ T1540] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 275.082294][ T1540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.095002][ T9] usb 4-1: USB disconnect, device number 25 [ 275.115231][ T1540] usb 2-1: config 0 descriptor?? [ 275.319261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.332025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.344353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.357375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.369698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.382954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.395255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.408236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.420537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.433437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.582277][ T5821] Bluetooth: hci5: command 0x0405 tx timeout [ 275.622664][ T1540] usbhid 2-1:0.0: can't add hid device: -71 [ 275.632592][ T1540] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 275.729099][ T1540] usb 2-1: USB disconnect, device number 28 [ 276.214107][ T5861] usb 4-1: Service connection timeout for: 256 [ 276.230559][ T1540] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 276.431981][ T1540] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 276.436628][ T5861] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 276.494955][ T8656] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 276.823055][ T5861] ath9k_htc: Failed to initialize the device [ 276.832208][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 277.006030][ T1540] usb 1-1: config 0 has no interface number 0 [ 277.026281][ T1540] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.043966][ T1540] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 277.055934][ T1540] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 277.117444][ T8659] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 277.142246][ T1540] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 277.170299][ T1540] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 277.188695][ T1540] usb 1-1: Product: syz [ 277.195401][ T1540] usb 1-1: SerialNumber: syz [ 277.212611][ T1540] usb 1-1: config 0 descriptor?? [ 277.225164][ T1540] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 277.435516][ T30] audit: type=1400 audit(2000000063.530:1672): avc: denied { bind } for pid=8648 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 277.660435][ T5821] Bluetooth: hci5: command 0x0405 tx timeout [ 277.703589][ T1540] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input19 [ 277.848271][ T30] audit: type=1400 audit(2000000063.530:1673): avc: denied { write } for pid=8648 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.169161][ T30] audit: type=1400 audit(2000000064.270:1674): avc: denied { create } for pid=8664 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 278.926638][ T8669] FAULT_INJECTION: forcing a failure. [ 278.926638][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 278.956354][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.965600][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.972758][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.979927][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.987061][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.994197][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.996297][ T8669] CPU: 1 UID: 0 PID: 8669 Comm: syz.1.710 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 278.996318][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.996327][ T8669] Call Trace: [ 278.996332][ T8669] [ 278.996338][ T8669] dump_stack_lvl+0x16c/0x1f0 [ 278.996364][ T8669] should_fail_ex+0x512/0x640 [ 278.996388][ T8669] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 278.996410][ T8669] should_failslab+0xc2/0x120 [ 278.996430][ T8669] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 278.996449][ T8669] ? getname_flags.part.0+0x4c/0x550 [ 278.996469][ T8669] getname_flags.part.0+0x4c/0x550 [ 278.996486][ T8669] getname_flags+0x93/0xf0 [ 278.996504][ T8669] do_sys_openat2+0xb8/0x1d0 [ 278.996519][ T8669] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.996534][ T8669] ? __fget_files+0x20e/0x3c0 [ 278.996559][ T8669] __x64_sys_open+0x153/0x1e0 [ 278.996573][ T8669] ? __pfx___x64_sys_open+0x10/0x10 [ 278.996592][ T8669] ? rcu_is_watching+0x12/0xc0 [ 278.996612][ T8669] do_syscall_64+0xcd/0x4c0 [ 278.996635][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.996650][ T8669] RIP: 0033:0x7f24c118e929 [ 278.996662][ T8669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.996675][ T8669] RSP: 002b:00007f24c2005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 278.996690][ T8669] RAX: ffffffffffffffda RBX: 00007f24c13b6160 RCX: 00007f24c118e929 [ 278.996699][ T8669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 278.996708][ T8669] RBP: 00007f24c2005090 R08: 0000000000000000 R09: 0000000000000000 [ 278.996716][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.996725][ T8669] R13: 0000000000000000 R14: 00007f24c13b6160 R15: 00007ffe6a520598 [ 278.996747][ T8669] [ 279.184192][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 279.191337][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 279.198476][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 279.205609][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 279.213731][ T5933] usb 1-1: USB disconnect, device number 26 [ 279.213841][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 279.221266][ T30] audit: type=1400 audit(2000000064.910:1675): avc: denied { mount } for pid=8666 comm="syz.1.710" name="/" dev="autofs" ino=21100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 279.221314][ T30] audit: type=1400 audit(2000000065.060:1676): avc: denied { write } for pid=8666 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 279.374089][ T8671] No control pipe specified [ 279.549387][ T30] audit: type=1400 audit(2000000065.650:1677): avc: denied { ioctl } for pid=8673 comm="syz.0.711" path="socket:[21911]" dev="sockfs" ino=21911 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.606389][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 279.823397][ T30] audit: type=1400 audit(2000000065.920:1678): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 279.918718][ T5821] Bluetooth: hci2: Dropping invalid advertising data [ 279.926720][ T5821] Bluetooth: hci2: Malformed LE Event: 0x02 [ 279.934303][ T5933] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 280.322436][ C1] net_ratelimit: 8649 callbacks suppressed [ 280.328368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.347752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.373552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.389440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.411601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.428518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.448011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.464762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.477632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.491563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.106469][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 285.169365][ T8685] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 285.270823][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8685 comm=syz.3.714 [ 285.332278][ T8686] nvme_fabrics: missing parameter 'transport=%s' [ 285.339184][ C1] net_ratelimit: 9270 callbacks suppressed [ 285.339198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.357379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.370202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.380282][ T30] audit: type=1400 audit(2000000071.460:1679): avc: denied { module_request } for pid=8690 comm="syz.1.716" kmod="net-pf-10-proto-132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 285.382501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.417559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.429908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.442722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.455037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.467812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.471587][ T5933] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 285.480101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.499330][ T30] audit: type=1400 audit(2000000071.510:1680): avc: denied { ioctl } for pid=8692 comm="syz.4.717" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.540330][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 285.577333][ T8686] nvme_fabrics: missing parameter 'nqn=%s' [ 285.599869][ T30] audit: type=1400 audit(2000000071.510:1681): avc: denied { read write } for pid=8690 comm="syz.1.716" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.650340][ T1540] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 285.678397][ T30] audit: type=1400 audit(2000000071.510:1682): avc: denied { open } for pid=8690 comm="syz.1.716" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.720534][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 285.727873][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 285.744212][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.752697][ T5933] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 285.770984][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 285.789993][ T9] usb 4-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 285.806805][ T5933] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.822412][ T1540] usb 2-1: Using ep0 maxpacket: 16 [ 285.827732][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.840749][ T1540] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.860855][ T1540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 285.868660][ T5933] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.885670][ T30] audit: type=1400 audit(2000000071.990:1683): avc: denied { read write } for pid=6974 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.910994][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 9: 37, using maximum allowed: 30 [ 285.928169][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.937079][ T9] usb 4-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 285.953539][ T5933] usb 5-1: Product: syz [ 285.957775][ T5933] usb 5-1: Manufacturer: syz [ 285.962831][ T1540] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 285.975739][ T1540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.992316][ T5933] usb 5-1: SerialNumber: syz [ 285.997107][ T30] audit: type=1400 audit(2000000071.990:1684): avc: denied { open } for pid=6974 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.030114][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 286.040574][ T1540] usb 2-1: Product: syz [ 286.044747][ T1540] usb 2-1: Manufacturer: syz [ 286.067100][ T1540] usb 2-1: SerialNumber: syz [ 286.087463][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.103574][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.292884][ T1540] usb 2-1: config 0 descriptor?? [ 286.306667][ T30] audit: type=1400 audit(2000000071.990:1685): avc: denied { ioctl } for pid=6974 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.334666][ T1540] hub 2-1:0.0: bad descriptor, ignoring hub [ 286.346132][ T9] usb 4-1: Product: syz [ 286.352939][ T9] usb 4-1: Manufacturer: syz [ 286.357541][ T9] usb 4-1: SerialNumber: syz [ 286.362518][ T1540] hub 2-1:0.0: probe with driver hub failed with error -5 [ 286.370795][ T5933] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 286.400316][ T5933] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 286.417854][ T5933] usb 5-1: 2:1 : invalid channels 0 [ 286.427035][ T30] audit: type=1400 audit(2000000072.180:1686): avc: denied { allowed } for pid=8701 comm="syz.5.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 286.480723][ T5933] usb 5-1: USB disconnect, device number 28 [ 286.522952][ T30] audit: type=1400 audit(2000000072.180:1687): avc: denied { create } for pid=8701 comm="syz.5.718" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 286.597543][ T30] audit: type=1400 audit(2000000072.180:1688): avc: denied { map } for pid=8701 comm="syz.5.718" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 286.640067][ T9] usb 4-1: 0:2 : does not exist [ 286.656580][ T1540] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 286.668482][ T71] usb 2-1: Failed to submit usb control message: -71 [ 286.701606][ T71] usb 2-1: unable to send the bmi data to the device: -71 [ 286.716438][ T9] usb 4-1: USB disconnect, device number 26 [ 286.722585][ T71] usb 2-1: unable to get target info from device [ 286.728923][ T71] usb 2-1: could not get target info (-71) [ 286.739037][ T1540] usb 2-1: USB disconnect, device number 29 [ 286.760058][ T71] usb 2-1: could not probe fw (-71) [ 287.130457][ T5933] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 287.317840][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 287.330318][ T8713] netlink: 'syz.4.721': attribute type 30 has an invalid length. [ 287.344339][ T8713] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.353310][ T8713] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.362105][ T8713] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.370809][ T8713] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.387492][ T5933] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 287.450387][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.604506][ T5933] usb 6-1: config 0 descriptor?? [ 288.021081][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.054024][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.239729][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.276037][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.355458][ T8731] FAULT_INJECTION: forcing a failure. [ 288.355458][ T8731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.368621][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.0.725 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 288.368643][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.368654][ T8731] Call Trace: [ 288.368660][ T8731] [ 288.368666][ T8731] dump_stack_lvl+0x16c/0x1f0 [ 288.368696][ T8731] should_fail_ex+0x512/0x640 [ 288.368727][ T8731] _copy_from_user+0x2e/0xd0 [ 288.368753][ T8731] copy_msghdr_from_user+0x98/0x160 [ 288.368779][ T8731] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 288.368809][ T8731] ? kfree+0x24f/0x4d0 [ 288.368827][ T8731] ? __lock_acquire+0x622/0x1c90 [ 288.368857][ T8731] ___sys_recvmsg+0xdb/0x1a0 [ 288.368882][ T8731] ? __pfx____sys_recvmsg+0x10/0x10 [ 288.368923][ T8731] ? __pfx___might_resched+0x10/0x10 [ 288.368952][ T8731] do_recvmmsg+0x2fe/0x750 [ 288.368982][ T8731] ? __pfx_do_recvmmsg+0x10/0x10 [ 288.369014][ T8731] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 288.369050][ T8731] ? __fget_files+0x20e/0x3c0 [ 288.369080][ T8731] __x64_sys_recvmmsg+0x22a/0x280 [ 288.369107][ T8731] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 288.369142][ T8731] do_syscall_64+0xcd/0x4c0 [ 288.369170][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.369186][ T8731] RIP: 0033:0x7f73be58e929 [ 288.369200][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.369216][ T8731] RSP: 002b:00007f73bf41d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 288.369233][ T8731] RAX: ffffffffffffffda RBX: 00007f73be7b6160 RCX: 00007f73be58e929 [ 288.369244][ T8731] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 288.369255][ T8731] RBP: 00007f73bf41d090 R08: 0000000000000000 R09: 0000000000000000 [ 288.369265][ T8731] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 288.369286][ T8731] R13: 0000000000000001 R14: 00007f73be7b6160 R15: 00007fffbfd9f828 [ 288.369308][ T8731] [ 290.340758][ C1] net_ratelimit: 8391 callbacks suppressed [ 290.340778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.358920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.380375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.393161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.405471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.418081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.430449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.443577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.456336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.468659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.224530][ T5933] usbhid 6-1:0.0: can't add hid device: -71 [ 292.640645][ T5933] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 292.730509][ T5933] usb 6-1: USB disconnect, device number 20 [ 292.863174][ T8753] FAULT_INJECTION: forcing a failure. [ 292.863174][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 292.886700][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 292.886715][ T30] audit: type=1400 audit(2000000078.990:1730): avc: denied { ioctl } for pid=8741 comm="syz.4.730" path="socket:[22204]" dev="sockfs" ino=22204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.006539][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.733'. [ 293.019723][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.1.732 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 293.019748][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.019758][ T8753] Call Trace: [ 293.019764][ T8753] [ 293.019771][ T8753] dump_stack_lvl+0x16c/0x1f0 [ 293.019800][ T8753] should_fail_ex+0x512/0x640 [ 293.019822][ T8753] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 293.019847][ T8753] should_failslab+0xc2/0x120 [ 293.019871][ T8753] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 293.019892][ T8753] ? __alloc_skb+0x2b2/0x380 [ 293.019920][ T8753] __alloc_skb+0x2b2/0x380 [ 293.019942][ T8753] ? __pfx___alloc_skb+0x10/0x10 [ 293.019965][ T8753] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 293.019998][ T8753] netlink_ack+0x15d/0xb80 [ 293.020025][ T8753] netlink_rcv_skb+0x332/0x420 [ 293.020042][ T8753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.020070][ T8753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.020096][ T8753] ? netlink_deliver_tap+0x1ae/0xd30 [ 293.020117][ T8753] netlink_unicast+0x53d/0x7f0 [ 293.020138][ T8753] ? __pfx_netlink_unicast+0x10/0x10 [ 293.020163][ T8753] netlink_sendmsg+0x8d1/0xdd0 [ 293.020185][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.020210][ T8753] ____sys_sendmsg+0xa95/0xc70 [ 293.020233][ T8753] ? copy_msghdr_from_user+0x10a/0x160 [ 293.020256][ T8753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.020285][ T8753] ___sys_sendmsg+0x134/0x1d0 [ 293.020310][ T8753] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.020339][ T8753] ? __lock_acquire+0x622/0x1c90 [ 293.020402][ T8753] __sys_sendmsg+0x16d/0x220 [ 293.020426][ T8753] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.020471][ T8753] do_syscall_64+0xcd/0x4c0 [ 293.020498][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.020515][ T8753] RIP: 0033:0x7f24c118e929 [ 293.020528][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.020544][ T8753] RSP: 002b:00007f24c2047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.020561][ T8753] RAX: ffffffffffffffda RBX: 00007f24c13b5fa0 RCX: 00007f24c118e929 [ 293.020572][ T8753] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 293.020582][ T8753] RBP: 00007f24c2047090 R08: 0000000000000000 R09: 0000000000000000 [ 293.020591][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.020601][ T8753] R13: 0000000000000000 R14: 00007f24c13b5fa0 R15: 00007ffe6a520598 [ 293.020627][ T8753] [ 293.320641][ T30] audit: type=1400 audit(2000000079.430:1731): avc: denied { sys_module } for pid=8741 comm="syz.4.730" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 293.730140][ T8764] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 295.350450][ C1] net_ratelimit: 10551 callbacks suppressed [ 295.350466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.369029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.381865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.394040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.406297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.418436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.431067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.443404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.455546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.467800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.489469][ T30] audit: type=1400 audit(2000000079.630:1732): avc: denied { read } for pid=8741 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.824630][ T8755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8755 comm=syz.5.733 [ 300.360548][ C1] net_ratelimit: 15550 callbacks suppressed [ 300.360566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.360617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 300.366795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.378812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 300.391057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.402643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 300.414612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.426469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 300.439180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.450738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 301.978869][ C0] sched: DL replenish lagged too much [ 303.172791][ T30] audit: type=1400 audit(2000000079.810:1733): avc: denied { write } for pid=8754 comm="syz.5.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 305.370257][ C1] net_ratelimit: 19423 callbacks suppressed [ 305.370275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.370554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 305.376572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.388428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 305.401111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.412303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 305.424613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.436115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 305.448033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.460025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 310.380619][ C0] net_ratelimit: 19392 callbacks suppressed [ 310.380639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 310.380654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.386898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 310.398837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.410824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 310.423036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.434665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 310.446632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.458486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 310.471210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.628804][ T30] audit: type=1400 audit(2000000079.850:1734): avc: denied { read write } for pid=8759 comm="syz.3.735" name="vhost-net" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 314.850889][ T30] audit: type=1400 audit(2000000079.850:1735): avc: denied { open } for pid=8759 comm="syz.3.735" path="/dev/vhost-net" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 315.390342][ C0] net_ratelimit: 19186 callbacks suppressed [ 315.390361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 315.390806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.396636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 315.408943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.420501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 315.432382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.444375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 315.456598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.468194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 315.480166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.256451][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.400371][ C0] net_ratelimit: 18839 callbacks suppressed [ 320.400390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 320.401248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.406678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 320.418669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.430562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 320.443182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.454416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 320.466723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.478237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 320.490147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.075246][ T30] audit: type=1400 audit(2000000080.530:1736): avc: denied { ioctl } for pid=8759 comm="syz.3.735" path="/dev/vhost-net" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 325.410386][ C1] net_ratelimit: 19430 callbacks suppressed [ 325.410406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.410552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 325.416675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.428563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 325.441337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.452470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 325.464753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.476306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 325.488184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.500373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 330.420501][ C0] net_ratelimit: 20059 callbacks suppressed [ 330.420522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 330.420526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.420889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.426759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 330.439481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.450596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 330.462939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.474511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 330.486596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.498697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 335.430465][ C0] net_ratelimit: 19253 callbacks suppressed [ 335.430485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 335.430641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.436739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 335.449069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.460579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 335.472469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.484632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 335.496841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.508406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 335.520400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.440235][ C1] net_ratelimit: 17992 callbacks suppressed [ 340.440254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.440295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 340.446498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.458494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 340.470747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.482395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 340.494403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.506209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 340.518967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.530141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 342.555904][ T30] audit: type=1400 audit(2000000080.530:1737): avc: denied { wake_alarm } for pid=8759 comm="syz.3.735" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 345.450361][ C0] net_ratelimit: 19671 callbacks suppressed [ 345.450381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 345.450565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.456553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 345.468572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.480441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 345.492939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.504318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 345.516616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.528320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 345.540424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.460287][ C0] net_ratelimit: 24997 callbacks suppressed [ 350.460307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 350.460641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.466484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 350.478454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.490445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 350.502653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.514510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 350.526426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.538172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 350.550816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.470268][ C0] net_ratelimit: 28886 callbacks suppressed [ 355.470286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 355.470291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.471126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.476451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 355.488780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.500398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 355.512331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.524324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 355.536531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.548202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 360.480455][ C1] net_ratelimit: 30164 callbacks suppressed [ 360.480475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.480478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 360.480719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 360.486595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.498700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 360.510983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.522594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 360.540409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.546436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 360.558870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.490398][ C0] net_ratelimit: 30409 callbacks suppressed [ 365.490417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 365.490582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.496668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 365.508609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.520571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 365.540405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.544421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 365.556356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.568178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 365.580737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.500360][ C0] net_ratelimit: 30352 callbacks suppressed [ 370.500380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 370.500425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.506528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 370.518542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.530410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 370.542932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.554430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 370.566825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.578399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 370.590399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.510282][ C0] net_ratelimit: 30660 callbacks suppressed [ 375.510302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 375.510673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.516461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 375.528394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.540531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 375.560650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.564514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 375.576296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.588112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 375.600673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.520313][ C1] net_ratelimit: 30644 callbacks suppressed [ 380.520331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.520440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 380.526466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.538565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 380.550831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.562352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 380.574346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.586193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 380.598724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.610090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 385.530234][ C0] net_ratelimit: 30338 callbacks suppressed [ 385.530251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 385.530297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.536420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 385.548752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.560270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 385.572175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.584144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 385.596353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.607986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 385.619985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.540338][ C0] net_ratelimit: 30272 callbacks suppressed [ 390.540357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 390.540483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.546525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 390.558529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.570370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 390.590581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.594296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 390.606601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.618125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 390.630025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.550459][ C0] net_ratelimit: 30708 callbacks suppressed [ 395.550479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 395.550598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.556625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 395.568961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.580590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 395.592513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.604474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 395.616665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.628301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 395.640286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.560447][ C0] net_ratelimit: 30691 callbacks suppressed [ 400.560454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.560465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 400.560701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 400.566658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.578507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 400.600564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.602598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 400.614877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.626472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 400.638316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.570223][ C0] net_ratelimit: 30434 callbacks suppressed [ 405.570244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 405.570424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.576397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 405.590574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.600359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 405.612661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.624142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 405.636077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.648054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 405.660245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.580337][ C0] net_ratelimit: 30291 callbacks suppressed [ 410.580357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 410.581064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.586528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 410.598848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.610395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 410.622312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.634276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 410.646497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.658107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 410.670098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.590313][ C1] net_ratelimit: 30733 callbacks suppressed [ 415.590325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 415.590333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.590622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.596487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 415.610639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.620418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 415.632568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.644251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 415.656151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.668145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 420.600387][ C0] net_ratelimit: 31187 callbacks suppressed [ 420.600405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 420.600412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.600927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.606562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 420.618788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.630525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 420.642411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.654327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 420.666722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.678148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 425.610351][ C0] net_ratelimit: 30765 callbacks suppressed [ 425.610370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 425.610693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.616535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 425.628465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.640438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 425.652633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.664262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 425.676277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.688067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 425.700311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.620231][ C1] net_ratelimit: 30900 callbacks suppressed [ 430.620250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.620405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 430.630508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.638279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 430.650275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.662079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 430.674512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.685962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 430.698272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.709870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 435.630279][ C0] net_ratelimit: 31165 callbacks suppressed [ 435.630294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 435.635498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.636443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 435.648667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.660628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 435.672843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.684449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 435.696436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.708408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 435.720645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.640274][ C1] net_ratelimit: 31249 callbacks suppressed [ 440.640281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 440.640292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.640883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.646437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 440.658385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.670286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 440.682458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.694252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 440.706199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.718052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.130204][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 445.137176][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5933/1:b..l [ 445.145504][ C1] rcu: (detected by 1, t=10502 jiffies, g=24685, q=54014 ncpus=2) [ 445.153388][ C1] task:kworker/0:7 state:R running task stack:21976 pid:5933 tgid:5933 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 445.167824][ C1] Workqueue: events_power_efficient gc_worker [ 445.173911][ C1] Call Trace: [ 445.177190][ C1] [ 445.180121][ C1] __schedule+0x116a/0x5de0 [ 445.184644][ C1] ? __pfx___schedule+0x10/0x10 [ 445.189496][ C1] ? find_held_lock+0x2b/0x80 [ 445.194180][ C1] ? mark_held_locks+0x49/0x80 [ 445.198952][ C1] preempt_schedule_irq+0x51/0x90 [ 445.203976][ C1] irqentry_exit+0x36/0x90 [ 445.208392][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.214367][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 445.219568][ C1] Code: 42 34 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 42 98 0f 0f 0f 82 74 02 00 00 8b 35 2a ca 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 d9 41 34 12 0f 85 c7 02 00 00 48 83 c4 [ 445.239182][ C1] RSP: 0018:ffffc90005347ae0 EFLAGS: 00000206 [ 445.245264][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c4840 RCX: 00000000893dbf13 [ 445.253242][ C1] RDX: 0000000000000000 RSI: ffffffff8ddf45f1 RDI: ffffffff8c1575a0 [ 445.261209][ C1] RBP: 0000000000000002 R08: 8179f9f1cc30f4a7 R09: 0000000000000000 [ 445.269176][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 445.277138][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.285120][ C1] ? __pfx___might_resched+0x10/0x10 [ 445.290407][ C1] ? gc_worker+0x999/0x16e0 [ 445.294916][ C1] gc_worker+0x241/0x16e0 [ 445.299243][ C1] ? gc_worker+0x230/0x16e0 [ 445.303742][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 445.309378][ C1] ? __pfx_gc_worker+0x10/0x10 [ 445.314139][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.318904][ C1] process_one_work+0x9cf/0x1b70 [ 445.323843][ C1] ? __pfx_gc_worker+0x10/0x10 [ 445.328605][ C1] ? __pfx_process_one_work+0x10/0x10 [ 445.333980][ C1] ? assign_work+0x1a0/0x250 [ 445.338579][ C1] worker_thread+0x6c8/0xf10 [ 445.343172][ C1] ? __kthread_parkme+0x19e/0x250 [ 445.348200][ C1] ? __pfx_worker_thread+0x10/0x10 [ 445.353311][ C1] kthread+0x3c5/0x780 [ 445.357375][ C1] ? __pfx_kthread+0x10/0x10 [ 445.361959][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.366718][ C1] ? __pfx_kthread+0x10/0x10 [ 445.371305][ C1] ret_from_fork+0x5d7/0x6f0 [ 445.375896][ C1] ? __pfx_kthread+0x10/0x10 [ 445.380483][ C1] ret_from_fork_asm+0x1a/0x30 [ 445.385260][ C1] [ 445.388270][ C1] rcu: rcu_preempt kthread starved for 1541 jiffies! g24685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 445.399367][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 445.409326][ C1] rcu: RCU grace-period kthread stack dump: [ 445.415203][ C1] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 445.428700][ C1] Call Trace: [ 445.431973][ C1] [ 445.434900][ C1] __schedule+0x116a/0x5de0 [ 445.439421][ C1] ? __pfx___schedule+0x10/0x10 [ 445.444277][ C1] ? find_held_lock+0x2b/0x80 [ 445.448953][ C1] ? schedule+0x2d7/0x3a0 [ 445.453288][ C1] schedule+0xe7/0x3a0 [ 445.457359][ C1] schedule_timeout+0x123/0x290 [ 445.462207][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 445.467583][ C1] ? __pfx_process_timeout+0x10/0x10 [ 445.472870][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.478677][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 445.484143][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 445.488912][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 445.494217][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.499435][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 445.504374][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 445.509244][ C1] rcu_gp_kthread+0x270/0x380 [ 445.513926][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 445.519128][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.523890][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.529094][ C1] ? __kthread_parkme+0x19e/0x250 [ 445.534120][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 445.539319][ C1] kthread+0x3c5/0x780 [ 445.543381][ C1] ? __pfx_kthread+0x10/0x10 [ 445.547979][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.552743][ C1] ? __pfx_kthread+0x10/0x10 [ 445.557329][ C1] ret_from_fork+0x5d7/0x6f0 [ 445.561918][ C1] ? __pfx_kthread+0x10/0x10 [ 445.566501][ C1] ret_from_fork_asm+0x1a/0x30 [ 445.571273][ C1] [ 445.574286][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 445.580603][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 445.592228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 445.602278][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 445.607914][ C1] Code: 7b 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 00 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 445.627518][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 445.633580][ C1] RAX: 0000000001e863f1 RBX: 0000000000000001 RCX: ffffffff8b800c99 [ 445.641544][ C1] RDX: 0000000000000000 RSI: ffffffff8de19ac4 RDI: ffffffff8c1575a0 [ 445.649506][ C1] RBP: ffffed1003c5a488 R08: 0000000000000001 R09: ffffed10170a6645 [ 445.657469][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 445.665433][ C1] R13: ffff88801e2d2440 R14: ffffffff90a81650 R15: 0000000000000000 [ 445.673396][ C1] FS: 0000000000000000(0000) GS:ffff888124854000(0000) knlGS:0000000000000000 [ 445.682328][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.688907][ C1] CR2: 00007f0975800218 CR3: 000000005dbab000 CR4: 00000000003526f0 [ 445.690199][ C0] net_ratelimit: 30356 callbacks suppressed [ 445.690212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.696861][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.702979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.714654][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.714666][ C1] Call Trace: [ 445.714674][ C1] [ 445.722871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.734539][ C1] default_idle+0x13/0x20 [ 445.734559][ C1] default_idle_call+0x6d/0xb0 [ 445.742755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.745756][ C1] do_idle+0x391/0x510 [ 445.749005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.760629][ C1] ? __pfx_do_idle+0x10/0x10 [ 445.760657][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 445.765245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.769703][ C1] cpu_startup_entry+0x4f/0x60 [ 445.781944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.785672][ C1] start_secondary+0x21d/0x2b0 [ 445.797864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.802161][ C1] ? __pfx_start_secondary+0x10/0x10 [ 445.802187][ C1] common_startup_64+0x13e/0x148 [ 445.807614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 445.819303][ C1] [ 445.819847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.700255][ C0] net_ratelimit: 30589 callbacks suppressed [ 450.700273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 450.700296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.706417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 450.718911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.730365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 450.742730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.754281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 450.766191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.778145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:e1:f5:8a:fe:4e, vlan:0) [ 450.790387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)