last executing test programs: 23.512737972s ago: executing program 1 (id=435): set_mempolicy(0x8000, &(0x7f0000000000)=0x8000000000000000, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27a, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="096cc34777f4"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000fc0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1, 0x2}, {0xa, 0xfff1}, {0x3, 0xb}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x855}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x400, 0xbffffffe, 0x100, {{@in=@rand_addr=0x1000, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x9, 0x8251c, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, {0x6, 0xfffffffffffffffe, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) dup3(r9, r8, 0x0) 22.291067952s ago: executing program 1 (id=437): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 21.762229623s ago: executing program 4 (id=439): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='/\x00', 0x610803, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x100]}, {0x9, 0x7fff, 0x1, 0x1}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}, {[0x1, 0x5, 0x5, 0x3]}, 0xd4, 0x7a, &(0x7f0000000100)=""/122}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffe, 0x49, 0x4, @buffer={0x0, 0xd7, &(0x7f0000000200)=""/215}, &(0x7f0000000300)="1af5a05114c12779441d72a768eacd18b4a4a89aa5658bfeca6281da9ea7ea88c12cc6de0532ada8bffa7da160b34aeecac3bcba8b0f0b0e2003433472c23189bd86eb74ab381b1a87", &(0x7f0000000380), 0x4, 0x10000, 0x0, &(0x7f00000003c0)}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f00000004c0)="8c631354c2aa1c2807", 0x9, 0x4000000, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) r2 = gettid() sched_setscheduler(r2, 0x0, &(0x7f0000000500)=0xfffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000017c0)={0xad8, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/30, 0x1e}, {&(0x7f00000015c0)=""/202, 0xca}, {&(0x7f00000016c0)=""/37, 0x25}], &(0x7f0000001780)=[0x63d], 0x5}, 0x20) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_tracing={0x1a, 0xa, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x0, 0xffffff00}, @jmp={0x5, 0x0, 0xd, 0x9, 0x7, 0xffffffffffffffc0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000001880)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f00000018c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2e854, 0xffffffffffffffff, 0x0, &(0x7f0000001900)=[r0, r0, r0], 0x0, 0x10, 0xc1}, 0x94) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001b80)={@dev, @loopback, 0x0}, &(0x7f0000001bc0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0xa, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x475c, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000001a80)='syzkaller\x00', 0x100, 0x82, &(0x7f0000001ac0)=""/130, 0x41000, 0x0, '\x00', r5, 0x25, r0, 0x8, &(0x7f0000001c00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001c40)={0x1, 0xa, 0x401, 0xf3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[r1, r1, r0, r0, r0, r1], &(0x7f0000001cc0)=[{0x2, 0x1, 0x5}], 0x10, 0xf96}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001dc0), 0x8000, 0x0) read$FUSE(r1, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000003e40)={0x50, 0xffffffffffffffda, r6, {0x7, 0x2d, 0x0, 0x8000, 0x29, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x20, 0x3}}, 0x50) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000003ec0)={{@local, 0x68ffac85}, 0xa58, 0x5, 0xb, 0x5}) fcntl$setlease(r4, 0x400, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x87, &(0x7f0000003f00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x0, 0x120, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "de"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x10, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x26}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xc36, 0xc, 0x80, 0x1, 0x6}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6f, 0x83, 0xf1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x8, 0xff}}}}}}}]}}, &(0x7f0000004200)={0xa, &(0x7f0000003fc0)={0xa, 0x6, 0x310, 0x5, 0x5, 0x3, 0x20, 0x9}, 0x5, &(0x7f0000004000)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000004040)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000004080)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000040c0)=@lang_id={0x4, 0x3, 0x2009}}, {0xee, &(0x7f0000004100)=@string={0xee, 0x3, "41d9161e0fc118deff868611d0bfd9652002ae17135ccdd999f990179428b9ec034d44242e7783697d516881dd8a0b9eb219b4b4fbeff59eb893f44a74aee76d6d86c2ee88755b65f4645336c99f08216ca3c295287499556d4add1629de4ee55bb85d73858afb4ed9b8263be218a3783c492470183d08ea0b39a0167446f6850a70fd22e4969428735a35cce7f72e981dd427e49057ee98aa85b03101b03dd1dd2b19999650a496b20325dc68e2edc902c57f46329d3fe05d3d2ee3399862e262d3b0f08c0d97184d1c812554d457fac4128bdfea048b60d4acbb8079bf7c24505f45b4a2cab1aa36105111"}}]}) r8 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) recvfrom$l2tp(r8, &(0x7f0000004280)=""/251, 0xfb, 0x7f830da8245ebfab, &(0x7f0000004380)={0x2, 0x0, @broadcast}, 0x10) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x2, 0x5003) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f00000043c0)=""/239) prlimit64(r7, 0xb, &(0x7f00000044c0)={0x1, 0xc52}, &(0x7f0000004500)) recvfrom$l2tp(r0, &(0x7f0000004540)=""/124, 0x7c, 0x40000000, &(0x7f00000045c0)={0x2, 0x0, @initdev}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000004600)={0x0, @in6={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe1}}}, &(0x7f00000046c0)=0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000004700)={r9, @in6={{0xa, 0x4e22, 0x5, @local, 0xbf}}}, 0x84) sched_setscheduler(r2, 0x5, &(0x7f00000047c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000004800)={r9, @in6={{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, [0x2, 0x9, 0x7, 0x40, 0x3, 0x475c, 0xd23, 0x8000000000000001, 0xcb9e, 0x1, 0x9, 0x8001, 0x6, 0x7, 0x1]}, &(0x7f0000004900)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000004940)={r10, 0x3}, 0x8) write$FUSE_LK(r1, &(0x7f0000004cc0)={0x28, 0x0, r6, {{0xc4bd, 0x7, 0x1}}}, 0x28) 21.63759013s ago: executing program 3 (id=440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340), 0xffff, r1}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000206010300000000000000000000000037077a325ce1a00900020073"], 0x44}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624", 0x36}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad96921", 0x16}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r8, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r7, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) 20.86013776s ago: executing program 1 (id=442): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.856444192s ago: executing program 3 (id=443): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x6, [@var={0x5, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @enum64={0xf, 0x3, 0x0, 0x13, 0x0, 0x4, [{0xe, 0xe60b}, {0xb, 0x8, 0x9}, {0x8, 0x64, 0x8}]}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x76}, 0x28) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) 20.809825845s ago: executing program 0 (id=444): r0 = syz_open_dev$audion(&(0x7f0000000080), 0x2, 0x659140) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000040a010200000000000000000100000408000a400000000008000a40000000020c0002400000000000000002680004801400030070696d7265673000000000000000000008000240249e81d4080002403ec936b71400030076657468315f766972745f776966690008000140000000000800024036f8aa59140003007866726d300000000000000000000000080001400000000008000b40000000020b00070066696c74657200000900030073797a32000000000900030073797a3000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20004054}, 0x20044000) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) getsockopt(r3, 0x401, 0x7, &(0x7f0000000340)=""/73, &(0x7f0000000480)=0x49) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x13}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1, 0x29e, 0x7) 20.746561808s ago: executing program 3 (id=445): ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000100)={0x9, 0x10000}) syz_io_uring_setup(0x261c, &(0x7f0000000200)={0x0, 0x8be9, 0x0, 0x1, 0xd1}, &(0x7f0000000280)=0x0, &(0x7f0000000300), &(0x7f0000000340)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f000044d000/0x1000)=nil, 0x1000, 0x9, 0x1010, 0xffffffffffffffff, 0x8000000) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8900, 0xc) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000003c0)={0xc0201, 0x101}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x468ac, {0x0, r3}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000979000/0x1000)=nil}) socket$packet(0x11, 0x2, 0x300) io_uring_enter(0xffffffffffffffff, 0x20000001, 0x21, 0x49, 0x0, 0xfffffffffffffe83) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x3000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x4, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) 20.690120852s ago: executing program 2 (id=446): mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) syz_clone(0x200000, &(0x7f00000002c0)="d7bab2a01bd4f20eaa9838f92720b4e2dd4b2a519a25aac150ec450fc508741f3151c9092f8a1895cc6362a5f492a015ae8f1d3428691134601d2c14f4faaa3d143c143d7d8a6e", 0x47, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="deab3537ad9a7cb17e30ee2cf070117b459d866b5ec3ef98f9c7646dab85") mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', 0x0, 0x0) r2 = epoll_create1(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_pwait(r2, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0xd63, 0x0, 0xfffffffffffffe61) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpgid(0x0) syz_pidfd_open(r4, 0x0) syz_pidfd_open(r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x6000) accept4$nfc_llcp(r6, &(0x7f0000000180), &(0x7f0000000280)=0x60, 0x80000) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000480), &(0x7f0000000440)=0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000280)=0x15) r10 = pidfd_getfd(r7, r3, 0x0) setns(r10, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) 19.667018108s ago: executing program 4 (id=447): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x164, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 19.498389895s ago: executing program 0 (id=448): ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x9, 0xf}) 19.334162775s ago: executing program 0 (id=449): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0xb, 0x71, {0x71, 0x3d, "04ea42078ae0a4c62463b66a44fbd769f2817b665ca42a5805b973d3e7fd50f98e8612d46d08dcb48e3e2d628e92c1fe87f2c541f0ba5ed7bed9be124daa6ee5a3682dca36010a8a6a6bb98f0824f070a224bd15addc157f7f72bbd27a5a21f21d15f46e084b7bbe87a87ed9c655b7"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x10, 0xa7, "26c01d509eaca8d1310a4e91962508e0909a2379d4114de13f937cfb03291a700db1edf680824d2d68d34087f1eb9149502c5930bd136d693530847a97f89d4e475977b7e0077614fa5405f412225af2ae265f2b72fc73500c7a32e9d6907ab02ecda88d78ccb15df4908f507b03e94b3a4baeef3dca14b5abae35c925c3f83ab0df9724868e36c595f549b8935b2d8c7dd75aebbe7990d9bcb7a127c3beacf48a442192160805"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0xc0, 0x5, 0x5, "45a6183588"}, &(0x7f0000000340)={0x40, 0x5, 0x3, "9b5501"}}) 19.236565317s ago: executing program 4 (id=450): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) fadvise64(0xffffffffffffffff, 0x85f5, 0x4000000005, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16, @ANYRES16], 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180), 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19.194694665s ago: executing program 3 (id=451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="200100000000000000000000000000010000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000a00040000000000000000000a001000000000000000000069000100786362632861657329"], 0x168}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) fcntl$getown(r2, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2400c850) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffe05}, 0x200008c4) pipe(&(0x7f0000000080)) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f00000007c0)=ANY=[@ANYBLOB="7472616e733d66642c8096646e6f3d78b1d5457b2d51fbc645e75d2ba1bb24d7a0b4b18df7a74579a2bea07bd2d15cb528d18134b86012c0d37f3f43c83fef799aa4f1911019bb10735e2345502d3005a4f425be2dd636e8d309f82447e84b8916", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x654, 0x2, {{0x19, 0x4, 0x0, 0x20, 0x64, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@ssrr={0x89, 0x3, 0xc2}, @rr={0x7, 0x13, 0x1, [@remote, @empty, @empty, @multicast1]}, @timestamp={0x44, 0x1c, 0x6c, 0x0, 0xd, [0xcfb, 0x9, 0x7d8, 0x1, 0xd, 0x6]}, @rr={0x7, 0x1b, 0x34, [@remote, @multicast1, @local, @loopback, @rand_addr=0x64030102, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000540)={'gre0\x00', r10, 0x7, 0x7, 0x7, 0x0, {{0x4e, 0x4, 0x0, 0x2, 0x138, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @empty, {[@timestamp={0x44, 0x18, 0x78, 0x0, 0x3, [0x10000, 0x6, 0xc, 0x80, 0x2]}, @cipso={0x86, 0x68, 0x1, [{0x5, 0xe, "101f162f35f383f474086214"}, {0x0, 0x8, "bf50b121de9d"}, {0x7, 0x6, "3c0f1269"}, {0x1, 0x12, "15e65271441e2e0c4c9065c22ef4c217"}, {0x0, 0x11, "99a5da0833985f51bd3804295135e0"}, {0x7, 0x7, "ea33d818a9"}, {0x1, 0x7, "8341ea0eae"}, {0x6, 0x6, "cf72bf0b"}, {0x5, 0x7, "7b2f2fb36c"}, {0x1, 0x8, "2a9682c1f0fe"}]}, @rr={0x7, 0x1f, 0xf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @remote]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x2, 0x8, "745b24f9fb1e"}, {0x5, 0x4, "38f6"}, {0x1, 0x11, "00b7244d08768859403abdf2fc8c98"}, {0x2, 0x12, "7133f23af21136c777bdd5c13f0439ff"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x5b, 0x1, 0x0, [{@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xea0000}, {@multicast1, 0x3}, {@remote, 0x400}, {@private=0xa010100, 0x39}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1000}]}, @noop, @lsrr={0x83, 0xf, 0x5b, [@local, @multicast2, @loopback]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="804001004020000010001a800c000180000000000000000008001b0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17.878386533s ago: executing program 3 (id=452): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 17.529601874s ago: executing program 2 (id=453): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x5, &(0x7f00000007c0)=@raw=[@ldst={0x1, 0x2, 0x2, 0x6, 0x1, 0x4d, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000800)='syzkaller\x00', 0x4, 0x3, &(0x7f0000000840)=""/3, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x0, 0x8000, 0xfcd}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980), &(0x7f00000009c0)=[{0x1, 0x5, 0x6}, {0x2, 0x4, 0xb, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x2, 0x3, 0x2, 0xb}, {0x5, 0x4, 0x3, 0x8}, {0x0, 0x5, 0xd, 0x1}, {0x4, 0x4, 0xa, 0x17}], 0x10, 0x1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r5 = socket(0x28, 0x801, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120033000100000004000000080000000000000b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ptrace$peeksig(0x4209, r0, &(0x7f0000000340)={0x9, 0x1, 0x5}, &(0x7f0000000480)=[{}, {}, {}, {}, {}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r5, 0x2) 16.561012498s ago: executing program 3 (id=454): openat$kvm(0xffffffffffffff9c, 0x0, 0x490ec0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) memfd_create(0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mremap(&(0x7f00001f6000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000920000/0x1000)=nil) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000400)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a200000005328000000000000000000000a0029fe0900010073797a310000000014"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000500)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x300, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001000210026bd70000000000003"], 0x2c}}, 0x40080) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.45852834s ago: executing program 1 (id=455): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpgrp(r2) rt_tgsigqueueinfo(r2, r5, 0x1d, &(0x7f0000000240)={0x25, 0x7, 0xc}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xa3) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x10}}, 0x94}}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 16.276602118s ago: executing program 0 (id=456): r0 = syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000140)={{0x12, 0x1, 0xc974134031c523a0, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0xad05a0f0c4afa3f5, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x9, [], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x3, 0x2, 0x0, {0x4}}}]}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='nfs\x00', 0x200004, &(0x7f00000000c0)='\x01') syz_usb_connect$cdc_ecm(0x2, 0x79, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0xed, 0x3, 0x0, 0x40, 0x80}, 0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="050f520005141004057a656b853690b80c01619a91f8b3bb9403100b0b100108c40006087f00020b1001085800090406000920100a08450000000fff040030000000f0ff0000003f00008fdfff0000c0ff00"], 0x2, [{0xff, &(0x7f00000002c0)=@string={0xff, 0x3, "114227a5c084d012545e2a3e066ac540520dd3221ba49c5f37a5244031b9d4d5b6ca9433607174e8398fdd84bfb2d19dadecca5ea8de9eb9be11d4349be61c75e0b6c0832e379a175d10a82781dee6fd8302a49dac14bc8be7513b355bbebfba4fc308ad3ed58ce55eb8fa962520600df75835947a478ff606984d3c88b6b85a800ddd0f3a08d6ce0f94dd89a7e43ffc18459a854bd1894be4ba0d4d40446c5a4bfef6405ca4d6fa2996db61c882a05f392330f2cef55a478090d022bc0a6cf1da6d0bd13ebd32d5469be241b624d29c58c445c422e7f892fe2e71a5e1cf7fda3dc24447190d501875cca53611aa6cdbfb8ff9508981556776afb3f587"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1a6a}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee01) getsockopt$inet6_tcp_buf(r1, 0x6, 0x2a, 0x0, &(0x7f00000000c0)) r2 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x2, 0x0) getdents64(r4, 0x0, 0x22) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_ep_read(r0, 0x66, 0xf5, &(0x7f0000000000)=""/245) 15.729092803s ago: executing program 4 (id=457): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x2, "a0e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.385283255s ago: executing program 1 (id=458): r0 = inotify_init() syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x0) socket$tipc(0x1e, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.534105121s ago: executing program 2 (id=459): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r2, &(0x7f0000000000)='#^\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x28f9]}, {0x4, 0xe, 0x401}}, 0x172, &(0x7f0000000100), &(0x7f0000000240)=0x9}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r3, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000400)=r4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x10000007) r5 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r1, &(0x7f0000000b40)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000840)=""/167, 0xa7}, {&(0x7f0000000900)=""/140, 0x8c}, {0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000023c0)=""/4083, 0xff3}, {&(0x7f0000000540)=""/133, 0x85}, {&(0x7f0000000a40)=""/228, 0xe4}], 0x9) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 13.526225452s ago: executing program 2 (id=460): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = dup(r0) write$UHID_CREATE2(r1, &(0x7f0000000440)=ANY=[], 0x19e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) r3 = socket(0x10, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)="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", 0x17c}], 0x1}, 0x40080) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x7, 0xf}, {0x1b, 0xf}, {0x9, 0xc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x70bd2b, 0x257fdbfa, {0x0, 0x0, 0x0, r4, {0x2, 0xb}, {}, {0xa, 0x300}}, [@TCA_RATE={0x13, 0x5, {0x28, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404d082}, 0x404c412) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x9) openat$dsp(0xffffffffffffff9c, 0x0, 0x203, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, 0x0, 0x0, 0x2040004, &(0x7f0000000080)={[], [], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001d080)=""/102390, 0xdf47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900"/15], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r7 = semget(0x0, 0x4, 0x39c) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) 12.99146413s ago: executing program 2 (id=461): ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000100)={0x9, 0x10000}) syz_io_uring_setup(0x261c, &(0x7f0000000200)={0x0, 0x8be9, 0x0, 0x1, 0xd1}, &(0x7f0000000280)=0x0, &(0x7f0000000300), &(0x7f0000000340)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f000044d000/0x1000)=nil, 0x1000, 0x9, 0x1010, 0xffffffffffffffff, 0x8000000) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8900, 0xc) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000003c0)={0xc0201, 0x101}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x468ac, {0x0, r3}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000979000/0x1000)=nil}) socket$packet(0x11, 0x2, 0x300) io_uring_enter(0xffffffffffffffff, 0x20000001, 0x21, 0x49, 0x0, 0xfffffffffffffe83) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x3000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x4, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) 12.991286967s ago: executing program 0 (id=462): fsopen(&(0x7f00000002c0)='pvfs2\x00', 0x0) (fail_nth: 5) 12.739291448s ago: executing program 0 (id=463): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 12.576638526s ago: executing program 4 (id=464): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 12.208232768s ago: executing program 1 (id=465): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='enc,Vaep hash=blake2s-224-Meneric\x00'/78], 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r6 = syz_io_uring_setup(0x13ad, &(0x7f0000000680)={0x0, 0x6409, 0x1000, 0x2, 0x1d3}, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000000)) close(r6) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f000000fa00)=0x9) poll(&(0x7f0000000100)=[{r6, 0x4008}], 0x1, 0x8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="9f00d4f3"}]}, 0x1c}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) 12.112288943s ago: executing program 2 (id=466): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 10.559187449s ago: executing program 4 (id=467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000400)='#', 0x1}], 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x10811) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x40, &(0x7f0000000300)=0x0) r5 = eventfd2(0x1, 0x0) io_submit(r4, 0x5, &(0x7f00000008c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xd9, r1, &(0x7f0000000440)="d889688e801c86acf14ec3ef1c56e2dd79f7461c9edcac37dfa8f5f6c1c938d33f30082e03438935c488cf5ffed527a70b904963fdd85f6fa4a450bcb137f7b28db609b1a13f321fc8f4ba0b9ddd5f3829fcab8af4aafb1498ea70c661ccba7b3f06ff64d14126df4a159dd19d302357bb53a3fb0e5295a0", 0x78, 0x2eb, 0x0, 0x2, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f0000000500)="ea511ceccda51cd02fcc462f303c165da4b8dc522e453ea3efce550681abf38050f7c8bc54f5867030a53b3a83a379a3af050474de889bc9ade2ed6b7a096be1353da670cf89acb570cbd37e96976ffeb94cefbf855c6ccbf8ef62e98c30d39aec37137dd62eb34efdcbcd6cf7f7f670d7ac52a5be6b06c47168833dd6608de9046a7f235ca1fc2350bfaf", 0x8b, 0x401, 0x0, 0x2, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000600)="187e1fb8e8163096c4bddbbd78ca0817a2c4c10f5935e6cfb84d84dc64f6b7dd05c40be196efbc4f29e753694b0462232b3bc71b996ec142dae3b1b749d4296388bf865f3861a3b6c20e522bd9447f24", 0x50, 0x3, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f00000006c0)="a4b81fa7f614cbda146d5accef9463a3d0d20e62fdccde7f774782af4e0bc933ddd3011a91544c1780c42f3bce27f6ff77f9dbac89e27882935de2ee0595855f615a03b2b1", 0x45, 0x4e62, 0x0, 0x3, r1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x1ff, r3, &(0x7f0000000780)="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", 0xfb, 0x1, 0x0, 0x0, r1}]) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 32 (id=454): openat$kvm(0xffffffffffffff9c, 0x0, 0x490ec0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) memfd_create(0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mremap(&(0x7f00001f6000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000920000/0x1000)=nil) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000400)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a200000005328000000000000000000000a0029fe0900010073797a310000000014"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000500)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x300, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001000210026bd70000000000003"], 0x2c}}, 0x40080) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 27): avc: denied { read accept } for pid=6776 comm="syz.2.211" path="socket:[11913]" dev="sockfs" ino=11913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.983996][ T6758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.054834][ T10] libceph: connect (1)[c::]:6789 error -101 [ 123.061446][ T5819] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.085835][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 123.096232][ T6794] ceph: No mds server is up or the cluster is laggy [ 123.198723][ T6804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6804 comm=syz.4.209 [ 123.212085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.244764][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 123.263590][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 123.321635][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.338503][ T5819] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.349717][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.377145][ T5819] usb 4-1: Product: syz [ 123.392134][ T5819] usb 4-1: Manufacturer: syz [ 123.420295][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.432236][ T5819] usb 4-1: SerialNumber: syz [ 123.452398][ T5819] usb 4-1: config 0 descriptor?? [ 123.474678][ T5819] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 123.536185][ T6755] Set syz1 is full, maxelem 6117 reached [ 123.695193][ T29] audit: type=1400 audit(1776422090.036:328): avc: denied { create } for pid=6810 comm="syz.2.216" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.773982][ T29] audit: type=1400 audit(1776422090.086:329): avc: denied { mounton } for pid=6810 comm="syz.2.216" path="/36/file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.838475][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 123.882232][ T5819] usb 4-1: USB disconnect, device number 6 [ 123.907307][ T29] audit: type=1400 audit(1776422090.246:330): avc: denied { unlink } for pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.251200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.012055][ T5862] usb 5-1: USB disconnect, device number 16 [ 125.057503][ T29] audit: type=1400 audit(1776422091.396:331): avc: denied { create } for pid=6828 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 125.094259][ T29] audit: type=1400 audit(1776422091.396:332): avc: denied { bind } for pid=6828 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 125.099863][ T5922] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.313373][ T5922] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 125.342510][ T6837] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 125.353375][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.394333][ T29] audit: type=1326 audit(1776422091.726:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.3.223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef9119c819 code=0x0 [ 125.417275][ T5922] usb 3-1: config 0 has no interface number 0 [ 125.427049][ T5922] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 125.538509][ T6845] netlink: zone id is out of range [ 125.547126][ T5922] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 125.581440][ T6845] netlink: zone id is out of range [ 125.592418][ T5922] usb 3-1: config 0 interface 106 has no altsetting 0 [ 125.609965][ T6845] netlink: zone id is out of range [ 125.615899][ T5922] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 125.661044][ T6845] netlink: zone id is out of range [ 125.672684][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.726351][ T6845] netlink: zone id is out of range [ 125.733076][ T5922] usb 3-1: config 0 descriptor?? [ 125.776696][ T5922] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 126.319695][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.391197][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.825427][ T1107] usb 3-1: Failed to submit usb control message: -110 [ 126.878497][ T1107] usb 3-1: unable to send the bmi data to the device: -110 [ 126.903968][ T1107] usb 3-1: unable to get target info from device [ 126.942005][ T1107] usb 3-1: could not get target info (-110) [ 126.963632][ T1107] usb 3-1: could not probe fw (-110) [ 127.294918][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.305235][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.363553][ T29] audit: type=1400 audit(1776422093.706:334): avc: denied { create } for pid=6874 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.640733][ T29] audit: type=1400 audit(1776422093.976:335): avc: denied { ioctl } for pid=6878 comm="syz.4.229" path="socket:[12101]" dev="sockfs" ino=12101 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 127.730913][ T29] audit: type=1400 audit(1776422094.066:336): avc: denied { getopt } for pid=6868 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.927082][ T6885] binder: 6878:6885 ioctl c0306201 0 returned -14 [ 127.999895][ T5862] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 128.152042][ T5862] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 128.169359][ T5862] usb 2-1: config 5 has no interface number 0 [ 128.175559][ T5922] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.199875][ T5862] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 128.228782][ T5862] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 30768, setting to 64 [ 128.251615][ T5862] usb 2-1: config 5 interface 123 has no altsetting 0 [ 128.270141][ T5862] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 128.282618][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.293052][ T5862] usb 2-1: Product: syz [ 128.298156][ T5862] usb 2-1: Manufacturer: syz [ 128.304167][ T5862] usb 2-1: SerialNumber: syz [ 128.315611][ T6884] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 128.359956][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 128.386017][ T5922] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.401257][ T5922] usb 4-1: config 0 has no interface number 0 [ 128.408373][ T5922] usb 4-1: config 0 interface 184 has no altsetting 0 [ 128.427975][ T5922] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.441950][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.455360][ T5922] usb 4-1: Product: syz [ 128.459603][ T5922] usb 4-1: Manufacturer: syz [ 128.466687][ T5922] usb 4-1: SerialNumber: syz [ 128.482372][ T5922] usb 4-1: config 0 descriptor?? [ 128.588944][ T5862] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 128.633239][ T5862] usb 2-1: USB disconnect, device number 12 [ 128.709027][ T10] usb 3-1: USB disconnect, device number 11 [ 129.721646][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 129.744810][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 129.988816][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 130.168215][ T5922] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 130.598435][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 130.755290][ T6910] net_ratelimit: 3 callbacks suppressed [ 130.755324][ T6910] netlink: zone id is out of range [ 130.769822][ T6910] netlink: zone id is out of range [ 130.770043][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 130.780712][ T6910] netlink: zone id is out of range [ 130.794101][ T5922] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.804790][ T6910] netlink: zone id is out of range [ 130.804816][ T5922] usb 2-1: config 0 has no interface number 0 [ 130.817094][ T6910] netlink: zone id is out of range [ 130.822523][ T6910] netlink: zone id is out of range [ 130.825045][ T5922] usb 2-1: config 0 interface 184 has no altsetting 0 [ 130.836394][ T6910] netlink: zone id is out of range [ 130.842376][ T6910] netlink: zone id is out of range [ 130.884015][ T5922] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.893403][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.916037][ T5922] usb 2-1: Product: syz [ 130.942768][ T5922] usb 2-1: Manufacturer: syz [ 130.954238][ T5922] usb 2-1: SerialNumber: syz [ 130.976055][ T5922] usb 2-1: config 0 descriptor?? [ 130.994180][ T10] usb 4-1: USB disconnect, device number 7 [ 131.125806][ T29] audit: type=1400 audit(1776422097.466:337): avc: denied { setopt } for pid=6920 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.423713][ T5922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 131.448109][ T5922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 131.477515][ T5922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 131.523530][ T5922] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 132.022468][ T6932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.217601][ T6936] binder: 6933:6936 ioctl c0306201 0 returned -14 [ 132.504182][ T29] audit: type=1400 audit(1776422098.846:338): avc: denied { create } for pid=6937 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.524506][ T29] audit: type=1400 audit(1776422098.846:339): avc: denied { setopt } for pid=6937 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.583766][ T29] audit: type=1400 audit(1776422098.846:340): avc: denied { bind } for pid=6937 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.613267][ T29] audit: type=1400 audit(1776422098.846:341): avc: denied { name_bind } for pid=6937 comm="syz.0.245" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 132.660522][ T29] audit: type=1400 audit(1776422098.846:342): avc: denied { node_bind } for pid=6937 comm="syz.0.245" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 132.683239][ T29] audit: type=1400 audit(1776422098.886:343): avc: denied { connect } for pid=6937 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.705725][ T29] audit: type=1400 audit(1776422098.886:344): avc: denied { bind } for pid=6937 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.754534][ T29] audit: type=1400 audit(1776422098.886:345): avc: denied { setopt } for pid=6937 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.825483][ T29] audit: type=1400 audit(1776422098.896:346): avc: denied { write } for pid=6937 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.460072][ T5819] usb 2-1: USB disconnect, device number 13 [ 133.627253][ T10] libceph: connect (1)[c::]:6789 error -101 [ 133.658738][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 133.685390][ T6949] ceph: No mds server is up or the cluster is laggy [ 134.209894][ T5922] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.310027][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.359866][ T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 134.453501][ T5922] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.463802][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.472149][ T5922] usb 4-1: Product: syz [ 134.484047][ T5922] usb 4-1: Manufacturer: syz [ 134.488760][ T5922] usb 4-1: SerialNumber: syz [ 134.683278][ T5922] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 134.783072][ T797] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 134.799860][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 134.806911][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 134.815848][ T10] usb 1-1: config 0 has no interface number 0 [ 134.822013][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 134.831607][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 134.849801][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.868231][ T10] usb 1-1: Product: syz [ 134.873398][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 134.882614][ T10] usb 1-1: Manufacturer: syz [ 134.891908][ T9] usb 5-1: config 0 has no interface number 0 [ 134.898003][ T10] usb 1-1: SerialNumber: syz [ 134.910810][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 134.918202][ T10] usb 1-1: config 0 descriptor?? [ 134.933578][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 134.959866][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.967915][ T9] usb 5-1: Product: syz [ 134.972171][ T9] usb 5-1: Manufacturer: syz [ 134.976959][ T9] usb 5-1: SerialNumber: syz [ 134.987627][ T9] usb 5-1: config 0 descriptor?? [ 135.533265][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 135.549650][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 135.564528][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 135.575676][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 135.857903][ T797] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 135.971787][ T797] ath9k_htc: Failed to initialize the device [ 136.044965][ T797] usb 4-1: ath9k_htc: USB layer deinitialized [ 136.139362][ T10] usb 4-1: USB disconnect, device number 8 [ 136.215251][ T6976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.255'. [ 136.619902][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 136.798639][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 136.811709][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 136.820310][ T10] usb 3-1: Product: syz [ 136.825651][ T10] usb 3-1: Manufacturer: syz [ 136.831218][ T10] usb 3-1: SerialNumber: syz [ 136.870407][ T10] usb 3-1: config 0 descriptor?? [ 137.089924][ T10] usb 1-1: USB disconnect, device number 9 [ 137.169962][ T6987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.201088][ T1745] usb 3-1: USB disconnect, device number 12 [ 137.204438][ T6993] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 137.301441][ T6993] team0: Port device dummy0 added [ 137.436794][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 137.436810][ T29] audit: type=1400 audit(1776422103.776:348): avc: denied { read write } for pid=6981 comm="syz.3.257" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 137.492033][ T6998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.508599][ T29] audit: type=1400 audit(1776422103.806:349): avc: denied { open } for pid=6981 comm="syz.3.257" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.024797][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 138.038503][ T7000] (syz.2.261,7000,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 138.052148][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 138.096536][ T7000] (syz.2.261,7000,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 138.170726][ T9] usb 5-1: USB disconnect, device number 17 [ 138.551575][ T7008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.589876][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 138.789829][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 138.797043][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.892190][ T9] usb 5-1: config 0 has no interfaces? [ 138.901693][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.911882][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.331005][ T9] usb 5-1: Product: syz [ 139.335238][ T9] usb 5-1: Manufacturer: syz [ 139.344847][ T9] usb 5-1: SerialNumber: syz [ 139.355040][ T9] usb 5-1: config 0 descriptor?? [ 139.404620][ T7014] tipc: Started in network mode [ 139.423155][ T7014] tipc: Node identity e25ded8e98d7, cluster identity 4711 [ 139.450133][ T7014] tipc: Enabled bearer , priority 0 [ 139.464767][ T7014] syzkaller0: entered promiscuous mode [ 139.488333][ T7014] syzkaller0: entered allmulticast mode [ 139.512378][ T29] audit: type=1400 audit(1776422105.856:350): avc: denied { ioctl } for pid=7013 comm="syz.0.265" path="socket:[13316]" dev="sockfs" ino=13316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.550054][ T7013] tipc: Resetting bearer [ 139.573393][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.582554][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.591989][ T1745] usb 5-1: USB disconnect, device number 18 [ 139.617009][ T7013] tipc: Disabling bearer [ 139.708838][ T7017] erspan0: entered promiscuous mode [ 139.730158][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 139.739045][ T7017] erspan0: left promiscuous mode [ 139.937917][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 139.944840][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 139.972803][ T7019] ceph: No mds server is up or the cluster is laggy [ 140.030040][ T797] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 140.192992][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33837, setting to 1024 [ 140.230438][ T797] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 140.261554][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.297246][ T797] usb 5-1: config 0 descriptor?? [ 140.530298][ T5819] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 141.324429][ T5819] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.342119][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.351559][ T5819] usb 3-1: Product: syz [ 141.353553][ T7032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.381755][ T5819] usb 3-1: Manufacturer: syz [ 141.386469][ T5819] usb 3-1: SerialNumber: syz [ 141.413190][ T5819] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 141.430020][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.445293][ T981] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.609902][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 141.621583][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 141.645483][ T9] usb 4-1: config 0 has no interface number 0 [ 141.668631][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 141.691460][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 141.708617][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.741164][ T797] usbhid 5-1:0.0: can't add hid device: -71 [ 141.789916][ T9] usb 4-1: Product: syz [ 141.796981][ T9] usb 4-1: Manufacturer: syz [ 141.809225][ T797] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.814616][ T9] usb 4-1: SerialNumber: syz [ 141.836120][ T9] usb 4-1: config 0 descriptor?? [ 142.000878][ T10] usb 3-1: USB disconnect, device number 13 [ 142.139732][ T7038] bond1: option lp_interval: invalid value (0) [ 142.146163][ T7038] bond1: option lp_interval: allowed values 1 - 2147483647 [ 142.157141][ T797] usb 5-1: USB disconnect, device number 19 [ 142.171025][ T7038] bond1 (unregistering): Released all slaves [ 142.495257][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 142.861590][ T981] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 143.494583][ T29] audit: type=1400 audit(1776422109.816:351): avc: denied { read write } for pid=7045 comm="syz.0.274" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 143.522190][ T981] ath9k_htc: Failed to initialize the device [ 143.528259][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 143.542945][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 143.549108][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 143.563155][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 143.584150][ T5922] usb 4-1: USB disconnect, device number 9 [ 143.684067][ T29] audit: type=1400 audit(1776422109.816:352): avc: denied { open } for pid=7045 comm="syz.0.274" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 143.799135][ T29] audit: type=1400 audit(1776422110.086:353): avc: denied { mounton } for pid=7050 comm="syz.2.276" path="/proc/171/task" dev="proc" ino=13079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 143.870437][ T7053] loop6: detected capacity change from 0 to 2640 [ 143.884730][ T7053] buffer_io_error: 11 callbacks suppressed [ 143.884748][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.983641][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.018820][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.049319][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.080177][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.111988][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.148884][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.185341][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.200384][ T7053] ldm_validate_partition_table(): Disk read failed. [ 144.209529][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.217947][ T7053] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.231340][ T7053] Dev loop6: unable to read RDB block 0 [ 144.237400][ T7053] loop6: unable to read partition table [ 144.255162][ T7053] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 144.290127][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 144.301536][ T7063] netlink: 556 bytes leftover after parsing attributes in process `syz.1.275'. [ 144.615111][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 144.754856][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 144.802447][ T10] usb 5-1: config 179 has no interface number 0 [ 144.823222][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 144.847888][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 144.860116][ T7058] comedi comedi2: reset error (fatal) [ 144.880887][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 144.899370][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 144.912295][ T10] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 144.926549][ T10] usb 5-1: config 179 interface 65 has no altsetting 0 [ 144.934484][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 144.949717][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.962914][ T7073] binder: 7068:7073 ioctl c0306201 0 returned -14 [ 145.005224][ T7079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.013902][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 145.038743][ T29] audit: type=1400 audit(1776422111.376:354): avc: denied { read } for pid=5170 comm="acpid" name="js0" dev="devtmpfs" ino=2958 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.069965][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.081737][ T5170] input input8: unable to receive magic message: -110 [ 145.104675][ T29] audit: type=1400 audit(1776422111.376:355): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2958 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.151349][ T5170] input input8: unable to receive magic message: -32 [ 145.174602][ T29] audit: type=1400 audit(1776422111.436:356): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2958 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.245393][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.271241][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.279637][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.314774][ T9] usb 4-1: Product: syz [ 145.321308][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.334937][ T9] usb 4-1: Manufacturer: syz [ 145.341063][ T29] audit: type=1400 audit(1776422111.686:357): avc: denied { module_request } for pid=7076 comm="syz.2.284" kmod="net-pf-10-proto-136-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 145.372554][ T7083] erspan0: entered promiscuous mode [ 145.394156][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 145.413380][ T9] usb 4-1: SerialNumber: syz [ 145.433362][ T7083] erspan0: left promiscuous mode [ 145.447808][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.581308][ T981] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.616476][ T5170] input input8: unable to receive magic message: -32 [ 146.814300][ T981] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 146.838927][ T981] ath9k_htc: Failed to initialize the device [ 146.901580][ T981] usb 4-1: ath9k_htc: USB layer deinitialized [ 147.043881][ T10] usb 4-1: USB disconnect, device number 10 [ 147.228371][ T9] usb 5-1: USB disconnect, device number 20 [ 147.234364][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 147.717432][ T7108] bond1: option lp_interval: invalid value (0) [ 147.733385][ T7108] bond1: option lp_interval: allowed values 1 - 2147483647 [ 147.806165][ T7108] bond1 (unregistering): Released all slaves [ 147.959871][ T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 148.050714][ T981] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 148.914956][ T7119] netlink: 'syz.3.291': attribute type 3 has an invalid length. [ 148.923179][ T29] audit: type=1400 audit(1776422115.206:358): avc: denied { ioctl } for pid=7118 comm="syz.3.291" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 148.957957][ T29] audit: type=1400 audit(1776422115.256:359): avc: denied { read } for pid=7118 comm="syz.3.291" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.990417][ T29] audit: type=1400 audit(1776422115.256:360): avc: denied { open } for pid=7118 comm="syz.3.291" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 149.070167][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 149.091623][ T981] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.128261][ T981] usb 2-1: config 0 has no interface number 0 [ 149.160237][ T981] usb 2-1: config 0 interface 184 has no altsetting 0 [ 149.172905][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 149.190328][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 149.215356][ T981] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.228805][ T9] usb 5-1: Product: syz [ 149.244379][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.248956][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 149.254013][ T9] usb 5-1: Manufacturer: syz [ 149.280096][ T981] usb 2-1: Product: syz [ 149.289829][ T981] usb 2-1: Manufacturer: syz [ 149.294537][ T9] usb 5-1: SerialNumber: syz [ 149.304819][ T981] usb 2-1: SerialNumber: syz [ 149.319003][ T9] usb 5-1: config 0 descriptor?? [ 149.324762][ T981] usb 2-1: config 0 descriptor?? [ 149.493823][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 149.543298][ T7135] nbd: nbd64 already in use [ 149.597208][ T7138] loop6: detected capacity change from 0 to 2640 [ 149.616054][ T7138] buffer_io_error: 11 callbacks suppressed [ 149.616069][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.646939][ T9] usb 5-1: USB disconnect, device number 21 [ 149.713020][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.759535][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.770352][ T981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 149.787242][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.795575][ T981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 149.813680][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.823550][ T981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 149.835200][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.843692][ T981] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 149.852620][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.874097][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.890000][ T5803] udevd[5803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 149.908023][ T7138] ldm_validate_partition_table(): Disk read failed. [ 149.923724][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.939223][ T7138] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.947673][ T7138] Dev loop6: unable to read RDB block 0 [ 149.954433][ T7138] loop6: unable to read partition table [ 149.967647][ T7138] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 150.229875][ T981] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 150.350327][ T797] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.363291][ T7158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.483546][ T981] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 150.500146][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 150.500158][ T981] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 150.524457][ T797] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 150.533242][ T797] usb 4-1: config 0 has no interface number 0 [ 150.545383][ T797] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.574928][ T797] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 150.586744][ T981] usb 3-1: Product: syz [ 150.596800][ T797] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.611452][ T981] usb 3-1: Manufacturer: syz [ 150.620410][ T981] usb 3-1: SerialNumber: syz [ 150.628369][ T797] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.642177][ T7146] comedi comedi2: reset error (fatal) [ 150.655601][ T797] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 150.666038][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.667586][ T981] usb 3-1: config 0 descriptor?? [ 150.701720][ T797] usb 4-1: config 0 descriptor?? [ 150.748485][ T797] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 150.802418][ T7164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.299'. [ 150.902842][ T797] usb 3-1: USB disconnect, device number 14 [ 150.974151][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 150.990543][ T29] audit: type=1400 audit(1776422117.336:361): avc: denied { create } for pid=7152 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 151.004662][ T7153] usb usb8: usbfs: process 7153 (syz.3.297) did not claim interface 0 before use [ 151.025287][ T5922] usb 2-1: USB disconnect, device number 14 [ 151.054725][ T29] audit: type=1400 audit(1776422117.346:362): avc: denied { write } for pid=7152 comm="syz.3.297" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 151.124940][ T29] audit: type=1400 audit(1776422117.446:363): avc: denied { bind } for pid=7169 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.134657][ T7153] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.187543][ T29] audit: type=1400 audit(1776422117.506:364): avc: denied { mount } for pid=7169 comm="syz.1.301" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 151.231684][ T29] audit: type=1400 audit(1776422117.576:365): avc: denied { write } for pid=7165 comm="syz.0.300" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.259031][ T29] audit: type=1400 audit(1776422117.596:366): avc: denied { shutdown } for pid=7165 comm="syz.0.300" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.308546][ T29] audit: type=1400 audit(1776422117.596:367): avc: denied { read } for pid=7165 comm="syz.0.300" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.974770][ T7181] FAULT_INJECTION: forcing a failure. [ 151.974770][ T7181] name failslab, interval 1, probability 0, space 0, times 0 [ 152.048348][ T7181] CPU: 0 UID: 0 PID: 7181 Comm: syz.1.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.048374][ T7181] Tainted: [L]=SOFTLOCKUP [ 152.048381][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.048391][ T7181] Call Trace: [ 152.048397][ T7181] [ 152.048404][ T7181] dump_stack_lvl+0x100/0x190 [ 152.048429][ T7181] should_fail_ex.cold+0x5/0xa [ 152.048451][ T7181] should_failslab+0xc2/0x120 [ 152.048475][ T7181] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 152.048490][ T7181] ? skb_clone+0x190/0x400 [ 152.048504][ T7181] skb_clone+0x190/0x400 [ 152.048517][ T7181] nfnetlink_rcv_batch+0x1c8/0x2880 [ 152.048532][ T7181] ? kfree_skbmem+0x19a/0x210 [ 152.048561][ T7181] ? __lock_acquire+0x4a5/0x2630 [ 152.048585][ T7181] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 152.048617][ T7181] ? avc_has_perm_noaudit+0x145/0x3b0 [ 152.048645][ T7181] ? __asan_memset+0x23/0x50 [ 152.048665][ T7181] ? __nla_validate_parse+0x1e7/0x28b0 [ 152.048693][ T7181] ? __pfx___nla_validate_parse+0x10/0x10 [ 152.048713][ T7181] ? rcu_is_watching+0x12/0xc0 [ 152.048738][ T7181] ? cap_capable+0x10b/0x440 [ 152.048761][ T7181] ? __nla_parse+0x40/0x60 [ 152.048782][ T7181] nfnetlink_rcv+0x3bd/0x440 [ 152.048800][ T7181] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 152.048823][ T7181] netlink_unicast+0x585/0x850 [ 152.048849][ T7181] ? __pfx_netlink_unicast+0x10/0x10 [ 152.048877][ T7181] netlink_sendmsg+0x8b0/0xda0 [ 152.048906][ T7181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.048928][ T7181] ? __might_fault+0x40/0x140 [ 152.048956][ T7181] ____sys_sendmsg+0x9e1/0xb70 [ 152.048977][ T7181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.049007][ T7181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.049038][ T7181] ___sys_sendmsg+0x190/0x1e0 [ 152.049063][ T7181] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.049115][ T7181] __sys_sendmsg+0x170/0x220 [ 152.049134][ T7181] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.049162][ T7181] ? rcu_is_watching+0x12/0xc0 [ 152.049188][ T7181] do_syscall_64+0x10b/0xf80 [ 152.049204][ T7181] ? clear_bhb_loop+0x40/0x90 [ 152.049224][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.049242][ T7181] RIP: 0033:0x7f70b159c819 [ 152.049257][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.049273][ T7181] RSP: 002b:00007f70b23b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.049290][ T7181] RAX: ffffffffffffffda RBX: 00007f70b1815fa0 RCX: 00007f70b159c819 [ 152.049301][ T7181] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 152.049311][ T7181] RBP: 00007f70b23b5090 R08: 0000000000000000 R09: 0000000000000000 [ 152.049321][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.049331][ T7181] R13: 00007f70b1816038 R14: 00007f70b1815fa0 R15: 00007ffe16bc8f58 [ 152.049355][ T7181] [ 152.729890][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 152.911852][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 152.927013][ T9] usb 5-1: config 0 has no interfaces? [ 152.939969][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.959234][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.981640][ T9] usb 5-1: Manufacturer: syz [ 152.999893][ T10] IPVS: starting estimator thread 0... [ 153.024887][ T9] usb 5-1: config 0 descriptor?? [ 153.099962][ T7200] IPVS: using max 48 ests per chain, 115200 per kthread [ 153.148646][ T10] usb 4-1: USB disconnect, device number 11 [ 153.174821][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 153.422935][ T797] libceph: connect (1)[c::]:6789 error -101 [ 153.443386][ T797] libceph: mon0 (1)[c::]:6789 connect error [ 153.475252][ T7204] ceph: No mds server is up or the cluster is laggy [ 153.498554][ T7185] Set syz1 is full, maxelem 6117 reached [ 153.562733][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 153.581474][ T797] usb 5-1: USB disconnect, device number 22 [ 153.709852][ T9] usb 3-1: device descriptor read/64, error -71 [ 153.927456][ T7217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.999869][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.139936][ T9] usb 3-1: device descriptor read/64, error -71 [ 154.250242][ T9] usb usb3-port1: attempt power cycle [ 154.320703][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 154.502973][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 154.528951][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 154.559124][ T10] usb 2-1: Product: syz [ 154.575912][ T10] usb 2-1: Manufacturer: syz [ 154.596947][ T10] usb 2-1: SerialNumber: syz [ 154.601864][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 154.636117][ T10] usb 2-1: config 0 descriptor?? [ 154.654213][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 154.654227][ T29] audit: type=1400 audit(1776422120.996:371): avc: denied { read } for pid=7229 comm="syz.4.316" path="socket:[14583]" dev="sockfs" ino=14583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.692191][ T9] usb 3-1: device descriptor read/8, error -71 [ 154.735660][ T29] audit: type=1400 audit(1776422121.046:372): avc: denied { write } for pid=7229 comm="syz.4.316" path="socket:[14584]" dev="sockfs" ino=14584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.890531][ T10] usb 2-1: USB disconnect, device number 15 [ 154.939854][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 154.960411][ T9] usb 3-1: device descriptor read/8, error -71 [ 155.069986][ T9] usb usb3-port1: unable to enumerate USB device [ 155.265149][ T7234] bond1: option lp_interval: invalid value (0) [ 155.278402][ T7234] bond1: option lp_interval: allowed values 1 - 2147483647 [ 155.303821][ T7234] bond1 (unregistering): Released all slaves [ 156.483375][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 156.618821][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 157.347527][ T5922] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 157.511513][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 157.520028][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 157.556514][ T5922] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 157.599939][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.618786][ T5922] usb 4-1: config 0 descriptor?? [ 157.635191][ T7251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.680841][ T10] usb 2-1: device descriptor read/64, error -71 [ 157.939953][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 158.092022][ T10] usb 2-1: device descriptor read/64, error -71 [ 158.179877][ T797] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.210092][ T10] usb usb2-port1: attempt power cycle [ 158.266662][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.290808][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.327098][ T29] audit: type=1400 audit(1776422124.666:373): avc: denied { ioctl } for pid=7250 comm="syz.3.321" path="socket:[14684]" dev="sockfs" ino=14684 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.329860][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 158.395761][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 158.408572][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 158.436575][ T797] usb 1-1: config 0 has no interfaces? [ 158.444322][ T5922] usb 4-1: USB disconnect, device number 12 [ 158.461251][ T797] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.490152][ T797] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.514034][ T797] usb 1-1: Manufacturer: syz [ 158.540276][ T797] usb 1-1: config 0 descriptor?? [ 158.559854][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 158.600279][ T10] usb 2-1: device descriptor read/8, error -71 [ 158.696657][ T7270] erspan0: entered promiscuous mode [ 158.703054][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 158.712767][ T7270] erspan0: left promiscuous mode [ 158.723166][ T7272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.327'. [ 158.850189][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 158.867029][ T5803] udevd[5803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 158.920475][ T10] usb 2-1: device descriptor read/8, error -71 [ 159.061716][ T10] usb usb2-port1: unable to enumerate USB device [ 159.084132][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.329'. [ 160.027573][ T7266] Set syz1 is full, maxelem 6117 reached [ 160.210232][ T5922] usb 1-1: USB disconnect, device number 10 [ 160.561773][ T29] audit: type=1400 audit(1776422126.876:374): avc: denied { setopt } for pid=7291 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.696437][ T5803] udevd[5803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 160.738610][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 160.899888][ T29] audit: type=1400 audit(1776422127.236:375): avc: denied { write } for pid=7300 comm="syz.1.333" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 161.019983][ T5922] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 161.091444][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.335'. [ 161.199884][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 161.261739][ T5922] usb 5-1: config 0 has no interfaces? [ 161.279390][ T5922] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.309151][ T5922] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.341034][ T5922] usb 5-1: Manufacturer: syz [ 161.440608][ T5922] usb 5-1: config 0 descriptor?? [ 161.462882][ T7323] pim6reg: entered allmulticast mode [ 161.476373][ T5803] udevd[5803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.775768][ T7297] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.805052][ T7312] input: syz1 as /devices/virtual/input/input9 [ 161.951532][ T797] usb 5-1: USB disconnect, device number 23 [ 162.282142][ T7338] bond1: option lp_interval: invalid value (0) [ 162.308231][ T7338] bond1: option lp_interval: allowed values 1 - 2147483647 [ 163.446137][ T7335] comedi comedi2: reset error (fatal) [ 163.490407][ T7338] bond1 (unregistering): Released all slaves [ 164.013072][ T7362] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 164.046154][ T29] audit: type=1400 audit(1776422130.346:376): avc: denied { mounton } for pid=7354 comm="syz.0.344" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 165.063641][ T7345] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 167.889868][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 168.071347][ T10] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 168.090782][ T10] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.140324][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 168.149447][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.226307][ T29] audit: type=1400 audit(1776422134.546:377): avc: denied { bind } for pid=7401 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.005660][ T7406] binder: 7389:7406 ioctl c0306201 0 returned -14 [ 169.029802][ T7397] comedi comedi2: reset error (fatal) [ 169.244516][ T29] audit: type=1400 audit(1776422135.586:378): avc: denied { map } for pid=7409 comm="syz.1.358" path="socket:[15539]" dev="sockfs" ino=15539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 169.281734][ T10] usb 3-1: string descriptor 0 read error: -71 [ 169.292919][ T29] audit: type=1400 audit(1776422135.586:379): avc: denied { accept } for pid=7409 comm="syz.1.358" path="socket:[15539]" dev="sockfs" ino=15539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 169.324672][ T10] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 169.395999][ T10] usb 3-1: USB disconnect, device number 19 [ 169.516263][ T29] audit: type=1400 audit(1776422135.806:380): avc: denied { ioctl } for pid=7417 comm="syz.3.353" path="socket:[14964]" dev="sockfs" ino=14964 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.680690][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 169.734267][ T7428] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 1, id = 0 [ 169.814022][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 169.885615][ T29] audit: type=1400 audit(1776422136.226:381): avc: denied { mount } for pid=7427 comm="syz.1.363" name="/" dev="ramfs" ino=15015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 170.059158][ T7426] : entered promiscuous mode [ 170.156748][ T7437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.364'. [ 170.896537][ T10] libceph: connect (1)[c::]:6789 error -101 [ 170.908530][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 170.937824][ T7439] ceph: No mds server is up or the cluster is laggy [ 170.986429][ T7451] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.002129][ T29] audit: type=1400 audit(1776422137.326:382): avc: denied { mounton } for pid=7450 comm="syz.4.367" path="/63/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 171.049547][ T7451] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.074143][ T29] audit: type=1400 audit(1776422137.396:383): avc: denied { mount } for pid=7450 comm="syz.4.367" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 172.443673][ T7454] hpfs: Bad magic ... probably not HPFS [ 172.994460][ T5819] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 173.022470][ T7466] erspan0: entered promiscuous mode [ 173.028097][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 173.037608][ T7466] erspan0: left promiscuous mode [ 173.119874][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 173.129852][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 173.160851][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 173.167825][ T5819] usb 5-1: config 162 has an invalid interface number: 84 but max is 2 [ 173.176739][ T5819] usb 5-1: config 162 has an invalid interface number: 3 but max is 2 [ 173.185271][ T5819] usb 5-1: config 162 has no interface number 0 [ 173.192481][ T5819] usb 5-1: config 162 has no interface number 1 [ 173.198854][ T5819] usb 5-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 173.213043][ T5819] usb 5-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 173.224250][ T5819] usb 5-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 173.236382][ T5819] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 173.248214][ T5819] usb 5-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 173.259124][ T5819] usb 5-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 173.275883][ T5819] usb 5-1: config 162 interface 84 has no altsetting 0 [ 173.283220][ T5819] usb 5-1: config 162 interface 2 has no altsetting 0 [ 173.290578][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 173.297600][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.308758][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 173.317215][ T5819] usb 5-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 173.326673][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.335122][ T9] usb 3-1: config 0 has no interface number 0 [ 173.341723][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.350044][ T10] usb 2-1: Product: syz [ 173.354481][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 173.361637][ T10] usb 2-1: Manufacturer: syz [ 173.366473][ T5819] usb 5-1: Product: syz [ 173.371941][ T10] usb 2-1: SerialNumber: syz [ 173.376779][ T5819] usb 5-1: Manufacturer: syz [ 173.382880][ T5819] usb 5-1: SerialNumber: syz [ 173.387884][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 173.401775][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.412923][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.427055][ T9] usb 3-1: Product: syz [ 173.433498][ T5883] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.446709][ T9] usb 3-1: Manufacturer: syz [ 173.454793][ T9] usb 3-1: SerialNumber: syz [ 173.473438][ T9] usb 3-1: config 0 descriptor?? [ 173.658092][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 173.665088][ T5819] usb 5-1: USB disconnect, device number 24 [ 173.826272][ T7469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.375'. [ 173.838161][ T7469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.375'. [ 173.847357][ T7469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.375'. [ 173.856320][ T7469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.375'. [ 173.865388][ T7469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.375'. [ 173.874285][ T7469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.375'. [ 173.892354][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 173.912308][ T5922] usb 2-1: USB disconnect, device number 20 [ 173.925420][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 173.948635][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 173.972742][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 174.160988][ T29] audit: type=1400 audit(1776422140.506:384): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.187846][ T29] audit: type=1400 audit(1776422140.526:385): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.256748][ T7478] FAULT_INJECTION: forcing a failure. [ 174.256748][ T7478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.276691][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: syz.3.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.276719][ T7478] Tainted: [L]=SOFTLOCKUP [ 174.276725][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.276735][ T7478] Call Trace: [ 174.276741][ T7478] [ 174.276746][ T7478] dump_stack_lvl+0x100/0x190 [ 174.276770][ T7478] should_fail_ex.cold+0x5/0xa [ 174.276792][ T7478] _copy_to_user+0x32/0xd0 [ 174.276820][ T7478] simple_read_from_buffer+0xcb/0x170 [ 174.276851][ T7478] proc_fail_nth_read+0x1af/0x230 [ 174.276875][ T7478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.276901][ T7478] ? rw_verify_area+0xce/0x6d0 [ 174.276923][ T7478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.276947][ T7478] vfs_read+0x1e4/0xb30 [ 174.276974][ T7478] ? __pfx_vfs_read+0x10/0x10 [ 174.276997][ T7478] ? __fget_files+0x215/0x3d0 [ 174.277019][ T7478] ? __fget_files+0x21f/0x3d0 [ 174.277048][ T7478] ksys_read+0x12a/0x250 [ 174.277070][ T7478] ? __pfx_ksys_read+0x10/0x10 [ 174.277096][ T7478] ? rcu_is_watching+0x12/0xc0 [ 174.277124][ T7478] do_syscall_64+0x10b/0xf80 [ 174.277140][ T7478] ? clear_bhb_loop+0x40/0x90 [ 174.277162][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.277179][ T7478] RIP: 0033:0x7fef9115d04e [ 174.277192][ T7478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.277208][ T7478] RSP: 002b:00007fef920ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.277224][ T7478] RAX: ffffffffffffffda RBX: 00007fef920ec6c0 RCX: 00007fef9115d04e [ 174.277234][ T7478] RDX: 000000000000000f RSI: 00007fef920ec0a0 RDI: 0000000000000006 [ 174.277244][ T7478] RBP: 00007fef920ec090 R08: 0000000000000000 R09: 0000000000000000 [ 174.277253][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.277263][ T7478] R13: 00007fef91416038 R14: 00007fef91415fa0 R15: 00007ffe6400d8d8 [ 174.277285][ T7478] [ 174.279585][ T50] block nbd0: Receive control failed (result -32) [ 174.489915][ T5883] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 174.497081][ T5883] ath9k_htc: Failed to initialize the device [ 174.511272][ T5922] usb 2-1: ath9k_htc: USB layer deinitialized [ 174.657271][ T5819] libceph: connect (1)[c::]:6789 error -101 [ 174.663462][ T5819] libceph: mon0 (1)[c::]:6789 connect error [ 174.704703][ T7487] ceph: No mds server is up or the cluster is laggy [ 174.759820][ T797] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 174.987494][ T797] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 175.031124][ T797] usb 5-1: config 0 has no interface number 0 [ 175.060716][ T797] usb 5-1: config 0 interface 41 has no altsetting 0 [ 175.110490][ T797] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 175.153476][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.180862][ T797] usb 5-1: Product: syz [ 175.185274][ T797] usb 5-1: Manufacturer: syz [ 175.190064][ T797] usb 5-1: SerialNumber: syz [ 175.248748][ T797] usb 5-1: config 0 descriptor?? [ 175.255027][ T7505] __nla_validate_parse: 141 callbacks suppressed [ 175.255042][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 175.407940][ T7507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.496658][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'. [ 175.773400][ T5801] udevd[5801]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 175.796043][ T29] audit: type=1400 audit(1776422142.136:386): avc: denied { write } for pid=7517 comm="syz.1.390" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 175.855912][ T5922] usb 3-1: USB disconnect, device number 20 [ 175.964622][ T29] audit: type=1400 audit(1776422142.306:387): avc: denied { connect } for pid=7513 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.985795][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 176.203506][ T29] audit: type=1400 audit(1776422142.546:388): avc: denied { connect } for pid=7526 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.244165][ T7533] bond1 (unregistering): Released all slaves [ 176.323247][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 176.780192][ T5862] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 176.823641][ T29] audit: type=1400 audit(1776422143.166:389): avc: denied { ioctl } for pid=7540 comm="syz.0.394" path="socket:[15886]" dev="sockfs" ino=15886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.905882][ T29] audit: type=1400 audit(1776422143.216:390): avc: denied { write } for pid=7540 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.956366][ T5862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.978978][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.005786][ T5862] usb 2-1: Product: syz [ 177.018583][ T5862] usb 2-1: Manufacturer: syz [ 177.032525][ T5862] usb 2-1: SerialNumber: syz [ 177.060860][ T5862] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 177.079680][ T5922] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 177.478017][ T29] audit: type=1400 audit(1776422143.816:391): avc: denied { setopt } for pid=7549 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.532019][ T7550] support for the xor transformation has been removed. [ 177.586807][ T29] audit: type=1400 audit(1776422143.916:392): avc: denied { ioctl } for pid=7549 comm="syz.2.397" path="socket:[16407]" dev="sockfs" ino=16407 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.785521][ T5883] usb 2-1: USB disconnect, device number 21 [ 177.910110][ T5819] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 178.142496][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.165451][ T5819] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 178.169942][ T5922] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 178.177856][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.193181][ T5922] ath9k_htc: Failed to initialize the device [ 178.196885][ T5819] usb 3-1: Product: syz [ 178.206950][ T5883] usb 2-1: ath9k_htc: USB layer deinitialized [ 178.222342][ T5819] usb 3-1: Manufacturer: syz [ 178.240450][ T5819] usb 3-1: SerialNumber: syz [ 178.257702][ T5819] usb 3-1: config 0 descriptor?? [ 178.429866][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 178.493179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.589780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.626895][ T29] audit: type=1400 audit(1776422144.966:393): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 178.656086][ T797] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 178.674929][ T797] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 178.676605][ T5819] f81534a_ctrl 3-1:0.0: probe with driver f81534a_ctrl failed with error -71 [ 178.690739][ T797] usb 5-1: USB disconnect, device number 25 [ 178.711495][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 178.740978][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 178.756381][ T5819] usb 3-1: USB disconnect, device number 21 [ 178.764239][ T9] usb 1-1: Product: syz [ 178.786489][ T9] usb 1-1: Manufacturer: syz [ 178.802794][ T9] usb 1-1: SerialNumber: syz [ 178.824307][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 178.851786][ T9] usb 1-1: config 0 descriptor?? [ 179.068203][ T5819] usb 1-1: USB disconnect, device number 11 [ 179.110319][ T797] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 179.240370][ T1745] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 179.279871][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 179.287099][ T797] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 179.299718][ T797] usb 5-1: config 0 has no interface number 0 [ 179.308179][ T797] usb 5-1: config 0 interface 184 has no altsetting 0 [ 179.319723][ T797] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 179.329339][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.337675][ T797] usb 5-1: Product: syz [ 179.342219][ T797] usb 5-1: Manufacturer: syz [ 179.348906][ T797] usb 5-1: SerialNumber: syz [ 179.357537][ T797] usb 5-1: config 0 descriptor?? [ 179.392863][ T1745] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 179.405822][ T1745] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 179.415478][ T1745] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 179.425981][ T1745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.486090][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 179.666101][ T7583] netlink: 'syz.0.408': attribute type 29 has an invalid length. [ 179.679346][ T7583] netlink: 'syz.0.408': attribute type 29 has an invalid length. [ 179.775382][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 179.803813][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 179.828695][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 179.863662][ T797] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 179.870447][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 179.870461][ T29] audit: type=1400 audit(1776422146.206:398): avc: denied { map } for pid=7578 comm="syz.2.407" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 179.997087][ T29] audit: type=1400 audit(1776422146.246:399): avc: denied { execute } for pid=7578 comm="syz.2.407" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 181.429518][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.412'. [ 181.479591][ T7605] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 181.493769][ T7605] syzkaller1: linktype set to 0 [ 181.834126][ T7615] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 181.849704][ T7615] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 181.866988][ T7615] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 181.892151][ T7615] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.940001][ T7615] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 182.059519][ T29] audit: type=1400 audit(1776422148.146:400): avc: denied { create } for pid=7607 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 182.789218][ T29] audit: type=1400 audit(1776422148.156:401): avc: denied { write } for pid=7607 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 182.832127][ T797] usb 5-1: USB disconnect, device number 26 [ 182.843853][ T5922] usb 2-1: USB disconnect, device number 22 [ 182.852280][ T29] audit: type=1400 audit(1776422149.156:402): avc: denied { read } for pid=7612 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.876005][ T29] audit: type=1400 audit(1776422149.156:403): avc: denied { create } for pid=7612 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.902447][ T29] audit: type=1400 audit(1776422149.156:404): avc: denied { listen } for pid=7612 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.341344][ T5922] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 183.543444][ T5922] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 183.562090][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 183.586681][ T5922] usb 2-1: Product: syz [ 183.598632][ T5922] usb 2-1: Manufacturer: syz [ 183.619560][ T5922] usb 2-1: SerialNumber: syz [ 183.630392][ T5922] usb 2-1: config 0 descriptor?? [ 183.991735][ T5819] usb 2-1: USB disconnect, device number 23 [ 184.093194][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 184.292733][ T29] audit: type=1400 audit(1776422150.626:405): avc: denied { ioctl } for pid=7650 comm="syz.2.426" path="socket:[16131]" dev="sockfs" ino=16131 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.357508][ T7653] loop6: detected capacity change from 0 to 2640 [ 184.368227][ T7653] buffer_io_error: 11 callbacks suppressed [ 184.368243][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.384474][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.394006][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.410102][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.432382][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.456550][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.480006][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.498215][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.515631][ T7653] ldm_validate_partition_table(): Disk read failed. [ 184.528168][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.540344][ T7653] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.552952][ T7653] Dev loop6: unable to read RDB block 0 [ 184.563199][ T7653] loop6: unable to read partition table [ 184.578039][ T7653] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 184.600250][ T5819] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.670187][ T5185] ldm_validate_partition_table(): Disk read failed. [ 184.678656][ T5185] Dev loop6: unable to read RDB block 0 [ 184.686429][ T5185] loop6: unable to read partition table [ 184.708087][ T29] audit: type=1400 audit(1776422151.046:406): avc: denied { relabelfrom } for pid=7670 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 184.752951][ T29] audit: type=1400 audit(1776422151.076:407): avc: denied { relabelto } for pid=7670 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 184.772675][ T5922] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 184.792204][ T5819] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 184.828897][ T5819] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 184.866305][ T5819] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 184.988195][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.000471][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 185.007831][ T5922] usb 3-1: config 0 has no interfaces? [ 185.015647][ T5922] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 185.029930][ T5922] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 185.056042][ T5922] usb 3-1: Manufacturer: syz [ 185.438161][ T29] audit: type=1400 audit(1776422151.566:408): avc: denied { shutdown } for pid=7672 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.463135][ T5922] usb 3-1: config 0 descriptor?? [ 185.742138][ T7668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.822279][ T7667] Set syz1 is full, maxelem 6117 reached [ 185.852191][ T7667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7667 comm=syz.2.430 [ 186.008921][ T7689] binder: 7684:7689 ioctl c0306201 0 returned -14 [ 186.812891][ T7693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.149814][ T5819] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 187.289810][ T50] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 187.300405][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 187.316195][ T5819] usb 2-1: config 0 has no interfaces? [ 187.322083][ T9] usb 1-1: USB disconnect, device number 12 [ 187.328975][ T5819] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.339364][ T5819] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.358513][ T5819] usb 2-1: Manufacturer: syz [ 187.384506][ T5819] usb 2-1: config 0 descriptor?? [ 187.465483][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 187.486558][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 187.499528][ T5922] usb 3-1: USB disconnect, device number 22 [ 187.533572][ T7698] ceph: No mds server is up or the cluster is laggy [ 187.635613][ T1745] usb 2-1: USB disconnect, device number 24 [ 187.739439][ T797] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 187.753249][ T29] audit: type=1400 audit(1776422154.076:409): avc: denied { audit_control } for pid=7706 comm="syz.2.441" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 188.042190][ T797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 188.093394][ T797] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 188.112664][ T797] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 188.141359][ T797] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.155176][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.167513][ T797] usb 5-1: Product:   [ 188.171174][ T7705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.173102][ T797] usb 5-1: Manufacturer: а [ 188.187449][ T797] usb 5-1: SerialNumber: Ḗ섏蛿ᆆ뿐旙Ƞឮ尓蓮ថ⢔䴃⑄眮榃兽腨諝鸋ᦲ뒴黵鎸䫴깴淧虭疈敛擴㙓鿉℈ꍬ闂琨喙䩭ᛝ롛獝誅任룙㬦ᣢ碣䤼瀤㴘㤋ᚠ䙴藶瀊⋽雤⢔婳찵頮퐝垐飮薪ㆰ뀁턽⯝餙傖隤β짭씂䙿鴲㵝頹퍢ඌᢗᱍ▁푔練ዄӪ悋곔肻뽹⑼彐둅쪢ꪱံᅑ [ 188.467527][ T797] cdc_ncm 5-1:1.0: bind() failure [ 188.534645][ T797] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 188.541648][ T797] cdc_ncm 5-1:1.1: bind() failure [ 188.555036][ T797] usb 5-1: USB disconnect, device number 27 [ 188.626551][ T5819] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 188.785085][ T7726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=7726 comm=syz.0.444 [ 189.040241][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.049007][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.563728][ T7731] bridge0: port 3(veth0_to_bridge) entered blocking state [ 189.563813][ T7726] syz.0.444 (7726): drop_caches: 2 [ 189.580170][ T7731] bridge0: port 3(veth0_to_bridge) entered disabled state [ 189.596392][ T7731] veth0_to_bridge: entered allmulticast mode [ 189.648003][ T7731] veth0_to_bridge: entered promiscuous mode [ 189.660082][ T7731] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.721926][ T7731] bridge0: port 3(veth0_to_bridge) entered blocking state [ 189.730594][ T7731] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 189.813740][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 189.927596][ T5819] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 189.948040][ T5819] usb 2-1: config 0 has no interface number 0 [ 189.955081][ T5819] usb 2-1: config 0 interface 184 has no altsetting 0 [ 189.974253][ T5819] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 189.989132][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.004774][ T5819] usb 2-1: Product: syz [ 190.012068][ T5819] usb 2-1: Manufacturer: syz [ 190.016737][ T5819] usb 2-1: SerialNumber: syz [ 190.043434][ T5819] usb 2-1: config 0 descriptor?? [ 190.046980][ T29] audit: type=1400 audit(1776422156.386:410): avc: denied { create } for pid=7737 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 190.070386][ T5922] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 190.441732][ T5922] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 190.460311][ T5922] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 190.479517][ T5922] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 190.494395][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.550105][ T29] audit: type=1400 audit(1776422156.886:411): avc: denied { read } for pid=7738 comm="syz.3.451" dev="sockfs" ino=17136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.588844][ T7741] 9pnet_fd: Insufficient options for proto=fd [ 190.729990][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 190.870540][ T5819] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 190.890689][ T5819] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 190.910801][ T9] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 190.924477][ T5819] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 190.937086][ T9] usb 5-1: config 0 has no interface number 0 [ 190.947065][ T9] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.958905][ T5819] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 190.969084][ T9] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.980740][ T5819] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 190.991283][ T5819] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 191.000763][ T9] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.013733][ T5819] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 191.024649][ T9] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 191.047337][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.064935][ T9] usb 5-1: config 0 descriptor?? [ 191.073374][ T7742] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 191.092041][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input11 [ 191.331787][ T29] audit: type=1400 audit(1776422157.676:412): avc: denied { write } for pid=7737 comm="syz.4.450" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 191.358971][ T29] audit: type=1400 audit(1776422157.696:413): avc: denied { write } for pid=7737 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 192.673430][ T9] usb 2-1: USB disconnect, device number 25 [ 192.859070][ T797] usb 1-1: USB disconnect, device number 13 [ 193.373850][ T7761] loop2: detected capacity change from 0 to 1 [ 193.398161][ T5819] usb 5-1: USB disconnect, device number 28 [ 193.454266][ T7761] Dev loop2: unable to read RDB block 1 [ 193.479249][ T7761] loop2: unable to read partition table [ 193.487256][ T7761] loop2: partition table beyond EOD, truncated [ 193.499704][ T7761] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 193.521689][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.454'. [ 193.657699][ T5185] Dev loop2: unable to read RDB block 1 [ 193.666079][ T5185] loop2: unable to read partition table [ 193.674566][ T5185] loop2: partition table beyond EOD, truncated [ 193.704727][ T797] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 193.809816][ T5819] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 193.855919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 193.868195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.880427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.892930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 193.905195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.917461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.929830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 193.942047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.954306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.966492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 193.980497][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 193.989533][ T5819] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 194.001216][ T5819] usb 5-1: config 0 has no interface number 0 [ 194.008490][ T5819] usb 5-1: config 0 interface 184 has no altsetting 0 [ 194.018942][ T5819] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 194.028994][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.037277][ T5819] usb 5-1: Product: syz [ 194.042071][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 194.049820][ T5819] usb 5-1: Manufacturer: syz [ 194.054619][ T5819] usb 5-1: SerialNumber: syz [ 194.070511][ T5819] usb 5-1: config 0 descriptor?? [ 194.175520][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 194.190070][ T9] usb 2-1: device descriptor read/64, error -71 [ 194.274318][ T797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 194.336811][ T5822] Bluetooth: hci5: command 0xfc11 tx timeout [ 194.345158][ T50] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 194.429895][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 194.485808][ T5819] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 194.497031][ T5819] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 194.508075][ T5819] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 194.521193][ T5819] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 194.569841][ T9] usb 2-1: device descriptor read/64, error -71 [ 194.646933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 194.664191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 194.681193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 194.707082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 194.724150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 194.741402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 194.758934][ T9] usb usb2-port1: attempt power cycle [ 194.845282][ T797] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 194.930971][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.109837][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 195.130485][ T9] usb 2-1: device descriptor read/8, error -71 [ 195.162195][ T797] usb 1-1: Product: syz [ 195.166426][ T797] usb 1-1: Manufacturer: syz [ 195.182080][ T797] usb 1-1: SerialNumber: syz [ 195.370116][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 195.390485][ T9] usb 2-1: device descriptor read/8, error -71 [ 195.491577][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.500970][ T9] usb usb2-port1: unable to enumerate USB device [ 195.508064][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.655095][ T797] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.668327][ T797] usb 1-1: MIDIStreaming interface descriptor not found [ 196.178886][ T7784] FAULT_INJECTION: forcing a failure. [ 196.178886][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 196.198294][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.0.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.198323][ T7784] Tainted: [L]=SOFTLOCKUP [ 196.198329][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.198339][ T7784] Call Trace: [ 196.198345][ T7784] [ 196.198352][ T7784] dump_stack_lvl+0x100/0x190 [ 196.198379][ T7784] should_fail_ex.cold+0x5/0xa [ 196.198403][ T7784] should_failslab+0xc2/0x120 [ 196.198430][ T7784] __kmalloc_cache_noprof+0x7a/0x6f0 [ 196.198450][ T7784] ? fscontext_alloc_log+0x4a/0x1b0 [ 196.198474][ T7784] ? orangefs_init_fs_context+0xfe/0x150 [ 196.198498][ T7784] fscontext_alloc_log+0x4a/0x1b0 [ 196.198523][ T7784] __x64_sys_fsopen+0x159/0x220 [ 196.198548][ T7784] do_syscall_64+0x10b/0xf80 [ 196.198564][ T7784] ? clear_bhb_loop+0x40/0x90 [ 196.198586][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.198603][ T7784] RIP: 0033:0x7f7f12f9c819 [ 196.198627][ T7784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.198643][ T7784] RSP: 002b:00007f7f13ef2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 196.198660][ T7784] RAX: ffffffffffffffda RBX: 00007f7f13215fa0 RCX: 00007f7f12f9c819 [ 196.198671][ T7784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 196.198681][ T7784] RBP: 00007f7f13ef2090 R08: 0000000000000000 R09: 0000000000000000 [ 196.198691][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.198701][ T7784] R13: 00007f7f13216038 R14: 00007f7f13215fa0 R15: 00007fffda7bdd68 [ 196.198725][ T7784] [ 196.492398][ T9] usb 5-1: USB disconnect, device number 29 [ 197.005690][ T797] usb 1-1: USB disconnect, device number 14 [ 197.394821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 198.859917][ C1] net_ratelimit: 23557 callbacks suppressed [ 198.859931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.878111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 198.890318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.902497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.914677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 198.926957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.939176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.951472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 198.963691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.975933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.579759][ C0] sched: DL replenish lagged too much [ 203.618099][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.869767][ C0] net_ratelimit: 34804 callbacks suppressed [ 203.869792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.869863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.875986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.887851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 203.899858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.911711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.923689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.935579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.947440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.959303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 208.879855][ C0] net_ratelimit: 27632 callbacks suppressed [ 208.879874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.879942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 208.886026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.897883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.909893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.922581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.933682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.945575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 208.957611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.969485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.889779][ C1] net_ratelimit: 27734 callbacks suppressed [ 213.889799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.889831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.895928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 213.907976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.919820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.931812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.944322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.955547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.967399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 213.979397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.899817][ C0] net_ratelimit: 26800 callbacks suppressed [ 218.899838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.900168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.906046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.917995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 218.929913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.941799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.953776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.966473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.977547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.989578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 223.909863][ C1] net_ratelimit: 27224 callbacks suppressed [ 223.909884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 223.909971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.916086][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.928084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.940549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.951816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.964008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 223.976047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.987823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.999880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.919869][ C0] net_ratelimit: 28108 callbacks suppressed [ 228.919889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.920453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.926109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.938009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 228.950101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.962013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.973943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.986441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.997692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.009575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 233.929805][ C1] net_ratelimit: 27938 callbacks suppressed [ 233.929825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 233.929903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.935921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.948045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.960493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.971803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.983763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 233.995716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.007577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.019580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.939953][ C0] net_ratelimit: 27937 callbacks suppressed [ 238.939974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.940356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.946144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.958001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 238.970002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.981845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.993842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.006260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.017578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.029442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 243.949938][ C0] net_ratelimit: 27434 callbacks suppressed [ 243.949956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.950285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.956110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.968007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 243.979980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.991793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.003805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.016330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.027576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.039418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 248.959944][ C0] net_ratelimit: 27565 callbacks suppressed [ 248.959964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.960473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.966089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.977995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 248.989949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.001894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.013860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.026411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.037650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.049607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 253.969777][ C1] net_ratelimit: 28462 callbacks suppressed [ 253.969797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 253.969915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.975916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.987944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.000449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.011698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.023599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 254.035520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.047368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.059387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.979793][ C0] net_ratelimit: 29372 callbacks suppressed [ 258.979813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.980142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.985948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.997871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 259.009842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.021674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.033661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.046156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.057409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.069284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 263.989968][ C0] net_ratelimit: 29463 callbacks suppressed [ 263.989989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.990438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.996154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.008048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 264.020255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.031875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.043923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.056311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.067607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.079497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 268.999746][ C0] net_ratelimit: 29266 callbacks suppressed [ 268.999765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.999764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.000002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 269.005937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.017768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.029875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.042444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.053708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.065578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 269.077446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.009897][ C0] net_ratelimit: 29157 callbacks suppressed [ 274.009917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.009967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.016055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.028557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.039865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.051742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 274.063882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.075726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.087717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.100203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.019973][ C0] net_ratelimit: 29384 callbacks suppressed [ 279.019993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.020494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.026130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.038023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 279.049968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.061855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.073815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.086278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.097686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.109539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 284.029967][ C0] net_ratelimit: 29424 callbacks suppressed [ 284.029987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.030412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.036168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.048170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 284.060276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.072106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.084088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.096579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.107828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.119718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 289.039764][ C1] net_ratelimit: 29458 callbacks suppressed [ 289.039782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.039831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.046587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.057830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.069733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 289.081676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.093530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.105514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.117973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.129294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.049956][ C0] net_ratelimit: 29188 callbacks suppressed [ 294.049980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.050045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.056185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.068038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 294.080021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.091832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.103819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.116276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.127567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.139470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 299.059740][ C1] net_ratelimit: 29363 callbacks suppressed [ 299.059761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.059809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.066473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.077821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.089723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 299.101655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.113500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.125536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.137990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.149245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.069757][ C1] net_ratelimit: 29515 callbacks suppressed [ 304.069776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.069917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.076495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.087791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.099790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 304.111733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.123584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.135549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.147990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.159297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.079906][ C0] net_ratelimit: 29485 callbacks suppressed [ 309.079925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.079984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.086058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.097961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 309.109936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.121858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.133845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.146326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.157584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.169461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 314.089770][ C1] net_ratelimit: 29308 callbacks suppressed [ 314.089789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.089825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.096581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.107872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.119710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 314.131685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.143486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.155474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.167939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.179221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.099789][ C0] net_ratelimit: 29830 callbacks suppressed [ 319.099811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.100341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 319.105944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.117835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.129813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.141670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 319.153613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.165505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.177455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.189975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 324.109803][ C0] net_ratelimit: 30884 callbacks suppressed [ 324.109824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.110429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 324.115961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.127861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.139897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.151743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 324.163702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.175530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.187490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.199987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 329.119750][ C1] net_ratelimit: 31559 callbacks suppressed [ 329.119770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.119870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.126483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 329.137798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.149706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.161705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.173504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.185480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.197385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.209218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.719699][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 331.726662][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5811/1:b..l P797/1:b..l [ 331.736023][ C0] rcu: (detected by 0, t=10503 jiffies, g=26929, q=1132 ncpus=2) [ 331.743820][ C0] task:kworker/1:2 state:R running task stack:21048 pid:797 tgid:797 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 331.758273][ C0] Workqueue: usb_hub_wq hub_event [ 331.763309][ C0] Call Trace: [ 331.766584][ C0] [ 331.769512][ C0] __schedule+0x10e9/0x6820 [ 331.774045][ C0] ? __pfx___schedule+0x10/0x10 [ 331.778894][ C0] ? mark_held_locks+0x40/0x70 [ 331.783658][ C0] preempt_schedule_irq+0x50/0x90 [ 331.788692][ C0] irqentry_exit+0x1fe/0x790 [ 331.793264][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.799248][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 331.804449][ C0] Code: 05 7b bb 2d 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 46 cb f6 0e 0f 82 a4 02 00 00 8b 35 ee fe f6 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d bb 2d 12 0f 85 ed 02 00 00 48 83 c4 [ 331.824049][ C0] RSP: 0018:ffffc90004797438 EFLAGS: 00000206 [ 331.830115][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000006 [ 331.838089][ C0] RDX: 0000000000000000 RSI: ffffffff8df28a0d RDI: ffffffff8c1be760 [ 331.846060][ C0] RBP: ffffffff8e7e6ee0 R08: 0000000079bfd839 R09: 0000000000000007 [ 331.854126][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 331.862101][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.870097][ C0] ? unwind_next_frame+0x3be/0x2090 [ 331.875316][ C0] ? unwind_next_frame+0x3be/0x2090 [ 331.880526][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 331.886692][ C0] unwind_next_frame+0xd1/0x2090 [ 331.891639][ C0] ? unwind_next_frame+0xbd/0x2090 [ 331.896757][ C0] ? worker_thread+0x5ef/0xe50 [ 331.901520][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 331.907680][ C0] arch_stack_walk+0x94/0xf0 [ 331.912279][ C0] ? worker_thread+0x5ef/0xe50 [ 331.917044][ C0] stack_trace_save+0x8e/0xc0 [ 331.921732][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 331.927105][ C0] ? __lock_acquire+0x4a5/0x2630 [ 331.932042][ C0] ? __lock_acquire+0x4a5/0x2630 [ 331.936982][ C0] save_stack+0x162/0x1e0 [ 331.941315][ C0] ? __pfx_save_stack+0x10/0x10 [ 331.946172][ C0] ? __free_frozen_pages+0x747/0x1040 [ 331.951540][ C0] ? qlist_free_all+0x47/0xf0 [ 331.956212][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 331.961846][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 331.966700][ C0] ? usb_control_msg+0xbc/0x4b0 [ 331.971551][ C0] ? hub_ext_port_status+0x152/0x600 [ 331.976832][ C0] ? hub_event+0x6d2/0x4af0 [ 331.981340][ C0] ? process_one_work+0xa0e/0x1980 [ 331.986444][ C0] ? worker_thread+0x5ef/0xe50 [ 331.991186][ C0] ? page_ext_put+0x3e/0xd0 [ 331.995667][ C0] __reset_page_owner+0x84/0x190 [ 332.000588][ C0] __free_frozen_pages+0x747/0x1040 [ 332.005783][ C0] ? __free_slab+0xd0/0x220 [ 332.010263][ C0] qlist_free_all+0x47/0xf0 [ 332.014747][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 332.020188][ C0] __kasan_kmalloc+0x8a/0xb0 [ 332.024749][ C0] usb_control_msg+0xbc/0x4b0 [ 332.029441][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 332.034708][ C0] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 332.040401][ C0] hub_ext_port_status+0x152/0x600 [ 332.045490][ C0] hub_event+0x6d2/0x4af0 [ 332.049810][ C0] ? __lock_acquire+0x4a5/0x2630 [ 332.054794][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 332.060003][ C0] ? __pfx_hub_event+0x10/0x10 [ 332.064758][ C0] ? assoc_array_insert+0x15c0/0x32c0 [ 332.070111][ C0] ? rcu_is_watching+0x12/0xc0 [ 332.074848][ C0] process_one_work+0xa0e/0x1980 [ 332.079774][ C0] ? __pfx_process_one_work+0x10/0x10 [ 332.085124][ C0] ? __pfx_hub_event+0x10/0x10 [ 332.089873][ C0] worker_thread+0x5ef/0xe50 [ 332.094479][ C0] ? kthread+0x13a/0x450 [ 332.098693][ C0] ? __pfx_worker_thread+0x10/0x10 [ 332.103783][ C0] kthread+0x370/0x450 [ 332.107824][ C0] ? __pfx_kthread+0x10/0x10 [ 332.112387][ C0] ret_from_fork+0x72b/0xd50 [ 332.116959][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 332.122043][ C0] ? __switch_to+0x800/0x1100 [ 332.126707][ C0] ? __pfx_kthread+0x10/0x10 [ 332.131267][ C0] ret_from_fork_asm+0x1a/0x30 [ 332.136014][ C0] [ 332.139009][ C0] task:syz-executor state:R running task stack:23848 pid:5811 tgid:5811 ppid:1 task_flags:0x40054c flags:0x00080003 [ 332.152449][ C0] Call Trace: [ 332.155788][ C0] [ 332.158787][ C0] __schedule+0x10e9/0x6820 [ 332.163275][ C0] ? signal_wake_up_state+0x8d/0x130 [ 332.168548][ C0] ? __pfx___schedule+0x10/0x10 [ 332.173375][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 332.179163][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 332.184332][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 332.189677][ C0] preempt_schedule_common+0x42/0xc0 [ 332.194951][ C0] preempt_schedule_thunk+0x16/0x30 [ 332.200126][ C0] _raw_read_unlock+0x3e/0x50 [ 332.204788][ C0] zap_pid_ns_processes+0x259/0x6a0 [ 332.209960][ C0] ? do_raw_write_lock+0x11e/0x260 [ 332.215052][ C0] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 332.220745][ C0] ? do_exit+0x2195/0x2a60 [ 332.225138][ C0] ? rcu_is_watching+0x12/0xc0 [ 332.229881][ C0] do_exit+0x2307/0x2a60 [ 332.234092][ C0] ? rcu_is_watching+0x12/0xc0 [ 332.238828][ C0] ? __pfx_do_exit+0x10/0x10 [ 332.243387][ C0] ? do_raw_spin_lock+0x128/0x260 [ 332.248381][ C0] ? find_held_lock+0x2b/0x80 [ 332.253030][ C0] ? get_signal+0x7e0/0x21e0 [ 332.257593][ C0] do_group_exit+0xd5/0x2a0 [ 332.262064][ C0] get_signal+0x1ec7/0x21e0 [ 332.266551][ C0] ? __asan_memset+0x23/0x50 [ 332.271120][ C0] ? __pfx_get_signal+0x10/0x10 [ 332.275945][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 332.281464][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 332.286638][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 332.292768][ C0] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 332.298553][ C0] ? rcu_is_watching+0x12/0xc0 [ 332.303295][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 332.308560][ C0] ? do_syscall_64+0x52d/0xf80 [ 332.313301][ C0] do_syscall_64+0x706/0xf80 [ 332.317858][ C0] ? clear_bhb_loop+0x40/0x90 [ 332.322503][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.328376][ C0] RIP: 0033:0x7f7f12f5d04e [ 332.332766][ C0] RSP: 002b:00007fffda7be048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 332.341146][ C0] RAX: 0000000000000000 RBX: 0000555588583500 RCX: 00007f7f12f5d04e [ 332.349093][ C0] RDX: 00007fffda7be0a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.357034][ C0] RBP: 00007fffda7be10c R08: 0000000000000000 R09: 0000000000000000 [ 332.364971][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000068 [ 332.372912][ C0] R13: 0000000000000009 R14: 00000000000309ec R15: 00007fffda7be160 [ 332.381389][ C0] [ 334.129712][ C0] net_ratelimit: 27244 callbacks suppressed [ 334.129731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.129860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.135891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.147725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.159787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.171631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.183481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.195335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 334.207312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.219130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.139753][ C0] net_ratelimit: 30477 callbacks suppressed [ 339.139773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.139826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.145931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.157814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.169831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.181715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.193558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.205414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:c5:55:3c:d9:6c, vlan:0) [ 339.217402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.229261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.445007][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.464234][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.456197][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.470733][ T1302] ieee802154 phy1 wpan1: encryption failed: -22