last executing test programs: 7m6.740158762s ago: executing program 4 (id=57): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r4, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7m4.463431667s ago: executing program 4 (id=64): mount(&(0x7f0000000300)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x0, 0x0) 7m4.218299863s ago: executing program 4 (id=65): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) ftruncate(r0, 0xfffffd83) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xba}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000080)) chdir(&(0x7f0000000480)='./cgroup\x00') 7m0.114799621s ago: executing program 4 (id=77): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mount$nfs(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x91014, 0x0) statfs(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 6m59.687398387s ago: executing program 4 (id=79): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m59.141621186s ago: executing program 4 (id=85): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff86) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x288a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) lchown(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) 6m57.972206731s ago: executing program 32 (id=85): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff86) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x288a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) lchown(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) 1m20.141494508s ago: executing program 3 (id=1865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000190001000000100010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00006000000000", @ANYRES32], 0x238}}, 0x20004040) r4 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2020}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r8, 0x7ffffffe}}, 0x18) io_uring_enter(r4, 0x47be, 0x1, 0x0, 0x0, 0x0) 1m18.879039329s ago: executing program 3 (id=1872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x15, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x800, 0x800, 0x4, 0x4, 0x7, 0xffff08b0, 0x8, 0x4c74, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0xf, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800087, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x3, 0x3, 0x7ff, 0x40be, 0x4, 0x9, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0xe, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ',*/@\xe8.'}}, {@privport}, {@access_uid}, {@ignoreqv}, {@version_u}, {@debug={'debug', 0x3d, 0x1b35}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 1m14.939488453s ago: executing program 3 (id=1886): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b0000003000038014000200697036677265746170"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c00"], 0xc0}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000a140)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x20, 0x0, 0x350, 0x1, {{0x2f, 0x4, 0x1, 0x4, 0xbc, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x8, [{@private=0xa010101}, {@remote, 0xfa6}, {@multicast2, 0x7fffffff}, {@private=0xa010100, 0x1}, {@broadcast, 0x80}]}, @noop, @lsrr={0x83, 0x1f, 0xd0, [@loopback, @loopback, @broadcast, @loopback, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x4}]}, @ssrr={0x89, 0x7, 0xc1, [@multicast1]}, @ssrr={0x89, 0x1f, 0x16, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @lsrr={0x83, 0x17, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2]}, @rr={0x7, 0x17, 0x44, [@rand_addr=0x64010100, @remote, @multicast2, @empty, @broadcast]}, @generic={0x86, 0x5, "8c638b"}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@local, 0x1e, r3}) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x42a00, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) munlockall() r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000340)=0x9, r8, 0x0, 0x0, 0x1}}, 0x20) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000500)={{0x1, 0x1, 0x40, 0x2, 0x10000}, 0x8000, 0x3}) 1m10.708187801s ago: executing program 3 (id=1901): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) listen(r3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x0, 0x0, 0x1}}, "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", "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"}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000168000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="65660fc736b9230200000f320fc5b0040040000f0f10970fe8fa6466baf80cb82cf59b88ef66bafc0cb000eec4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bac10c66ba004066ef66b8296c", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000140)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000090000000000000000b6cf50731e7267d38c6afacff8331974c3fcc3ab6f33439d9c0b40e1ff1c5fe41cd43d1072a98994ca4d3d19a7f855f4e0de69820114988a42310b21937174ed8b060491f6560f580ebd034e5ec2d1888dd5c85c957175eb93fea239656eea5904c5a7d4132c956cda9bb886c540b0dbd9edd6a9ec04b4078f69ca20885a480064ce366a6be5dbe58ecd69a93e38a4d0a3c45a0f721815ea5e05b9d006e36dde78c767f13e75d7f02487f537060000004b81a433cfd1f0be88606f0317bf878aaf47486b089086c3ae40331c4d04f26b0827081ac4703217243737865247ca2b24bbccc8e05dcaa90ce70ee5a82f79981dc5cc86858d7f9ca1da4486d1abe5dfa082b072c0b35ac90ff0e0ad36c464ae62490cf6a865491cea31ce709886cf8f4beae5c995970a8e7d0442d4100086b129ac59587d790d6f239802d9ef5ad5e5a1aef54d47f85a4da202c7a851b49b1e055b573bec8dd1a72413abaa22081cdd6dfce2e5945dcf8963ae92747b7b334a841464b5456b73867a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r8, &(0x7f0000000640), 0x0}, 0x20) sendfile(r2, r2, 0x0, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.631277614s ago: executing program 3 (id=1903): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x8) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x90000) eventfd2(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.224194806s ago: executing program 3 (id=1905): r0 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) r5 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000180), 0x2, 0x3) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0x20002078) 1m8.76648144s ago: executing program 33 (id=1905): r0 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) r5 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000180), 0x2, 0x3) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0x20002078) 32.612219931s ago: executing program 0 (id=2069): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 32.535968847s ago: executing program 0 (id=2070): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) creat(&(0x7f00000001c0)='./file1\x00', 0x42) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x18, 0x1, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r8, 0x7800, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x4, 0x0, @broadcast, @multicast1}}}}) preadv(r6, &(0x7f0000000180)=[{0x0, 0xed}], 0x1, 0x6, 0x6) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x2f, 0x0, 0x0, 0x0) 32.052437905s ago: executing program 5 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd703cdddbdf2544000000080003", @ANYRES32=r2, @ANYBLOB="07002400e0ec00000800a1000f0000000a0018"], 0x38}, 0x1, 0x0, 0x0, 0x20004801}, 0x20004000) 32.019807868s ago: executing program 5 (id=2072): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0xd76, 0x1a1282) mount$fuse(0x0, 0x0, 0x0, 0x1a22002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) writev(r2, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r1}) close_range(r0, 0xffffffffffffffff, 0x0) 31.856489131s ago: executing program 0 (id=2074): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000140)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = fanotify_init(0x200, 0x40000) fanotify_mark(r3, 0x1, 0x48000003, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r4 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x49, 0x3b00, 0x0, 0xfffffffffffffdfd) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 31.681508525s ago: executing program 0 (id=2075): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000190001000000100010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00006000000000", @ANYRES32=0x0, @ANYRES32], 0x238}}, 0x20004040) r2 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2020}], 0x1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x7ffffffe}}, 0x18) io_uring_enter(r2, 0x47be, 0x1, 0x0, 0x0, 0x0) 31.100602585s ago: executing program 5 (id=2077): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r3 = open(0x0, 0x284800, 0x30) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="00000000934071515295f13e0e00000000b7080000000400007b8af8ff00000000bfa200000000000007020200f3ffffffb703000008000000b7040000353b7ff2850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000007b000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="40090c00000000004700000040f4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="001528000000b20736757fe51db0206c485f2b1e25f32d25b5619c7b50c1c1cde3ce8ab0f9ecd39cc120ecde4ce8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="20319a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.941286392s ago: executing program 0 (id=2081): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x8) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x90000) r2 = eventfd2(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0) io_setup(0x81, &(0x7f0000000400)) read$eventfd(r2, &(0x7f0000000000), 0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@my=0x0, 0x2}, @local, 0x0, 0x0, 0x405e, 0x0, 0x6ed, 0x29d6}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 29.310978671s ago: executing program 1 (id=2082): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044051}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000001000)=""/91) 28.765207655s ago: executing program 6 (id=2083): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010025bd703cdddbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="07002400e0ec00000800a1000f0000000a0018"], 0x38}, 0x1, 0x0, 0x0, 0x20004801}, 0x20004000) 28.310046268s ago: executing program 1 (id=2084): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000190001000000100010000000ac1414bb000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32], 0x238}}, 0x20004040) r4 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2020}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r8, 0x7ffffffe}}, 0x18) io_uring_enter(r4, 0x47be, 0x1, 0x0, 0x0, 0x0) 28.2103855s ago: executing program 0 (id=2085): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x341a02, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)="be539c2bb1517ffaecb7e222b4a96f5bf27648f305a48e83505087e86866108833cf10b67065fbcd19f3940dae39350a163bba38d6f5f5a7787d47b048c0189987f289b014ce478f0cbad42098761d81f354432b2d1da8aa2e42b16741129c5ed8c5d2ae8bb58f74187caa643576e7a8a6e5a7957c8d706a347ff0d54079c1ed5ae669d4f2c63b19295bf4716372f5ee42e6c97e344321f2d283faec2a9423ed37abfde7769d265a", 0xa8}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x80000001, @remote, 0xd11}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xffffffffffffffff, {[0x2, 0x6, 0x401, 0x8, 0x10001, 0x8, 0x2, 0xd]}}, 0x5c) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000081180002800400010010000380"], 0x44}}, 0x0) 28.130790616s ago: executing program 6 (id=2086): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000140)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = fanotify_init(0x200, 0x40000) fanotify_mark(r3, 0x1, 0x48000003, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r4 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x49, 0x3b00, 0x0, 0xfffffffffffffdfd) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 28.015434082s ago: executing program 6 (id=2087): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b0000003000038014000200697036677265746170"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c00"], 0xc0}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000a140)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x20, 0x0, 0x350, 0x1, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x8, [{@private=0xa010101}, {@remote, 0xfa6}, {@multicast2, 0x7fffffff}, {@private=0xa010100, 0x1}, {@broadcast, 0x80}]}, @noop, @lsrr={0x83, 0x1f, 0xd0, [@loopback, @loopback, @broadcast, @loopback, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x4}]}, @ssrr={0x89, 0x7, 0xc1, [@multicast1]}, @ssrr={0x89, 0x3, 0x16}, @lsrr={0x83, 0x1b, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2]}, @rr={0x7, 0x17, 0x44, [@rand_addr=0x64010100, @remote, @multicast2, @empty, @broadcast]}, @generic={0x86, 0x5, "8c638b"}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@local, 0x1e, r3}) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x42a00, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) munlockall() r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000340)=0x9, r8, 0x0, 0x0, 0x1}}, 0x20) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000500)={{0x1, 0x1, 0x40, 0x2, 0x10000}, 0x8000, 0x3}) 27.286248649s ago: executing program 5 (id=2089): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0xd76, 0x1a1282) mount$fuse(0x0, 0x0, 0x0, 0x1a22002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r1}) close_range(r0, 0xffffffffffffffff, 0x0) 27.194121156s ago: executing program 2 (id=2090): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) io_uring_setup(0x2471, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='inet_sk_error_report\x00', 0xffffffffffffffff, 0x0, 0x800000004}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1003}}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40440, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/113, 0x71}], 0x1) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000000c0)) accept4(r3, 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x12) ioprio_get$pid(0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) 26.461495958s ago: executing program 1 (id=2091): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) creat(&(0x7f00000001c0)='./file1\x00', 0x42) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x18, 0x1, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r8, 0x7800, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x4, 0x0, @broadcast, @multicast1}}}}) preadv(r6, &(0x7f0000000180)=[{0x0, 0xed}], 0x1, 0x6, 0x6) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x2f, 0x0, 0x0, 0x0) 26.367872666s ago: executing program 5 (id=2092): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000190001000000100010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00006000000000", @ANYRES32=0x0, @ANYRES32], 0x238}}, 0x20004040) r2 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2020}], 0x1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x7ffffffe}}, 0x18) io_uring_enter(r2, 0x47be, 0x1, 0x0, 0x0, 0x0) 26.228676716s ago: executing program 2 (id=2093): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x6558, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r6, @ANYBLOB], 0x50) r7 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x800) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x40) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0xffffffff) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x8031, r8, 0x0) 25.436033283s ago: executing program 6 (id=2094): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x47be, 0x1, 0x0, 0x0, 0x0) 25.23015843s ago: executing program 2 (id=2095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 25.189320805s ago: executing program 1 (id=2096): socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x6, 0x4, 0x81, 0x47}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000540)={0x0, 0x1, 0xffffffffffffffff, 0x1}) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='syscall\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0xf0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 25.171559195s ago: executing program 5 (id=2097): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000792000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/216, 0xd8, 0x1, &(0x7f0000000200)=""/120, 0x78}, &(0x7f0000000380)=0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c19a5}], 0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x25, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x148, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xf1, 0x6, "7d51aef86ed0e240406414db0d52fc65d0a33133a1641678baea0a87f2148d334bfc188db1a14e68d0fdaf649a89f8d47c529325b630839666542fc5080392b1a3fd4e1e0f94eba8ac930003cf06646dc6b8dd5aae88d69a0bf8ea2027deb5ccab9cbf9ce71a4e8ece29def3f6a1b6ce80bcf22b5419975dcab4c146565377502e5f92acb9ca2519324a9f261e7d77f43a4b221165863b96280e5afa99bf9e88e982c9d6f1c60745d38988b7e9d078ec0ac07ddf74ef1e468c51cd611df3decc2385548a700b355ec014c6df618f64bcff61bd38fb34802d4e2b8616494c8f6607fe64c47bbe34ed0b5b6c77c6"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x4d, 0x6, "ee362dbc6cf2195abf0298fb021b726a0c17ed1203a4cc80dc8b91f80b5335a0270b9a56f8763dc46ef4f86038a40e8f70a610b21bc710556846575c579cee66f0b4ec58e1f1b0a966"}, @NFTA_TABLE_USERDATA={0x91, 0x6, "dec32b754d7d74c8dd1283ac8d453f3a9b2f0e4c712329062ee31e7c1347aa2334b4d1c725d3abfdd10c5bee2be995fa0a3e7d4525011425f372832ec98f78381d361bf2098a1e1aa2194a4c09dd176c8c719b99d88e3a203c99f0b8f8c53c1e96609dc4f79c398c175a085c2f9573519dbfe60a488520d4f646d3f5a0271bd1d8d7cd1891213d19f0ac2d1080"}, @NFTA_TABLE_HANDLE={0xfffffe24, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x31, 0x6, "141652d77f63006ee8e6fe6fd14a96551096b7a493c76ca1928d3f0a0ca27267de98966ae591113ccf14284796"}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x314}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c00000800428004000800"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000300)) 25.010157123s ago: executing program 6 (id=2098): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x70}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) 24.979290706s ago: executing program 2 (id=2099): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x8) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x90000) r2 = eventfd2(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0) io_setup(0x81, &(0x7f0000000400)) read$eventfd(r2, &(0x7f0000000000), 0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@my=0x0, 0x2}, @local, 0x0, 0x0, 0x405e, 0x0, 0x6ed, 0x29d6}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 24.253310317s ago: executing program 1 (id=2100): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010025bd703cdddbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="07002400e0ec00000800a1000f0000000a0018"], 0x38}, 0x1, 0x0, 0x0, 0x20004801}, 0x20004000) 24.113587401s ago: executing program 1 (id=2101): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) read$nci(r0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x0) ioperm(0x9, 0x40, 0x8001) 23.988511602s ago: executing program 6 (id=2102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000190001000000100010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff0000", @ANYRES32=0x0, @ANYRES32], 0x238}}, 0x20004040) r4 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2020}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r8, 0x7ffffffe}}, 0x18) io_uring_enter(r4, 0x47be, 0x1, 0x0, 0x0, 0x0) 23.942994641s ago: executing program 2 (id=2103): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000140)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = fanotify_init(0x200, 0x40000) fanotify_mark(r3, 0x1, 0x48000003, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r4 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x49, 0x3b00, 0x0, 0xfffffffffffffdfd) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 22.942216371s ago: executing program 2 (id=2104): r0 = socket$alg(0x26, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r1, r3, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) 0s ago: executing program 34 (id=2085): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x341a02, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)="be539c2bb1517ffaecb7e222b4a96f5bf27648f305a48e83505087e86866108833cf10b67065fbcd19f3940dae39350a163bba38d6f5f5a7787d47b048c0189987f289b014ce478f0cbad42098761d81f354432b2d1da8aa2e42b16741129c5ed8c5d2ae8bb58f74187caa643576e7a8a6e5a7957c8d706a347ff0d54079c1ed5ae669d4f2c63b19295bf4716372f5ee42e6c97e344321f2d283faec2a9423ed37abfde7769d265a", 0xa8}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x80000001, @remote, 0xd11}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xffffffffffffffff, {[0x2, 0x6, 0x401, 0x8, 0x10001, 0x8, 0x2, 0xd]}}, 0x5c) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000081180002800400010010000380"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 0] audit: type=1400 audit(1758694701.947:672): avc: denied { create } for pid=12064 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 421.474826][ T30] audit: type=1400 audit(1758694701.977:673): avc: denied { setopt } for pid=12064 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 422.137106][T12078] overlayfs: failed to resolve './file1': -2 [ 422.148804][ T30] audit: type=1326 audit(1758694702.697:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6258eec9 code=0x7fc00000 [ 422.415046][ T30] audit: type=1326 audit(1758694702.967:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4b6258eec9 code=0x7fc00000 [ 423.399024][T12090] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1750'. [ 423.408215][T12090] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1750'. [ 423.719030][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1756'. [ 423.733288][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1756'. [ 423.746197][T12107] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 424.084205][ T1225] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 425.410887][ T1225] usb 6-1: Using ep0 maxpacket: 16 [ 425.429633][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 425.451854][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 425.462006][ T1225] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 425.471403][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 425.480319][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 425.491231][ T1225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.514959][ T1225] usb 6-1: config 0 descriptor?? [ 425.536288][T12107] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 425.811531][ T5977] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 425.971178][T12107] 9pnet_fd: Insufficient options for proto=fd [ 425.983500][ T5977] usb 3-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 426.005078][ T5977] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 426.019310][ T5977] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.034643][ T5977] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.045304][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.062094][ T5977] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.069531][ T5977] usb 3-1: invalid MIDI out EP 0 [ 426.122936][ T8496] udevd[8496]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 426.136360][ T8496] udevd[8496]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 426.155869][ T5977] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 426.185983][ T1225] usbhid 6-1:0.0: can't add hid device: -71 [ 426.194977][ T1225] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 426.209398][ T1225] usb 6-1: USB disconnect, device number 16 [ 427.011122][ T5977] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 427.160996][ T5977] usb 2-1: Using ep0 maxpacket: 8 [ 427.236151][ T5977] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 427.246572][ T5977] usb 2-1: config 0 has no interface number 0 [ 427.253114][ T5977] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.266719][ T5977] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 427.287447][ T5977] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 427.307782][ T5977] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 427.343475][ T5977] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 427.352853][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.363780][ T5977] usb 2-1: config 0 descriptor?? [ 427.375106][ T5977] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 427.510909][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 427.701012][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 427.704552][ T24] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 427.704582][ T24] usb 6-1: config 0 has no interface number 0 [ 427.704607][ T24] usb 6-1: config 0 interface 237 has no altsetting 0 [ 427.706984][ T24] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 427.707004][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.707016][ T24] usb 6-1: Product: syz [ 427.707057][ T24] usb 6-1: Manufacturer: syz [ 427.707067][ T24] usb 6-1: SerialNumber: syz [ 427.708917][ T24] usb 6-1: config 0 descriptor?? [ 427.722449][ T24] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 found [ 427.901977][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 427.901996][ T30] audit: type=1400 audit(1758694708.457:683): avc: denied { lock } for pid=12133 comm="syz.1.1764" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 427.914527][T12148] netlink: 211048 bytes leftover after parsing attributes in process `syz.0.1767'. [ 427.914565][T12148] net_ratelimit: 165 callbacks suppressed [ 427.914572][T12148] netlink: zone id is out of range [ 427.914580][T12148] netlink: zone id is out of range [ 427.914585][T12148] netlink: zone id is out of range [ 427.914591][T12148] netlink: zone id is out of range [ 427.914598][T12148] netlink: zone id is out of range [ 427.914605][T12148] netlink: zone id is out of range [ 427.914613][T12148] netlink: zone id is out of range [ 427.914626][T12148] netlink: zone id is out of range [ 427.914632][T12148] netlink: zone id is out of range [ 427.914639][T12148] netlink: zone id is out of range [ 428.017093][ T24] snd_usb_podhd 6-1:0.237: set_interface failed [ 428.017364][ T24] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 now disconnected [ 428.017503][ T24] snd_usb_podhd 6-1:0.237: probe with driver snd_usb_podhd failed with error -71 [ 428.023030][ T24] usb 6-1: USB disconnect, device number 17 [ 428.382381][ T24] usb 3-1: USB disconnect, device number 18 [ 428.441912][T12123] delete_channel: no stack [ 429.207989][ T30] audit: type=1400 audit(1758694709.757:684): avc: denied { create } for pid=12171 comm="syz.3.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 429.233957][ T30] audit: type=1400 audit(1758694709.787:685): avc: denied { connect } for pid=12171 comm="syz.3.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 429.800492][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 429.809797][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 429.820554][ T24] usb 2-1: USB disconnect, device number 20 [ 429.832498][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 429.859927][T12180] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 430.118650][T12190] netlink: 384 bytes leftover after parsing attributes in process `syz.0.1780'. [ 430.190970][ T2152] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 430.337478][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 430.810939][ T2152] usb 4-1: Using ep0 maxpacket: 16 [ 430.823138][ T2152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 430.841267][ T2152] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 430.851523][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.868701][ T2152] usb 4-1: config 0 descriptor?? [ 430.876771][T12178] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.974278][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 430.983644][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.005433][ T24] usb 2-1: Product: syz [ 431.010401][ T24] usb 2-1: Manufacturer: syz [ 431.015492][ T24] usb 2-1: SerialNumber: syz [ 431.032910][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 431.057723][ T30] audit: type=1400 audit(1758694711.607:686): avc: denied { firmware_load } for pid=5911 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 431.112838][ T5911] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 431.305606][T12178] 9pnet_fd: Insufficient options for proto=fd [ 431.323701][ T30] audit: type=1400 audit(1758694711.877:687): avc: denied { read } for pid=12183 comm="syz.1.1779" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 431.347096][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.377906][T12184] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 431.411025][ T30] audit: type=1400 audit(1758694711.877:688): avc: denied { open } for pid=12183 comm="syz.1.1779" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 431.437672][ T30] audit: type=1400 audit(1758694711.877:689): avc: denied { ioctl } for pid=12183 comm="syz.1.1779" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 431.462923][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.471684][T12200] FAULT_INJECTION: forcing a failure. [ 431.471684][T12200] name failslab, interval 1, probability 0, space 0, times 0 [ 431.501521][ T30] audit: type=1400 audit(1758694711.927:690): avc: denied { mount } for pid=12183 comm="syz.1.1779" name="/" dev="ramfs" ino=35998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 431.520185][T12200] CPU: 0 UID: 0 PID: 12200 Comm: syz.5.1783 Not tainted syzkaller #0 PREEMPT(full) [ 431.520215][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.520224][T12200] Call Trace: [ 431.520230][T12200] [ 431.520236][T12200] dump_stack_lvl+0x16c/0x1f0 [ 431.520263][T12200] should_fail_ex+0x512/0x640 [ 431.520282][T12200] ? __kmalloc_noprof+0xbf/0x510 [ 431.520301][T12200] ? fuse_direct_io+0x538/0x24f0 [ 431.520319][T12200] should_failslab+0xc2/0x120 [ 431.520342][T12200] __kmalloc_noprof+0xd2/0x510 [ 431.520363][T12200] fuse_direct_io+0x538/0x24f0 [ 431.520401][T12200] ? __pfx_fuse_direct_io+0x10/0x10 [ 431.520424][T12200] ? lockdep_init_map_type+0x5c/0x280 [ 431.520443][T12200] fuse_direct_IO+0x624/0xf40 [ 431.520470][T12200] ? __pfx_aio_complete_rw+0x10/0x10 [ 431.520490][T12200] ? __pfx_fuse_direct_IO+0x10/0x10 [ 431.520510][T12200] ? __pfx___might_resched+0x10/0x10 [ 431.520529][T12200] ? generic_write_check_limits+0x1f1/0x290 [ 431.520561][T12200] ? arch_stack_walk+0xa6/0x100 [ 431.520584][T12200] fuse_direct_write_iter+0x4c7/0x840 [ 431.520605][T12200] ? register_lock_class+0x41/0x4c0 [ 431.520620][T12200] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 431.520644][T12200] ? __lock_acquire+0xb97/0x1ce0 [ 431.520671][T12200] ? kasan_save_stack+0x42/0x60 [ 431.520695][T12200] fuse_file_write_iter+0x5c9/0x990 [ 431.520719][T12200] aio_write+0x3b9/0x910 [ 431.520739][T12200] ? __pfx_aio_write+0x10/0x10 [ 431.520755][T12200] ? __lock_acquire+0xb97/0x1ce0 [ 431.520792][T12200] ? __might_fault+0xe3/0x190 [ 431.520806][T12200] ? __might_fault+0x13b/0x190 [ 431.520826][T12200] ? io_submit_one+0x1243/0x1df0 [ 431.520843][T12200] io_submit_one+0x1243/0x1df0 [ 431.520864][T12200] ? __lock_acquire+0xb97/0x1ce0 [ 431.520890][T12200] ? __pfx_io_submit_one+0x10/0x10 [ 431.520916][T12200] ? __might_fault+0xe3/0x190 [ 431.520930][T12200] ? __might_fault+0x13b/0x190 [ 431.520950][T12200] ? __x64_sys_io_submit+0x1a9/0x350 [ 431.520968][T12200] __x64_sys_io_submit+0x1a9/0x350 [ 431.520989][T12200] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 431.521020][T12200] do_syscall_64+0xcd/0x4e0 [ 431.521041][T12200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.521057][T12200] RIP: 0033:0x7f9c26d8eec9 [ 431.521069][T12200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.521084][T12200] RSP: 002b:00007f9c27c27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 431.521100][T12200] RAX: ffffffffffffffda RBX: 00007f9c26fe5fa0 RCX: 00007f9c26d8eec9 [ 431.521110][T12200] RDX: 0000200000000780 RSI: 0000000000000020 RDI: 00007f9c27bdd000 [ 431.521119][T12200] RBP: 00007f9c27c27090 R08: 0000000000000000 R09: 0000000000000000 [ 431.521128][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.521136][T12200] R13: 00007f9c26fe6038 R14: 00007f9c26fe5fa0 R15: 00007ffd1a70d348 [ 431.521158][T12200] [ 431.613962][ T9] usb 2-1: USB disconnect, device number 21 [ 431.625218][ T2152] usbhid 4-1:0.0: can't add hid device: -71 [ 431.826279][ T2152] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 431.830974][ T1225] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 431.839259][ T2152] usb 4-1: USB disconnect, device number 14 [ 432.055020][ T1225] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.103310][ T1225] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.133756][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.140958][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 432.151402][ T1225] usb 3-1: Product: syz [ 432.156518][ T1225] usb 3-1: Manufacturer: syz [ 432.175926][ T1225] usb 3-1: SerialNumber: syz [ 432.187221][ T5911] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 432.207931][ T5911] ath9k_htc: Failed to initialize the device [ 432.242425][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 432.307240][ T30] audit: type=1804 audit(1758694712.857:691): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1790" name="/newroot/352/file1" dev="fuse" ino=1 res=1 errno=0 [ 432.312188][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.340267][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.350713][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.354544][ T30] audit: type=1800 audit(1758694712.857:692): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1790" name="/" dev="fuse" ino=1 res=0 errno=0 [ 432.384859][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.415202][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.434055][ T24] usb 1-1: config 0 descriptor?? [ 433.180317][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 433.358614][ T1225] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 433.365264][ T1225] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 433.383172][ T5977] usb 1-1: USB disconnect, device number 7 [ 433.421130][ T1225] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 433.421579][T12235] fido_id[12235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 433.559687][T12203] binder: BINDER_SET_CONTEXT_MGR already set [ 433.576529][T12203] binder: 12202:12203 ioctl 4018620d 2000000000c0 returned -16 [ 433.584281][T12204] binder: 12202:12204 unknown command 0 [ 433.590032][T12204] binder: 12202:12204 ioctl c0306201 200000000080 returned -22 [ 433.736949][ T1225] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 433.754720][T12252] netlink: 384 bytes leftover after parsing attributes in process `syz.1.1795'. [ 433.765685][ T1225] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 433.785931][ T1225] usb 3-1: USB disconnect, device number 19 [ 433.792820][ T1225] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 434.130349][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 434.145128][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 434.171424][T12260] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 434.440984][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 434.620961][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 434.636594][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 434.649485][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 434.664416][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.722928][ T24] usb 1-1: config 0 descriptor?? [ 434.748888][T12260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 435.208056][T12260] 9pnet_fd: Insufficient options for proto=fd [ 435.325288][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 435.325306][ T30] audit: type=1400 audit(1758694715.877:695): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 435.466617][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 435.480235][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 435.508063][ T24] usb 1-1: USB disconnect, device number 8 [ 435.655695][T12282] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1805'. [ 435.665593][T12282] net_ratelimit: 8 callbacks suppressed [ 435.665612][T12282] netlink: zone id is out of range [ 435.678563][T12282] netlink: zone id is out of range [ 435.685214][T12282] netlink: zone id is out of range [ 435.693200][T12282] netlink: zone id is out of range [ 435.698410][T12282] netlink: zone id is out of range [ 435.706159][T12282] netlink: zone id is out of range [ 435.712896][T12282] netlink: zone id is out of range [ 435.718208][T12282] netlink: zone id is out of range [ 435.724320][T12282] netlink: get zone limit has 8 unknown bytes [ 436.936670][T12312] netlink: 384 bytes leftover after parsing attributes in process `syz.2.1813'. [ 437.013126][T12314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12314 comm=syz.1.1815 [ 437.042147][T12310] tipc: Started in network mode [ 437.055746][T12310] tipc: Node identity 7f000001, cluster identity 4711 [ 437.067354][T12310] tipc: New replicast peer: 0.0.0.0 [ 437.091380][T12314] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1815'. [ 437.180009][T12310] tipc: Enabled bearer , priority 10 [ 437.347662][ T30] audit: type=1400 audit(1758694717.887:696): avc: denied { append } for pid=12322 comm="syz.3.1816" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 437.381332][T12323] netlink: 'syz.3.1816': attribute type 33 has an invalid length. [ 437.396619][T12323] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1816'. [ 437.409087][ T30] audit: type=1400 audit(1758694717.937:697): avc: denied { ioctl } for pid=12322 comm="syz.3.1816" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 437.861554][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 437.955939][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'. [ 437.992404][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'. [ 438.015734][T12340] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 438.237047][ T9] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 438.260426][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.280987][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 438.293168][ T1225] tipc: Node number set to 2130706433 [ 438.300539][ T9] usb 4-1: config 0 has no interface number 0 [ 438.331415][ T9] usb 4-1: config 0 interface 130 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 438.351143][ T9] usb 4-1: config 0 interface 130 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0 [ 438.369845][ T9] usb 4-1: config 0 interface 130 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 438.400847][ T9] usb 4-1: config 0 interface 130 has no altsetting 0 [ 438.419436][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=47.ca [ 438.430846][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.450408][ T9] usb 4-1: Product: syz [ 438.467685][ T9] usb 4-1: Manufacturer: syz [ 438.477684][ T9] usb 4-1: SerialNumber: syz [ 438.530891][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 438.558886][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 438.971653][ T9] usb 4-1: config 0 descriptor?? [ 438.982025][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 439.017337][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.046390][ T24] usb 1-1: config 0 descriptor?? [ 439.060599][T12340] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 439.110191][ T30] audit: type=1400 audit(1758694719.657:698): avc: denied { watch watch_reads } for pid=12346 comm="syz.1.1823" path="/349" dev="tmpfs" ino=1894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 439.221594][ T30] audit: type=1400 audit(1758694719.767:699): avc: denied { getopt } for pid=12324 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.309221][ T9] usb 4-1: USB disconnect, device number 15 [ 439.325221][T12353] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 439.525628][T12338] 9pnet_fd: Insufficient options for proto=fd [ 439.612625][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1826'. [ 439.633125][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.776842][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 439.783180][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 439.825700][ T24] usb 1-1: USB disconnect, device number 9 [ 439.900908][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 440.082236][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 440.089107][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 440.103361][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 440.112757][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.121258][ T9] usb 3-1: Product: syz [ 440.125666][ T9] usb 3-1: Manufacturer: syz [ 440.130342][ T9] usb 3-1: SerialNumber: syz [ 440.139992][ T9] usb 3-1: config 0 descriptor?? [ 440.155272][T12379] netlink: 384 bytes leftover after parsing attributes in process `syz.3.1832'. [ 440.164792][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 440.175476][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 440.210953][ T1225] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 440.352592][ T1225] usb 2-1: device descriptor read/64, error -71 [ 440.631137][ T1225] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 440.772224][ T9] em28xx 3-1:0.0: chip ID is em2765 [ 440.782316][ T1225] usb 2-1: device descriptor read/64, error -71 [ 440.905413][ T1225] usb usb2-port1: attempt power cycle [ 441.281285][ T1225] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 441.301754][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 441.481443][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 441.566659][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 441.701309][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.725445][ T1225] usb 2-1: device descriptor read/8, error -71 [ 441.737380][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 441.747555][ T9] em28xx 3-1:0.0: board has no eeprom [ 441.758815][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 441.768094][ T24] pvrusb2: ********** [ 441.780713][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 441.794037][ T24] pvrusb2: Important functionality might not be entirely working. [ 441.806178][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 441.826435][ T24] pvrusb2: ********** [ 441.848450][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 441.865953][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 441.872393][ T5931] em28xx 3-1:0.0: Binding DVB extension [ 441.991288][ T9] usb 3-1: USB disconnect, device number 20 [ 441.994843][ T2340] pvrusb2: Invalid write control endpoint [ 442.020899][ T1225] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 442.137638][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 442.231246][ T1225] usb 2-1: device descriptor read/8, error -71 [ 442.382323][ T30] audit: type=1400 audit(1758694722.907:700): avc: denied { connect } for pid=12386 comm="syz.5.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 442.413275][ T30] audit: type=1400 audit(1758694722.907:701): avc: denied { write } for pid=12386 comm="syz.5.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 442.416850][T12401] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12401 comm=syz.3.1839 [ 442.442091][ T24] usb 6-1: USB disconnect, device number 18 [ 442.463386][ T30] audit: type=1400 audit(1758694722.907:702): avc: denied { bind } for pid=12386 comm="syz.5.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 442.465168][ T1225] usb usb2-port1: unable to enumerate USB device [ 442.485568][ T30] audit: type=1400 audit(1758694722.967:703): avc: denied { write } for pid=12386 comm="syz.5.1835" path="socket:[37365]" dev="sockfs" ino=37365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 442.492118][ T5931] em28xx 3-1:0.0: Registering input extension [ 442.533148][ T2340] pvrusb2: Invalid write control endpoint [ 442.548832][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 442.567804][ T9] em28xx 3-1:0.0: Closing input extension [ 442.569766][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 442.582636][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 442.593001][ T2340] pvrusb2: Device being rendered inoperable [ 442.604012][ T2340] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 442.612300][ T2340] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 442.618854][ T9] em28xx 3-1:0.0: Freeing device [ 442.636538][ T2340] pvrusb2: Attached sub-driver cx25840 [ 442.643301][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 442.668875][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 442.917487][ T30] audit: type=1400 audit(1758694723.467:704): avc: denied { ioctl } for pid=12402 comm="syz.0.1841" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 443.119789][ T30] audit: type=1400 audit(1758694723.657:705): avc: denied { mount } for pid=12403 comm="syz.2.1840" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 443.169980][ T30] audit: type=1400 audit(1758694723.717:706): avc: denied { write } for pid=12400 comm="syz.3.1839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 443.199506][ T30] audit: type=1400 audit(1758694723.747:707): avc: denied { setopt } for pid=12400 comm="syz.3.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 443.220623][ T30] audit: type=1400 audit(1758694723.767:708): avc: denied { listen } for pid=12400 comm="syz.3.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 443.283309][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 443.293675][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 443.307627][ T30] audit: type=1400 audit(1758694723.857:709): avc: denied { read } for pid=12412 comm="syz.0.1842" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 443.386482][T12417] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 443.632155][T12423] bad cache= option: none0000000001701 [ 443.632155][T12423] [ 443.640137][T12423] CIFS: VFS: bad cache= option: none0000000001701 [ 444.287295][ T5912] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 444.375831][T12437] netlink: 384 bytes leftover after parsing attributes in process `syz.0.1846'. [ 444.470962][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 444.484822][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 444.496986][ T5912] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 444.506374][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.516812][ T5912] usb 2-1: config 0 descriptor?? [ 444.527048][T12417] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 445.573393][T12417] 9pnet_fd: Insufficient options for proto=fd [ 445.893933][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 445.932096][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 445.980528][ T5912] usb 2-1: USB disconnect, device number 26 [ 446.366122][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 446.585493][T12469] ubi: mtd0 is already attached to ubi31 [ 446.823024][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.835791][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 446.845805][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 446.855892][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.867612][ T9] usb 1-1: config 0 descriptor?? [ 446.875442][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 446.890159][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 446.908169][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 446.917440][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 446.926089][ T9] usb 1-1: media controller created [ 446.935361][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.956947][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 446.971884][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 446.981601][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 447.001976][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 447.009883][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 447.172927][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 447.173021][ T9] dvb-usb: error while querying for an remote control event. [ 447.341679][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 447.526318][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 447.526362][ T30] audit: type=1400 audit(1758694728.077:719): avc: denied { mounton } for pid=12471 comm="syz.5.1857" path="/proc/970/task/972/cgroup" dev="proc" ino=36428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 447.663614][ T9] dvb-usb: error while querying for an remote control event. [ 448.089878][ T30] audit: type=1400 audit(1758694728.527:720): avc: denied { listen } for pid=12479 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 448.466363][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 448.822742][ T9] dvb-usb: error while querying for an remote control event. [ 448.833399][T12454] block nbd0: shutting down sockets [ 448.844343][ T5911] usb 1-1: USB disconnect, device number 10 [ 449.066347][ T5911] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 449.903399][T12506] netlink: 384 bytes leftover after parsing attributes in process `syz.3.1865'. [ 450.108001][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1867'. [ 450.164740][T12514] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 450.230922][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1867'. [ 450.431831][ T5911] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 450.633481][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 450.649632][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 450.670946][ T5911] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 450.689535][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.731654][ T5911] usb 6-1: config 0 descriptor?? [ 450.761187][T12514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 450.884298][ T30] audit: type=1400 audit(1758694731.407:721): avc: denied { transfer } for pid=12523 comm="syz.3.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 450.906439][T12527] binder: 12523:12527 ioctl c0306201 200000000180 returned -14 [ 451.274359][T12511] 9pnet_fd: Insufficient options for proto=fd [ 451.657999][ T5911] usbhid 6-1:0.0: can't add hid device: -71 [ 451.695748][ T5911] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 451.821361][ T30] audit: type=1400 audit(1758694732.357:722): avc: denied { read } for pid=12533 comm="syz.2.1873" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 451.848984][ T30] audit: type=1400 audit(1758694732.367:723): avc: denied { open } for pid=12533 comm="syz.2.1873" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 451.897397][ T30] audit: type=1400 audit(1758694732.367:724): avc: denied { ioctl } for pid=12533 comm="syz.2.1873" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 452.033957][ T5911] usb 6-1: USB disconnect, device number 19 [ 452.151865][T12527] lo speed is unknown, defaulting to 1000 [ 453.291776][ T30] audit: type=1400 audit(1758694733.837:725): avc: denied { create } for pid=12555 comm="syz.0.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 453.322021][ T30] audit: type=1400 audit(1758694733.837:726): avc: denied { getopt } for pid=12555 comm="syz.0.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 453.681001][ T30] audit: type=1400 audit(1758694734.177:727): avc: denied { create } for pid=12557 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 453.817496][ T30] audit: type=1400 audit(1758694734.187:728): avc: denied { bind } for pid=12557 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 453.920240][T12565] fuse: Bad value for 'fd' [ 454.180285][ T30] audit: type=1400 audit(1758694734.487:729): avc: denied { read write } for pid=12563 comm="syz.0.1881" name="file0" dev="tmpfs" ino=2224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 454.340234][ T30] audit: type=1400 audit(1758694734.497:730): avc: denied { open } for pid=12563 comm="syz.0.1881" path="/411/file0" dev="tmpfs" ino=2224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 454.630906][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 454.675147][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 454.684234][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 454.889502][ T9] usb 3-1: device descriptor read/64, error -71 [ 455.110874][ T30] audit: type=1400 audit(1758694735.587:731): avc: denied { ioctl } for pid=12576 comm="syz.5.1885" path="socket:[36630]" dev="sockfs" ino=36630 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 455.122604][T12585] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 455.420948][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 455.540956][ T5911] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 455.590911][ T9] usb 3-1: device descriptor read/64, error -71 [ 455.701290][ T9] usb usb3-port1: attempt power cycle [ 456.163694][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 456.178980][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 456.214463][ T5911] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 456.240764][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.270415][ T5911] usb 4-1: config 0 descriptor?? [ 456.276830][T12579] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 456.431053][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 456.491742][ T9] usb 3-1: device descriptor read/8, error -71 [ 456.547161][T12604] FAULT_INJECTION: forcing a failure. [ 456.547161][T12604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.569828][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.5.1894 Not tainted syzkaller #0 PREEMPT(full) [ 456.569858][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.569868][T12604] Call Trace: [ 456.569875][T12604] [ 456.569881][T12604] dump_stack_lvl+0x16c/0x1f0 [ 456.569911][T12604] should_fail_ex+0x512/0x640 [ 456.569944][T12604] __fpu_restore_sig+0xfe/0x13a0 [ 456.569975][T12604] ? __lock_acquire+0xb97/0x1ce0 [ 456.570020][T12604] ? __pfx___fpu_restore_sig+0x10/0x10 [ 456.570062][T12604] ? __might_fault+0xe3/0x190 [ 456.570079][T12604] ? __might_fault+0x13b/0x190 [ 456.570102][T12604] fpu__restore_sig+0x151/0x190 [ 456.570132][T12604] restore_sigcontext+0x4c9/0x6a0 [ 456.570157][T12604] ? __pfx_restore_sigcontext+0x10/0x10 [ 456.570198][T12604] ? __pfx_restore_altstack+0x10/0x10 [ 456.570227][T12604] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.570247][T12604] ? lockdep_hardirqs_on+0x7c/0x110 [ 456.570275][T12604] __do_sys_rt_sigreturn+0x1bb/0x230 [ 456.570299][T12604] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 456.570332][T12604] do_syscall_64+0xcd/0x4e0 [ 456.570357][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.570375][T12604] RIP: 0033:0x7f9c26d8eec9 [ 456.570388][T12604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.570400][T12604] RSP: 002b:00007f9c27c27038 EFLAGS: 00000246 [ 456.570411][T12604] RAX: 0000000000000000 RBX: 00007f9c26fe5fa0 RCX: 00007f9c26d8eec9 [ 456.570420][T12604] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 456.570427][T12604] RBP: 00007f9c27c27090 R08: 0000000000000000 R09: 0000000000000000 [ 456.570435][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.570446][T12604] R13: 00007f9c26fe6038 R14: 00007f9c26fe5fa0 R15: 00007ffd1a70d348 [ 456.570469][T12604] [ 456.924298][T12579] 9pnet_fd: Insufficient options for proto=fd [ 456.935582][T12608] fuse: Bad value for 'fd' [ 457.072319][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 457.102848][ T9] usb 3-1: device descriptor read/8, error -71 [ 457.232037][ T9] usb usb3-port1: unable to enumerate USB device [ 457.269885][T12615] input: syz0 as /devices/virtual/input/input21 [ 457.324508][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 457.337525][ T30] audit: type=1400 audit(1758694737.887:732): avc: denied { append } for pid=12617 comm="syz.2.1898" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 457.359459][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 457.403195][ T5911] usb 4-1: USB disconnect, device number 16 [ 458.359587][ T1225] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 458.451858][ T5931] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 458.590896][ T5931] usb 6-1: device descriptor read/64, error -71 [ 458.672747][ T1225] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 458.683590][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.710883][ T1225] usb 2-1: Product: syz [ 458.725907][ T1225] usb 2-1: Manufacturer: syz [ 458.730540][ T1225] usb 2-1: SerialNumber: syz [ 458.764602][ T1225] usb 2-1: config 0 descriptor?? [ 458.941015][ T5931] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 458.973828][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.992272][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.080950][ T5931] usb 6-1: device descriptor read/64, error -71 [ 459.191798][ T5931] usb usb6-port1: attempt power cycle [ 459.567729][ T30] audit: type=1400 audit(1758694740.117:733): avc: denied { create } for pid=12626 comm="syz.3.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 459.595700][ T30] audit: type=1400 audit(1758694740.117:734): avc: denied { bind } for pid=12626 comm="syz.3.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 459.615174][ T5931] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 459.630553][ T30] audit: type=1400 audit(1758694740.127:735): avc: denied { ioctl } for pid=12626 comm="syz.3.1901" path="socket:[37894]" dev="sockfs" ino=37894 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 459.656230][ T30] audit: type=1400 audit(1758694740.147:736): avc: denied { create } for pid=12611 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 459.677858][ T5931] usb 6-1: device descriptor read/8, error -71 [ 459.942572][ T5931] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 459.984806][ T5931] usb 6-1: device descriptor read/8, error -71 [ 460.113082][ T5931] usb usb6-port1: unable to enumerate USB device [ 460.340392][ T1161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.411102][ T5931] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 460.491561][ T1161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.562481][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 460.569059][ T5931] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 460.587949][ T5931] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 460.642507][ T5931] usb 3-1: config 254 has no interface number 0 [ 460.659489][ T1161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.680103][ T5931] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 460.717588][ T5931] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 460.747463][ T5931] usb 3-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.775877][ T1225] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 460.792179][ T5931] usb 3-1: config 254 interface 235 has no altsetting 0 [ 460.814180][ T5931] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 460.823387][ T1225] peak_usb 2-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 460.833977][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.880856][ T5931] usb 3-1: Product: syz [ 460.891501][ T5931] usb 3-1: Manufacturer: syz [ 460.896140][ T5931] usb 3-1: SerialNumber: syz [ 460.939093][T12650] fuse: Unknown parameter 'useb_id' [ 461.057630][ T1161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.180728][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.211297][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.226687][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.282889][ T1225] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 461.409479][T12672] fuse: Bad value for 'fd' [ 461.509963][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.704281][ T1225] usb 2-1: USB disconnect, device number 27 [ 461.733978][ T30] audit: type=1400 audit(1758694742.287:737): avc: denied { append } for pid=12640 comm="syz.2.1904" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 461.930072][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.949298][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.961214][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.983377][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.996941][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 462.020916][ T30] audit: type=1400 audit(1758694742.567:738): avc: denied { mounton } for pid=12675 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 462.096697][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 462.131369][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 462.166273][T12683] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 462.219759][T12675] lo speed is unknown, defaulting to 1000 [ 462.221109][ T1161] team0: left allmulticast mode [ 462.221130][ T1161] team_slave_0: left allmulticast mode [ 462.221146][ T1161] team_slave_1: left allmulticast mode [ 462.222506][ T1161] bridge0: port 3(team0) entered disabled state [ 462.241746][ T1161] bridge_slave_1: left allmulticast mode [ 462.241772][ T1161] bridge_slave_1: left promiscuous mode [ 462.242034][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.291911][ T1161] bridge_slave_0: left allmulticast mode [ 462.291928][ T1161] bridge_slave_0: left promiscuous mode [ 462.292036][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.303526][ T5931] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 462.303596][ T5931] usbtest 3-1:254.235: probe with driver usbtest failed with error -71 [ 462.335364][ T30] audit: type=1400 audit(1758694742.877:739): avc: denied { create } for pid=12677 comm="syz.5.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 462.341001][ T30] audit: type=1400 audit(1758694742.877:740): avc: denied { setopt } for pid=12677 comm="syz.5.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 462.438099][ T5931] usb 3-1: USB disconnect, device number 25 [ 462.470919][ T1225] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 462.734137][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.752093][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.764782][ T1161] bond0 (unregistering): Released all slaves [ 462.780979][ T1225] usb 2-1: Using ep0 maxpacket: 16 [ 462.796735][ T1225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 462.808864][ T1225] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 462.819865][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.852502][ T1225] usb 2-1: config 0 descriptor?? [ 462.859653][T12683] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 462.880127][ T1161] tipc: Disabling bearer [ 462.895591][ T1161] tipc: Left network mode [ 463.555829][T12683] 9pnet_fd: Insufficient options for proto=fd [ 463.599372][T12675] chnl_net:caif_netlink_parms(): no params data found [ 463.778623][T12707] fuse: Unknown parameter '€ÞÕ' [ 463.800919][ T1225] usbhid 2-1:0.0: can't add hid device: -71 [ 463.837421][ T1225] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 463.862570][ T1225] usb 2-1: USB disconnect, device number 28 [ 463.898288][ T1161] hsr_slave_0: left promiscuous mode [ 463.910253][ T1161] hsr_slave_1: left promiscuous mode [ 463.928136][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.950768][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.976423][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.986885][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.015447][ T1161] veth1_macvtap: left promiscuous mode [ 464.021766][ T1161] veth0_macvtap: left promiscuous mode [ 464.027541][ T1161] veth1_vlan: left promiscuous mode [ 464.034708][ T1161] veth0_vlan: left promiscuous mode [ 464.101067][ T50] Bluetooth: hci2: command tx timeout [ 464.700824][T12723] Driver unsupported XDP return value 0 on prog (id 294) dev N/A, expect packet loss! [ 466.181337][ T50] Bluetooth: hci2: command tx timeout [ 466.357238][ T1161] team_slave_1 (unregistering): left promiscuous mode [ 466.381863][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 466.473922][ T1161] team_slave_0 (unregistering): left promiscuous mode [ 466.486678][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 466.492132][T12743] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 466.780509][ T30] audit: type=1326 audit(1758694747.327:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 466.803893][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.820237][ T30] audit: type=1326 audit(1758694747.357:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 466.846272][ T30] audit: type=1326 audit(1758694747.367:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 466.902368][ T30] audit: type=1326 audit(1758694747.367:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 466.959957][ T30] audit: type=1326 audit(1758694747.367:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 466.986265][ T30] audit: type=1326 audit(1758694747.367:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 467.013012][ T30] audit: type=1326 audit(1758694747.367:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 467.039237][ T30] audit: type=1326 audit(1758694747.367:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 467.066431][ T30] audit: type=1326 audit(1758694747.367:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 467.265037][T12675] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.284367][T12675] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.313697][T12675] bridge_slave_0: entered allmulticast mode [ 467.332015][T12675] bridge_slave_0: entered promiscuous mode [ 467.350505][T12675] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.361234][T12675] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.368599][T12675] bridge_slave_1: entered allmulticast mode [ 467.386169][T12675] bridge_slave_1: entered promiscuous mode [ 467.407233][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 467.417467][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 467.502050][ T1225] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 467.517106][T12758] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 467.550105][T12675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.570597][T12675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.608150][T12675] team0: Port device team_slave_0 added [ 467.617401][T12675] team0: Port device team_slave_1 added [ 467.664531][T12675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.671784][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.697650][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.709958][T12675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.722323][T12675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.729264][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.755110][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.767794][T12675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.783775][ T2152] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 467.815864][ T1225] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 467.837154][ T1225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.870417][ T1225] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 467.930377][ T1225] usb 2-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 467.941346][ T2152] usb 3-1: Using ep0 maxpacket: 16 [ 467.958390][ T1161] IPVS: stop unused estimator thread 0... [ 467.991542][T12675] hsr_slave_0: entered promiscuous mode [ 468.005188][ T2152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 468.022630][T12675] hsr_slave_1: entered promiscuous mode [ 468.028321][ T2152] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 468.042472][T12675] debugfs: 'hsr0' already exists in 'hsr' [ 468.055359][ T2152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.064623][T12675] Cannot create hsr debugfs directory [ 468.088043][ T2152] usb 3-1: config 0 descriptor?? [ 468.172670][T12758] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 468.172771][ T1225] usb 2-1: config 0 interface 0 has no altsetting 0 [ 468.244030][ T1225] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 468.254335][ T1225] usb 2-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 468.262083][ T50] Bluetooth: hci2: command tx timeout [ 468.282156][ T1225] usb 2-1: Manufacturer: syz [ 468.333644][ T1225] usb 2-1: config 0 descriptor?? [ 468.502679][ T30] audit: type=1326 audit(1758694749.017:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1eb8eec9 code=0x7ffc0000 [ 468.575721][T12675] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.597692][T12758] 9pnet_fd: Insufficient options for proto=fd [ 468.620601][T12675] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.665424][T12675] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.682842][T12675] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.809949][ T2152] usbhid 3-1:0.0: can't add hid device: -71 [ 468.816330][ T2152] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 468.841598][ T2152] usb 3-1: USB disconnect, device number 26 [ 468.982151][T12675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.348451][T12782] NILFS (loop5): device size too small [ 470.221326][T12675] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.252812][T12675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.273762][T12675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.317624][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.324777][T12659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.338930][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.346071][T12659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.354546][ T50] Bluetooth: hci2: command tx timeout [ 470.955091][T12675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.338545][T12675] veth0_vlan: entered promiscuous mode [ 471.358757][T12675] veth1_vlan: entered promiscuous mode [ 471.444084][T12675] veth0_macvtap: entered promiscuous mode [ 471.491034][T12675] veth1_macvtap: entered promiscuous mode [ 471.560364][T12675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.604310][T12675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.649694][T12656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.682426][T12656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.716234][T12656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.745339][T12656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.383746][T12656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.408220][T12656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.475873][T12656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.485539][T12656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.497728][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 472.497745][ T30] audit: type=1400 audit(1758694753.047:752): avc: denied { mounton } for pid=12675 comm="syz-executor" path="/root/syzkaller.YuLyjr/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 472.535013][ T30] audit: type=1400 audit(1758694753.047:753): avc: denied { mount } for pid=12675 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 472.557235][ T30] audit: type=1400 audit(1758694753.047:754): avc: denied { mounton } for pid=12675 comm="syz-executor" path="/root/syzkaller.YuLyjr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 472.593945][ T30] audit: type=1400 audit(1758694753.047:755): avc: denied { mounton } for pid=12675 comm="syz-executor" path="/root/syzkaller.YuLyjr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 472.624283][ T30] audit: type=1400 audit(1758694753.087:756): avc: denied { mounton } for pid=12675 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 472.674872][ T30] audit: type=1400 audit(1758694753.087:757): avc: denied { mounton } for pid=12675 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 472.703541][ T30] audit: type=1400 audit(1758694753.207:758): avc: denied { write } for pid=12814 comm="syz.2.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 472.723167][T12819] overlayfs: failed to resolve './file1': -2 [ 472.736762][T12820] netlink: 'syz.6.1906': attribute type 2 has an invalid length. [ 472.761352][ T1225] usb 2-1: USB disconnect, device number 29 [ 472.784406][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.794388][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.795337][ T30] audit: type=1400 audit(1758694753.297:759): avc: denied { write } for pid=12816 comm="syz.6.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.258585][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 473.269288][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 473.282672][T12834] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 473.363647][ T30] audit: type=1400 audit(1758694753.917:760): avc: denied { getopt } for pid=12836 comm="syz.5.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 473.730906][ T1225] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 473.893161][ T1225] usb 2-1: Using ep0 maxpacket: 16 [ 473.915302][ T1225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 473.940206][ T1225] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 473.963299][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.015378][ T1225] usb 2-1: config 0 descriptor?? [ 474.357726][T12834] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.781072][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 474.814699][T12834] 9pnet_fd: Insufficient options for proto=fd [ 474.941501][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 474.952499][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.998074][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.044671][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.064928][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 475.067743][ T1225] usbhid 2-1:0.0: can't add hid device: -71 [ 475.080983][ T24] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 475.081716][ T1225] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 475.089971][ T24] usb 6-1: Product: syz [ 475.111063][ T24] usb 6-1: Manufacturer: syz [ 475.121187][ T24] usb 6-1: SerialNumber: syz [ 475.148942][ T24] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input22 [ 475.240882][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 475.334234][ T1225] usb 2-1: USB disconnect, device number 30 [ 475.418755][T12810] usb 6-1: USB disconnect, device number 24 [ 475.440376][T12810] appletouch 6-1:1.0: input: appletouch disconnected [ 475.496267][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.507736][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.517848][ T10] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 475.527102][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.540726][ T10] usb 7-1: config 0 descriptor?? [ 475.638795][ T30] audit: type=1400 audit(1758694756.187:761): avc: denied { bind } for pid=12874 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 475.724616][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'. [ 475.736406][T12878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1954'. [ 475.747112][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'. [ 475.758547][T12878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1954'. [ 475.770414][T12878] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1954'. [ 476.223315][ T10] hid-led 0003:0FC5:B080.0006: probe with driver hid-led failed with error -71 [ 476.247530][ T10] usb 7-1: USB disconnect, device number 2 [ 476.404941][T12894] bond0: Error: Cannot enslave bond to itself. [ 477.452856][T12909] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 477.475740][T12909] macvlan1: entered allmulticast mode [ 477.489138][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'. [ 477.498194][T12909] veth1_vlan: entered allmulticast mode [ 477.509965][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'. [ 477.521666][T12909] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 477.547798][T12913] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 477.642179][T12810] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 477.646796][T12918] FAULT_INJECTION: forcing a failure. [ 477.646796][T12918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.675460][T12918] CPU: 1 UID: 0 PID: 12918 Comm: syz.2.1968 Not tainted syzkaller #0 PREEMPT(full) [ 477.675495][T12918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.675504][T12918] Call Trace: [ 477.675510][T12918] [ 477.675518][T12918] dump_stack_lvl+0x16c/0x1f0 [ 477.675544][T12918] should_fail_ex+0x512/0x640 [ 477.675566][T12918] _copy_from_iter+0x29f/0x1720 [ 477.675589][T12918] ? __alloc_skb+0x200/0x380 [ 477.675608][T12918] ? __pfx__copy_from_iter+0x10/0x10 [ 477.675630][T12918] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 477.675655][T12918] netlink_sendmsg+0x829/0xdd0 [ 477.675677][T12918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.675702][T12918] ____sys_sendmsg+0xa95/0xc70 [ 477.675726][T12918] ? copy_msghdr_from_user+0x10a/0x160 [ 477.675744][T12918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.675779][T12918] ___sys_sendmsg+0x134/0x1d0 [ 477.675798][T12918] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.675835][T12918] __sys_sendmsg+0x16d/0x220 [ 477.675853][T12918] ? __pfx___sys_sendmsg+0x10/0x10 [ 477.675881][T12918] do_syscall_64+0xcd/0x4e0 [ 477.675903][T12918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.675918][T12918] RIP: 0033:0x7f0ffd58eec9 [ 477.675930][T12918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.675944][T12918] RSP: 002b:00007f0ffe451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.675958][T12918] RAX: ffffffffffffffda RBX: 00007f0ffd7e5fa0 RCX: 00007f0ffd58eec9 [ 477.675966][T12918] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 477.675973][T12918] RBP: 00007f0ffe451090 R08: 0000000000000000 R09: 0000000000000000 [ 477.675980][T12918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.675987][T12918] R13: 00007f0ffd7e6038 R14: 00007f0ffd7e5fa0 R15: 00007ffc37d3daf8 [ 477.676000][T12918] [ 477.866679][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.950852][T12810] usb 6-1: Using ep0 maxpacket: 16 [ 477.958949][T12810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 477.970416][T12810] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 477.980850][T12810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.000916][ T5911] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 478.101153][T12810] usb 6-1: config 0 descriptor?? [ 478.151178][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 478.158269][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 478.177455][ T5911] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 478.206610][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.225395][ T5911] usb 7-1: config 0 descriptor?? [ 478.232594][T12913] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 478.321284][T12922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1969'. [ 478.330479][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1969'. [ 478.343544][T12922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1969'. [ 478.356880][T12922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1969'. [ 478.640082][T12810] lua 0003:1E7D:2C2E.0007: global environment stack underflow [ 478.714855][T12810] lua 0003:1E7D:2C2E.0007: item 0 4 1 11 parsing failed [ 478.800205][T12904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.855356][T12913] 9pnet_fd: Insufficient options for proto=fd [ 478.864401][T12810] lua 0003:1E7D:2C2E.0007: parse failed [ 478.895907][T12810] lua 0003:1E7D:2C2E.0007: probe with driver lua failed with error -22 [ 478.947400][T12932] input: syz1 as /devices/virtual/input/input23 [ 479.111808][ T5911] usbhid 7-1:0.0: can't add hid device: -71 [ 479.133260][ T5911] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 479.133430][T12940] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 479.181266][ T5911] usb 7-1: USB disconnect, device number 3 [ 479.796984][T12965] netlink: 384 bytes leftover after parsing attributes in process `syz.2.1981'. [ 480.538804][ T5911] usb 6-1: USB disconnect, device number 25 [ 480.648603][T12978] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 480.697699][T12978] netlink: 'syz.1.1986': attribute type 4 has an invalid length. [ 480.729375][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 480.729394][ T30] audit: type=1400 audit(1758694761.267:769): avc: denied { write } for pid=12977 comm="syz.1.1986" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 480.739033][T12978] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1986'. [ 481.164187][ T30] audit: type=1400 audit(1758694761.427:770): avc: denied { search } for pid=12983 comm="syz.0.1988" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 481.203513][T12978] program syz.1.1986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.256214][ T30] audit: type=1400 audit(1758694761.427:771): avc: denied { search } for pid=12983 comm="syz.0.1988" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 481.374174][ T30] audit: type=1400 audit(1758694761.747:772): avc: denied { connect } for pid=12985 comm="syz.5.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 481.584864][ T30] audit: type=1400 audit(1758694762.137:773): avc: denied { map } for pid=12990 comm="syz.1.1990" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 481.608454][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.675804][T12988] netlink: 'syz.5.1989': attribute type 3 has an invalid length. [ 481.713169][ T30] audit: type=1400 audit(1758694762.137:774): avc: denied { execute } for pid=12990 comm="syz.1.1990" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 481.737127][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.746748][T12988] netlink: 'syz.5.1989': attribute type 3 has an invalid length. [ 481.760624][ T24] IPVS: starting estimator thread 0... [ 481.861902][T13002] IPVS: using max 41 ests per chain, 98400 per kthread [ 481.889895][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 481.890104][ T30] audit: type=1400 audit(1758694762.437:775): avc: denied { getopt } for pid=13006 comm="syz.0.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 481.945917][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 481.974887][T13009] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 482.221613][T13015] syz.2.1995 (13015): /proc/13010/oom_adj is deprecated, please use /proc/13010/oom_score_adj instead. [ 482.258406][T12810] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 482.468818][ T30] audit: type=1400 audit(1758694763.007:776): avc: denied { setattr } for pid=13016 comm="syz.0.1997" name="dmmidi2" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 482.516215][T12810] usb 2-1: Using ep0 maxpacket: 16 [ 482.545917][T12810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 482.569749][T12810] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 482.597642][T12810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.607903][T13018] kvm: MONITOR instruction emulated as NOP! [ 482.811690][T12810] usb 2-1: config 0 descriptor?? [ 482.817364][T13007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 483.050981][ T5898] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 483.221490][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 483.241943][ T5898] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 483.261270][T13034] netlink: 384 bytes leftover after parsing attributes in process `syz.2.2003'. [ 483.271271][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.355356][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 483.362923][ T5898] pvrusb2: ********** [ 483.370616][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 483.406037][T13007] 9pnet_fd: Insufficient options for proto=fd [ 483.413121][ T5898] pvrusb2: Important functionality might not be entirely working. [ 483.466726][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 483.517236][ T5898] pvrusb2: ********** [ 483.590936][ T30] audit: type=1400 audit(1758694764.137:777): avc: denied { read } for pid=13016 comm="syz.0.1997" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 483.591676][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.704735][ T30] audit: type=1400 audit(1758694764.137:778): avc: denied { open } for pid=13016 comm="syz.0.1997" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 483.732353][T12810] usbhid 2-1:0.0: can't add hid device: -71 [ 483.738331][T12810] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 483.789442][T13041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.805236][T12810] usb 2-1: USB disconnect, device number 31 [ 483.816191][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.931613][ T2340] pvrusb2: Invalid write control endpoint [ 484.084147][ T2340] pvrusb2: Invalid write control endpoint [ 484.118985][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 484.128859][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 484.156934][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 484.168762][ T2340] pvrusb2: Device being rendered inoperable [ 484.177657][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 484.186854][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 484.226911][ T2340] pvrusb2: Attached sub-driver cx25840 [ 484.237926][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 484.248654][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 484.418972][T13057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2008'. [ 485.166522][T13058] syz.6.2007 (13058) used greatest stack depth: 17768 bytes left [ 485.320541][ T2152] usb 1-1: USB disconnect, device number 11 [ 485.930264][T13091] fuse: Unknown parameter '0x0000000000000009000000000000000000000x0000000000000009' [ 485.960296][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 485.976603][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 485.988818][T13094] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 486.079022][T13099] netlink: 384 bytes leftover after parsing attributes in process `syz.0.2020'. [ 486.240908][T12810] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 486.420955][T12810] usb 3-1: Using ep0 maxpacket: 16 [ 486.430323][T13108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26912 sclass=netlink_route_socket pid=13108 comm=syz.6.2023 [ 486.467868][T12810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 486.481945][T13108] batadv_slave_1: entered allmulticast mode [ 486.492813][T12810] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 486.519188][T12810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.540321][T12810] usb 3-1: config 0 descriptor?? [ 486.552290][T13107] batadv_slave_1: left allmulticast mode [ 486.554045][T13094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 486.669044][T13110] batadv_slave_1: entered allmulticast mode [ 486.760561][T13109] batadv_slave_1: left allmulticast mode [ 486.960654][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 486.966930][ T30] audit: type=1400 audit(1758694767.507:783): avc: denied { getopt } for pid=13116 comm="syz.6.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 486.995699][T13094] 9pnet_fd: Insufficient options for proto=fd [ 487.210660][T12810] usbhid 3-1:0.0: can't add hid device: -71 [ 487.225261][T12810] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 487.250121][T12810] usb 3-1: USB disconnect, device number 27 [ 489.054385][ T30] audit: type=1400 audit(1758694769.607:784): avc: denied { create } for pid=13134 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 489.183229][ T30] audit: type=1400 audit(1758694769.717:785): avc: denied { connect } for pid=13134 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 489.273150][ T30] audit: type=1400 audit(1758694769.827:786): avc: denied { read } for pid=13134 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 489.339628][ T30] audit: type=1400 audit(1758694769.887:787): avc: denied { write } for pid=13134 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 489.681574][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 489.925593][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 490.024618][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 490.553220][T13156] bond1: entered promiscuous mode [ 491.657806][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 491.673498][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 491.727932][T13176] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 492.020967][ T5911] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 492.030884][T12810] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 492.211327][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 492.215762][T12810] usb 7-1: config index 0 descriptor too short (expected 36, got 35) [ 492.215818][T12810] usb 7-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 492.215888][T12810] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.215927][T12810] usb 7-1: config 0 interface 0 has no altsetting 0 [ 492.215991][T12810] usb 7-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 492.216022][T12810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.216830][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 492.216984][ T5911] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 492.217051][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.233360][T12810] usb 7-1: config 0 descriptor?? [ 492.233774][ T5911] usb 2-1: config 0 descriptor?? [ 492.257866][T13176] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 492.367532][T12810] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 492.668664][T13176] 9pnet_fd: Insufficient options for proto=fd [ 492.784835][T13197] FAULT_INJECTION: forcing a failure. [ 492.784835][T13197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.798734][T13197] CPU: 1 UID: 0 PID: 13197 Comm: syz.0.2050 Not tainted syzkaller #0 PREEMPT(full) [ 492.798761][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.798772][T13197] Call Trace: [ 492.798778][T13197] [ 492.798784][T13197] dump_stack_lvl+0x16c/0x1f0 [ 492.798816][T13197] should_fail_ex+0x512/0x640 [ 492.798842][T13197] _copy_to_user+0x32/0xd0 [ 492.798879][T13197] bpf_test_finish.isra.0+0x570/0x6e0 [ 492.798902][T13197] ? find_held_lock+0x2b/0x80 [ 492.798926][T13197] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 492.798949][T13197] ? find_held_lock+0x2b/0x80 [ 492.798971][T13197] ? bpf_test_timer_leave+0xb3/0x170 [ 492.798993][T13197] bpf_prog_test_run_flow_dissector+0x51f/0x700 [ 492.799026][T13197] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 492.799051][T13197] ? find_held_lock+0x2b/0x80 [ 492.799071][T13197] ? __fget_files+0x204/0x3c0 [ 492.799092][T13197] ? __fget_files+0x20e/0x3c0 [ 492.799107][T13197] ? __might_fault+0x70/0x190 [ 492.799127][T13197] ? fput+0x9b/0xd0 [ 492.799146][T13197] ? __bpf_prog_get+0x97/0x2a0 [ 492.799163][T13197] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 492.799185][T13197] __sys_bpf+0x1050/0x4de0 [ 492.799208][T13197] ? __pfx___sys_bpf+0x10/0x10 [ 492.799228][T13197] ? ksys_write+0x190/0x250 [ 492.799247][T13197] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 492.799280][T13197] ? fput+0x9b/0xd0 [ 492.799300][T13197] ? ksys_write+0x1ac/0x250 [ 492.799317][T13197] ? __pfx_ksys_write+0x10/0x10 [ 492.799338][T13197] __x64_sys_bpf+0x78/0xc0 [ 492.799359][T13197] ? lockdep_hardirqs_on+0x7c/0x110 [ 492.799380][T13197] do_syscall_64+0xcd/0x4e0 [ 492.799404][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.799420][T13197] RIP: 0033:0x7f4b6258eec9 [ 492.799433][T13197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.799449][T13197] RSP: 002b:00007f4b634e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.799465][T13197] RAX: ffffffffffffffda RBX: 00007f4b627e5fa0 RCX: 00007f4b6258eec9 [ 492.799476][T13197] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 492.799485][T13197] RBP: 00007f4b634e9090 R08: 0000000000000000 R09: 0000000000000000 [ 492.799495][T13197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.799503][T13197] R13: 00007f4b627e6038 R14: 00007f4b627e5fa0 R15: 00007ffe1cf08728 [ 492.799525][T13197] [ 493.071824][ T5911] usbhid 2-1:0.0: can't add hid device: -71 [ 493.077863][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 493.098374][ T5911] usb 2-1: USB disconnect, device number 32 [ 493.545055][ T30] audit: type=1400 audit(1758694774.097:788): avc: denied { read write } for pid=13209 comm="syz.5.2054" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 493.844312][ T30] audit: type=1400 audit(1758694774.097:789): avc: denied { open } for pid=13209 comm="syz.5.2054" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 493.878269][ T30] audit: type=1400 audit(1758694774.097:790): avc: denied { ioctl } for pid=13209 comm="syz.5.2054" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 494.126324][T13218] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 494.145937][T13227] netlink: 384 bytes leftover after parsing attributes in process `syz.2.2058'. [ 494.401078][ T2152] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 494.661443][ T2152] usb 1-1: Using ep0 maxpacket: 8 [ 494.670474][ T2152] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 494.679896][ T2152] usb 1-1: config 179 has no interface number 0 [ 494.686914][ T2152] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 494.710983][ T30] audit: type=1400 audit(1758694775.257:791): avc: denied { bind } for pid=13229 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.731808][ T2152] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 494.744962][ T2152] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.759151][ T30] audit: type=1400 audit(1758694775.257:792): avc: denied { listen } for pid=13229 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.781649][ T2152] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 494.815528][ T2152] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.834793][ T30] audit: type=1400 audit(1758694775.257:793): avc: denied { connect } for pid=13229 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.860287][ T24] usb 7-1: USB disconnect, device number 4 [ 494.899989][ T2152] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 494.916130][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.924731][ T30] audit: type=1400 audit(1758694775.257:794): avc: denied { write } for pid=13229 comm="syz.5.2060" path="socket:[40570]" dev="sockfs" ino=40570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.955155][T13218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 494.969570][ T30] audit: type=1400 audit(1758694775.257:795): avc: denied { connect } for pid=13229 comm="syz.5.2060" lport=50811 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 495.005671][ T30] audit: type=1400 audit(1758694775.257:796): avc: denied { ioctl } for pid=13229 comm="syz.5.2060" path="socket:[40568]" dev="sockfs" ino=40568 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 495.169784][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input24 [ 495.443337][ T5898] usb 1-1: USB disconnect, device number 12 [ 495.443449][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 495.457910][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 495.766044][T13245] tty tty25: ldisc open failed (-12), clearing slot 24 [ 496.206739][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 496.231195][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 496.249141][T13255] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 496.331003][ T30] audit: type=1400 audit(1758694776.877:797): avc: denied { append } for pid=13252 comm="syz.2.2065" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 496.511384][ T5898] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 496.870954][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 496.884707][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 496.901564][ T5898] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 496.973855][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.018485][ T5898] usb 7-1: config 0 descriptor?? [ 497.040566][T13255] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 497.419535][T13274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2071'. [ 497.464861][T13255] 9pnet_fd: Insufficient options for proto=fd [ 497.705581][ T5898] usbhid 7-1:0.0: can't add hid device: -71 [ 497.791126][ T5898] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 498.265601][ T5898] usb 7-1: USB disconnect, device number 5 [ 498.297165][T13286] netlink: 384 bytes leftover after parsing attributes in process `syz.0.2075'. [ 499.476251][ T5898] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 499.660995][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 500.141404][ T5898] usb 6-1: config 0 interface 0 has no altsetting 0 [ 500.178930][ T5898] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 500.188518][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.200706][ T5898] usb 6-1: Product: syz [ 500.205222][ T5898] usb 6-1: Manufacturer: syz [ 500.209822][ T5898] usb 6-1: SerialNumber: syz [ 500.222097][ T5898] usb 6-1: config 0 descriptor?? [ 501.015096][ T5898] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 501.064063][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.468171][T13329] netlink: 384 bytes leftover after parsing attributes in process `syz.1.2084'. [ 501.496410][ T2152] usb 6-1: USB disconnect, device number 26 [ 501.542499][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 501.555490][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 501.576767][T13331] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 501.821055][ T5898] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 502.034429][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 502.133908][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 502.145424][ T5898] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 502.164331][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.200559][ T5898] usb 7-1: config 0 descriptor?? [ 502.207741][T13331] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 502.774580][T13331] 9pnet_fd: Insufficient options for proto=fd [ 503.055024][ T5898] usbhid 7-1:0.0: can't add hid device: -71 [ 503.061259][ T5898] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 503.142165][ T5898] usb 7-1: USB disconnect, device number 6 [ 503.445333][T13350] netlink: 384 bytes leftover after parsing attributes in process `syz.5.2092'. [ 504.376619][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 504.376635][ T30] audit: type=1326 audit(1758694784.927:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13362 comm="syz.1.2096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d1eb8eec9 code=0x0 [ 505.017343][T13368] netlink: 5884 bytes leftover after parsing attributes in process `syz.5.2097'. [ 505.092288][T13377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2097'. [ 505.130132][T13377] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2097'. [ 505.541588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.554159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.566647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.579320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.591702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.604539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.616918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.629649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.641996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.654641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.357823][T13391] netlink: 384 bytes leftover after parsing attributes in process `syz.6.2102'. [ 510.551293][ C0] net_ratelimit: 12071 callbacks suppressed [ 510.551311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.570154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.582797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.595189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.607937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.620222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.632853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.645120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.657601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.669969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.561399][ C0] net_ratelimit: 12236 callbacks suppressed [ 515.561415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.579587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.592047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.604280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.616890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.629144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.641763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.654039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.666673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.678958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.680826][ C0] sched: DL replenish lagged too much [ 520.571286][ C0] net_ratelimit: 12102 callbacks suppressed [ 520.571302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.589600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.602081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.614328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.626955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.639189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.651641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.663915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.676406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.688785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.580809][ C0] net_ratelimit: 14330 callbacks suppressed [ 525.580830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.581078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.587689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.599111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.611086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.623080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.635451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.646805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.658737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.670849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.591156][ C0] net_ratelimit: 15317 callbacks suppressed [ 530.591176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.591282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.598125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.609410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.621435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.633375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.645323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.657072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.671027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.681010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.601187][ C1] net_ratelimit: 15397 callbacks suppressed [ 535.601210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.601807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.607590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.619824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.631627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.643547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.655412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.667949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.679267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.691144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.610918][ C1] net_ratelimit: 15455 callbacks suppressed [ 540.610941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.610965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.617346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.629437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.641368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.653182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.664994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.677901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.688916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.700978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.620976][ C1] net_ratelimit: 15698 callbacks suppressed [ 545.620996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.621077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.627418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.639474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.651541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.664096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.675205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.687284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.699295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.711147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.630958][ C1] net_ratelimit: 15614 callbacks suppressed [ 550.630979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.631158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.637326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.649698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.661334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.673733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.685036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.697105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.709006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.720937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.641063][ C1] net_ratelimit: 12931 callbacks suppressed [ 555.641085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.641997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.647459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.659421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.671332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.683334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.695214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.710397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.719050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.731060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.651016][ C1] net_ratelimit: 11527 callbacks suppressed [ 560.651040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.653351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.657831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.669929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.681843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.693674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.705523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.719837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.729576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.741607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 564.870215][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.661272][ C1] net_ratelimit: 11777 callbacks suppressed [ 565.661293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.662784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.667600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.679566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.691616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.703427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.715298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.729549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.739177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.751009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.671340][ C1] net_ratelimit: 11880 callbacks suppressed [ 570.671366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.681772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.689726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.701687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.713972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.725828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.737552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.752238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.761666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.773411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.680871][ C1] net_ratelimit: 11460 callbacks suppressed [ 575.680891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.683649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.687217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.699245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.711233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.723138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.734926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.749644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.758846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.770689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.690987][ C1] net_ratelimit: 11906 callbacks suppressed [ 580.691011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.692825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.697361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.709321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.721352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.733316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.745051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.759449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.769003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.780829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.700858][ C1] net_ratelimit: 12242 callbacks suppressed [ 585.700880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.702400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.707238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.719286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.731550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.743431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.755241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.770100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.779193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.791202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.711226][ C1] net_ratelimit: 12243 callbacks suppressed [ 590.711247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.713241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.717613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.729585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.741658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.753452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.765306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.779660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.789245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.801050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.720774][ C1] net_ratelimit: 11633 callbacks suppressed [ 595.720796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.722501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.727194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.739027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.751038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 595.763073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.774813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.789505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.798754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.810723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.731175][ C1] net_ratelimit: 11294 callbacks suppressed [ 600.731195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.731477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.737590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.749431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.761462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 600.773457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.785216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.800548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.809123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.821026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.740932][ C1] net_ratelimit: 11861 callbacks suppressed [ 605.740954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.743315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.747527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.759392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.771217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 605.783499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.795143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.810329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.819074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.830965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.750949][ C1] net_ratelimit: 11463 callbacks suppressed [ 610.750970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.754518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.757342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 610.769335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.781261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.793312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.805195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.820724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.828895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 610.840864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.950753][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 610.957732][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13325/1:b..l [ 610.966346][ C1] rcu: (detected by 1, t=10503 jiffies, g=58609, q=102759 ncpus=2) [ 610.974328][ C1] task:syz.0.2085 state:R running task stack:26808 pid:13325 tgid:13322 ppid:5848 task_flags:0x40054c flags:0x00004000 [ 610.989017][ C1] Call Trace: [ 610.992315][ C1] [ 610.995251][ C1] __schedule+0x1190/0x5de0 [ 610.999779][ C1] ? __pfx___schedule+0x10/0x10 [ 611.004634][ C1] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 611.010368][ C1] ? exit_to_user_mode_loop+0x84/0x110 [ 611.015832][ C1] ? __kernel_text_address+0xd/0x40 [ 611.021058][ C1] ? mark_held_locks+0x49/0x80 [ 611.025833][ C1] preempt_schedule_irq+0x51/0x90 [ 611.030865][ C1] irqentry_exit+0x36/0x90 [ 611.035287][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.041277][ C1] RIP: 0010:kasan_byte_accessible+0x1d/0x30 [ 611.047188][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f b6 07 3c 07 0f 96 c0 8e d0 75 09 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 [ 611.066814][ C1] RSP: 0018:ffffc900038af008 EFLAGS: 00000297 [ 611.072897][ C1] RAX: 0000000000000001 RBX: ffffffff8e5c15a0 RCX: 0000000000000002 [ 611.080878][ C1] RDX: 0000000000000000 RSI: ffffffff822c207d RDI: fffffbfff1cb82b4 [ 611.088858][ C1] RBP: ffffffff8e5c15a0 R08: 0000000000000000 R09: 0000000000000000 [ 611.096834][ C1] R10: 0000000005a4029d R11: 0000000000005d05 R12: ffffffff822c207d [ 611.104818][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.112801][ C1] ? __update_page_owner_free_handle.constprop.0+0x4d/0x4a0 [ 611.120103][ C1] ? __update_page_owner_free_handle.constprop.0+0x4d/0x4a0 [ 611.127402][ C1] __kasan_check_byte+0x13/0x50 [ 611.132269][ C1] lock_acquire+0xfc/0x350 [ 611.136696][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 611.142857][ C1] ? tlb_flush_mmu+0xe9/0x5a0 [ 611.147542][ C1] ? unmap_page_range+0x1f43/0x42c0 [ 611.152754][ C1] ? unmap_single_vma.constprop.0+0x153/0x240 [ 611.158832][ C1] ? unmap_vmas+0x218/0x470 [ 611.163345][ C1] ? exit_mmap+0x1b9/0xb90 [ 611.167747][ C1] __update_page_owner_free_handle.constprop.0+0x4d/0x4a0 [ 611.174850][ C1] ? __update_page_owner_free_handle.constprop.0+0x3c/0x4a0 [ 611.182107][ C1] __reset_page_owner+0x93/0x1a0 [ 611.187016][ C1] free_unref_folios+0xa61/0x16b0 [ 611.192017][ C1] ? mark_held_locks+0x49/0x80 [ 611.196755][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 611.202535][ C1] folios_put_refs+0x56f/0x740 [ 611.207275][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 611.212533][ C1] ? rcu_is_watching+0x12/0xc0 [ 611.217270][ C1] ? trace_mm_page_alloc+0x11f/0x1a0 [ 611.222533][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 611.228141][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 611.234285][ C1] ? __folio_rmap_sanity_checks+0x2cc/0x770 [ 611.240186][ C1] ? __pfx___might_resched+0x10/0x10 [ 611.245464][ C1] ? folio_remove_rmap_ptes+0x138/0x970 [ 611.250995][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 611.256955][ C1] ? find_held_lock+0x2b/0x80 [ 611.261607][ C1] tlb_flush_mmu+0xe9/0x5a0 [ 611.266087][ C1] unmap_page_range+0x1f43/0x42c0 [ 611.271096][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 611.276441][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 611.281373][ C1] ? uprobe_munmap+0x20/0x5c0 [ 611.286052][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 611.291940][ C1] unmap_vmas+0x218/0x470 [ 611.296247][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 611.301079][ C1] exit_mmap+0x1b9/0xb90 [ 611.305300][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 611.310056][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 611.314994][ C1] __mmput+0x12a/0x410 [ 611.319043][ C1] mmput+0x62/0x70 [ 611.322753][ C1] do_exit+0x7c7/0x2bf0 [ 611.326891][ C1] ? __pfx_do_exit+0x10/0x10 [ 611.331454][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 611.336449][ C1] ? find_held_lock+0x2b/0x80 [ 611.341101][ C1] do_group_exit+0xd3/0x2a0 [ 611.345580][ C1] get_signal+0x2673/0x26d0 [ 611.350062][ C1] ? __pfx_get_signal+0x10/0x10 [ 611.354885][ C1] ? do_futex+0x122/0x350 [ 611.359192][ C1] ? __pfx_do_futex+0x10/0x10 [ 611.363844][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 611.369366][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 611.375510][ C1] ? xfd_validate_state+0x61/0x180 [ 611.380599][ C1] exit_to_user_mode_loop+0x84/0x110 [ 611.385855][ C1] do_syscall_64+0x41c/0x4e0 [ 611.390423][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.396291][ C1] RIP: 0033:0x7f4b6258eec9 [ 611.400677][ C1] RSP: 002b:00007f4b634c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 611.409061][ C1] RAX: fffffffffffffe00 RBX: 00007f4b627e6098 RCX: 00007f4b6258eec9 [ 611.417005][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b627e6098 [ 611.424947][ C1] RBP: 00007f4b627e6090 R08: 0000000000000000 R09: 0000000000000000 [ 611.432888][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.440829][ C1] R13: 00007f4b627e6128 R14: 00007ffe1cf08640 R15: 00007ffe1cf08728 [ 611.448778][ C1] [ 615.760924][ C1] net_ratelimit: 9750 callbacks suppressed [ 615.760941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.760945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 615.761385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.767378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.779279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.791289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.806785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.815057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 615.826907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.838877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.770866][ C1] net_ratelimit: 10691 callbacks suppressed [ 620.770885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 620.771819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.777224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.789250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.801514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.813397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.825298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 620.840652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.849112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.861062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)