last executing test programs: 33.200523526s ago: executing program 4 (id=364): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="40000000210000d5d1194c2ae5864a9ace20a47446de1da93c9248dda71f954606ffc7fdef87392f7870d7cf8fe774e5632b969a76002c36a7ee4eaa1a797dbbd643aab68bd4cccaa3d7c36927b384efc159bfafb297082b50ae3131eed3648676cb717e72fefb076181914716813787bffe81e829ea3f3580f84a"], 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xd08, &(0x7f0000000040)={0x77359400}) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_vs\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r0, 0xa) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x83, @any, 0x0, 0x2}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x44, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x21, &(0x7f0000000000)=0x38000000, 0x4) 32.901731115s ago: executing program 3 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 32.878502448s ago: executing program 2 (id=367): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0x7}, {0x16, 0x2, 0x9}]}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xb, 0x10}, {0x3, 0xfff3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r3) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) 32.340654728s ago: executing program 4 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000019300)={0x1, @vbi={0x1, 0x7, 0xf160, 0x35315241, [0x1, 0x4], [0x101, 0x7], 0x1}}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x10000, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) 32.310779182s ago: executing program 3 (id=370): signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)}, {&(0x7f0000000280)=""/106, 0x6a}], 0x2, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffd80, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000000)) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x40000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 31.81926151s ago: executing program 2 (id=371): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x771d, 0xc0140) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000340)={0x0, @bt={0x4, 0x4, 0x0, 0x3, 0xe, 0x2, 0xa, 0x5, 0x80000000, 0x4, 0x200, 0x276, 0x0, 0x40, 0x18, 0x8, {0x3, 0x3}, 0x9, 0x5c}}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x66, 0x0, @thr={0x0, 0x0}}) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0x2000, 0x89000}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) 30.987445525s ago: executing program 2 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d475a04895ebdf6ee3f66dc10cc3d669b61fd0f686bcfdf112e2781987041240b796f16791bfd864091fe4f931ed0d5e12fb2d3aa6b22edf5e2d06bf8f9", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x70, 0x7, 0x10002}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001100)) read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x7, 0xffffffff8480ef44, 0x0, 0x400, 0x0, 0x1, 0x0, 0x0, 0x40, 0x73}}, 0xa8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f3"], 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x2}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x201, 0xfffffffffffffffc) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000008, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200282}) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000001c0)=0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r9) sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf2512000000"], 0x14}}, 0x20000000) getdents64(r4, 0x0, 0x0) 30.962570297s ago: executing program 0 (id=374): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x10) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x2}, {}, @time=@tick=0xb}, {0x10, 0xfa, 0x94, 0xfe, @time={0x4, 0x80000007}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x6}, {}, {0x0, 0x6}, @time}], 0x54) prctl$PR_SET_MM(0x23, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) 30.035081696s ago: executing program 1 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000019300)={0x1, @vbi={0x1, 0x7, 0xf160, 0x35315241, [0x1, 0x4], [0x101, 0x7], 0x1}}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x10000, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 30.032946503s ago: executing program 4 (id=376): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x91000a7a) (async) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x40, 0xf, 0x6, "64f7b17bbd41"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x20, 0x9, 0x2, "66e7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.9630985s ago: executing program 3 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) socket(0x2, 0x80805, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000019300)={0x1, @vbi={0x1, 0x7, 0xf160, 0x35315241, [0x1, 0x4], [0x101, 0x7], 0x1}}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x10000, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 29.050243792s ago: executing program 1 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x24, 0x0, 0x0) 28.944710343s ago: executing program 2 (id=379): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc8202) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xffffffff, 0xea, 0x442, 0x0, 0x32, 0x0, 0xaa}, 0x9c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="e8bd7deaccdc72e5eb56ccd00b700148072adc9b40d33e25441e1f23dc92ecdfe31c52d3622b2401451c035d99d9e1621d081345be2551b9ca83797292e23dbe9b5f0865eb9727871816a2b68c1f32", @ANYRES64=0x0], 0x10) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x20}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 28.250929881s ago: executing program 0 (id=380): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc8202) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xffffffff, 0xea, 0x442, 0x0, 0x32, 0x0, 0xaa}, 0x9c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="e8bd7deaccdc72e5eb56ccd00b700148072adc9b40d33e25441e1f23dc92ecdfe31c52d3622b2401451c035d99d9e1621d081345be2551b9ca83797292e23dbe9b5f0865eb9727871816a2b68c1f32", @ANYRES64=0x0], 0x10) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x20}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 27.879927902s ago: executing program 1 (id=381): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0x7}, {0x16, 0x2, 0x9}]}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xb, 0x10}, {0x3, 0xfff3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r3) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) 27.457352965s ago: executing program 4 (id=382): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x6, 0x3, 0xa42c}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 27.324074304s ago: executing program 3 (id=383): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 26.325974102s ago: executing program 3 (id=384): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x771d, 0xc0140) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000340)={0x0, @bt={0x4, 0x4, 0x0, 0x3, 0xe, 0x2, 0xa, 0x5, 0x80000000, 0x4, 0x200, 0x276, 0x0, 0x40, 0x18, 0x8, {0x3, 0x3}, 0x9, 0x5c}}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x66, 0x0, @thr={0x0, 0x0}}) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0x2000, 0x89000}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) 25.590569211s ago: executing program 0 (id=385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x10}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sync_file_range(r1, 0x20000, 0x0, 0x6) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000cc0)=[{&(0x7f00000006c0)='7$K', 0x3}, {&(0x7f0000000740)="781cb6", 0x3}], 0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000881}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="55a6b82a04f49941ad8cbc2d9235ad2424a7c6d73c596b36c2e417c1716401bcdf9aed25e78b42a41981439f32a84d8d9e057e1b9b99197242e3f3edbf72d5600230d0fe3bb5ec3fec60f77fca797def8c13546cf14771ee2856329fa9dbf591a04ebd10d3ccc9f2ebe385fd842d44c60aeb5cf3f6f40b07f03b19e5167c46ba9abd7f4207ba101b25e4c44ab0713eca663e49071ea5d2d31285ab87fa3704aa082f78c91ca13fc88c6d943f7c497ff2db35d8c9deb8eea512caa1d265d3107db1af432ed6f422a46d198435a9d6dc3b0d69cae5e513a3", @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x20048014}, 0x20008800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x13, 0x0, 0x0) r5 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x800, 0x2, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x24000040) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xfdef) 24.7029757s ago: executing program 3 (id=386): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x6, 0x3, 0xa42c}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 24.404344805s ago: executing program 1 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000019300)={0x1, @vbi={0x1, 0x7, 0xf160, 0x35315241, [0x1, 0x4], [0x101, 0x7], 0x1}}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x10000, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) 24.029029719s ago: executing program 2 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000019300)={0x1, @vbi={0x1, 0x7, 0xf160, 0x35315241, [0x1, 0x4], [0x101, 0x7], 0x1}}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x10000, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 23.485665104s ago: executing program 1 (id=389): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400010000000900020073797a32000000000500050002000005050001000600000013000300686173683a6e65742c69666163650000"], 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400010000000900020073797a32000000000500050002000005050001000600000013000300686173683a6e65742c69666163650000"], 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000000306010200001800000000000200000609000200"], 0x28}, 0x1, 0x0, 0x0, 0x4845}, 0x200408f0) fcntl$lock(r4, 0x26, 0x0) (async) fcntl$lock(r4, 0x26, 0x0) getpgrp(0x0) (async) r5 = getpgrp(0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e, r5}) (async) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e, r5}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) (async) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) 23.029775067s ago: executing program 2 (id=390): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x14, r4, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x40814}, 0x24068810) (fail_nth: 1) 22.895973236s ago: executing program 4 (id=391): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911", 0x2f, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f62308197", 0x6a}], 0x1, &(0x7f00000008c0)=[@iv={0xb0, 0x117, 0x2, 0x9a, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc86"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xc8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec", 0xa7}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0", 0xc9}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610", 0xd4}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21.736012942s ago: executing program 0 (id=392): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0xfffffffffffffffc, 0x1205000, 0x800, 0x203}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x8000000000009) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) fcntl$setstatus(r4, 0x4, 0x25c00) waitid$P_PIDFD(0x3, r6, 0x0, 0x8, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000000580)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/155, 0x9b}], 0x1, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x810, 0xffffffffffffffff, 0xf0e5e000) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fcntl$setlease(r8, 0x400, 0x1) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') r9 = fanotify_init(0x8, 0x1000) fanotify_mark(r9, 0x40, 0x10000000, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x91) 20.514340739s ago: executing program 1 (id=393): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) 20.413897591s ago: executing program 0 (id=394): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 20.369183054s ago: executing program 4 (id=395): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0x2, 0x4a23, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='I', 0x1}], 0x1}}], 0x1, 0x20048801) recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) shutdown(r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x73622a85, 0x10a, 0x3}, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20.100423079s ago: executing program 0 (id=396): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) creat(&(0x7f00000002c0)='./file0\x00', 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) fcntl$notify(r2, 0x402, 0x2e299a719220269e) 0s ago: executing program 32 (id=393): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) kernel console output (not intermixed with test programs): 104.352621][ T5724] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 104.368675][ T5724] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 104.388223][ T29] audit: type=1400 audit(1781308811.596:332): avc: denied { open } for pid=6334 comm="syz.0.136" path="/dev/input/event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.421154][ T5724] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 104.442930][ T5724] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 104.462042][ T5724] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 104.464792][ T29] audit: type=1804 audit(1781308811.756:333): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.131" name="/newroot/27/file0" dev="tmpfs" ino=157 res=1 errno=0 [ 104.470745][ T6319] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 104.526256][ T5724] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 104.544511][ T6319] ref_ctr decrement failed for inode: 0x9d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888020796200 [ 104.557259][ T6319] uprobe: syz.2.131:6319 failed to unregister, leaking uprobe [ 104.737005][ T5724] usb 3-1: USB disconnect, device number 10 [ 104.757233][ T30] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.817164][ T5818] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.876752][ T5710] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 104.920146][ T30] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 104.929615][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.937993][ T30] usb 4-1: Product: syz [ 104.942243][ T30] usb 4-1: Manufacturer: syz [ 104.947438][ T30] usb 4-1: SerialNumber: syz [ 104.955239][ T30] usb 4-1: config 0 descriptor?? [ 104.964143][ T30] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 104.973511][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 104.980083][ T5818] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 104.989583][ T5818] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 105.001110][ T5818] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 105.012460][ T5710] usb 2-1: device descriptor read/64, error -71 [ 105.019812][ T5818] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 105.033069][ T5818] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.042019][ T5818] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 105.051308][ T5818] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 105.059776][ T5818] usb 5-1: Product: syz [ 105.063986][ T5818] usb 5-1: Manufacturer: syz [ 105.068631][ T5818] usb 5-1: SerialNumber: syz [ 105.075795][ T5818] usb 5-1: config 0 descriptor?? [ 105.085317][ T5818] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 105.106093][ T5818] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 105.169099][ T30] sonixb 4-1:0.0: Error reading register 00: -71 [ 105.178276][ T30] usb 4-1: USB disconnect, device number 7 [ 105.268003][ T5710] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 105.410358][ T5818] usb 5-1: USB disconnect, device number 7 [ 105.419317][ T5710] usb 2-1: device descriptor read/64, error -71 [ 105.430345][ T6352] FAULT_INJECTION: forcing a failure. [ 105.430345][ T6352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.445845][ T5818] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 105.457235][ T6352] CPU: 1 UID: 0 PID: 6352 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT(full) [ 105.457259][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.457269][ T6352] Call Trace: [ 105.457275][ T6352] [ 105.457282][ T6352] dump_stack_lvl+0x100/0x190 [ 105.457308][ T6352] should_fail_ex.cold+0x5/0xa [ 105.457332][ T6352] copy_fpstate_to_sigframe+0x842/0xb00 [ 105.457353][ T6352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.457379][ T6352] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 105.457418][ T6352] ? posixtimer_deliver_signal+0x3c3/0x690 [ 105.457453][ T6352] ? x86_task_fpu+0x5f/0x90 [ 105.457481][ T6352] get_sigframe+0x3fb/0x940 [ 105.457511][ T6352] ? __pfx_get_sigframe+0x10/0x10 [ 105.457539][ T6352] ? siginfo_layout+0x156/0x290 [ 105.457567][ T6352] x64_setup_rt_frame+0x12f/0xce0 [ 105.457599][ T6352] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 105.457633][ T6352] arch_do_signal_or_restart+0x5ee/0x7e0 [ 105.457661][ T6352] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 105.457697][ T6352] ? rcu_is_watching+0x12/0xc0 [ 105.457725][ T6352] exit_to_user_mode_loop+0x98/0x670 [ 105.457747][ T6352] ? rcu_is_watching+0x12/0xc0 [ 105.457774][ T6352] do_syscall_64+0x666/0x870 [ 105.457796][ T6352] ? clear_bhb_loop+0x40/0x90 [ 105.457817][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.457835][ T6352] RIP: 0033:0x7f939db9ce57 [ 105.457852][ T6352] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 105.457868][ T6352] RSP: 002b:00007f939ea5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 105.457885][ T6352] RAX: 0000000000000013 RBX: 00007f939de15fa0 RCX: 00007f939db9ce59 [ 105.457895][ T6352] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 105.457905][ T6352] RBP: 00007f939ea5f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.457915][ T6352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.457925][ T6352] R13: 00007f939de16038 R14: 00007f939de15fa0 R15: 00007ffca789fd18 [ 105.457947][ T6352] [ 105.679799][ T5710] usb usb2-port1: attempt power cycle [ 106.026828][ T5710] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 106.169156][ T5710] usb 2-1: device descriptor read/8, error -71 [ 106.352182][ T6363] IPVS: sed: FWM 3 0x00000003 - no destination available [ 106.457511][ T5710] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 106.497364][ T5710] usb 2-1: device descriptor read/8, error -71 [ 106.642049][ T5710] usb usb2-port1: unable to enumerate USB device [ 106.705935][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'. [ 107.154994][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 108.895428][ T29] audit: type=1400 audit(1781308816.156:334): avc: denied { bind } for pid=6394 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.986855][ T29] audit: type=1400 audit(1781308816.156:335): avc: denied { connect } for pid=6394 comm="syz.4.151" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.482320][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 109.696686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 109.970879][ T6408] FAULT_INJECTION: forcing a failure. [ 109.970879][ T6408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.026839][ T30] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.034672][ T6408] CPU: 0 UID: 0 PID: 6408 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(full) [ 110.034695][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.034705][ T6408] Call Trace: [ 110.034710][ T6408] [ 110.034716][ T6408] dump_stack_lvl+0x100/0x190 [ 110.034740][ T6408] should_fail_ex.cold+0x5/0xa [ 110.034763][ T6408] _copy_from_user+0x2e/0xd0 [ 110.034778][ T6408] copy_msghdr_from_user+0x9f/0x4f0 [ 110.034793][ T6408] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 110.034812][ T6408] ___sys_sendmsg+0x106/0x1e0 [ 110.034826][ T6408] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.034854][ T6408] __sys_sendmsg+0x170/0x220 [ 110.034872][ T6408] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.034899][ T6408] ? rcu_is_watching+0x12/0xc0 [ 110.034917][ T6408] do_syscall_64+0x115/0x870 [ 110.034932][ T6408] ? clear_bhb_loop+0x40/0x90 [ 110.034945][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.034956][ T6408] RIP: 0033:0x7f939db9ce59 [ 110.034966][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.034976][ T6408] RSP: 002b:00007f939ea3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.034987][ T6408] RAX: ffffffffffffffda RBX: 00007f939de16090 RCX: 00007f939db9ce59 [ 110.034994][ T6408] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 110.035000][ T6408] RBP: 00007f939ea3e090 R08: 0000000000000000 R09: 0000000000000000 [ 110.035006][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.035012][ T6408] R13: 00007f939de16128 R14: 00007f939de16090 R15: 00007ffca789fd18 [ 110.035025][ T6408] [ 110.416879][ T5818] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 110.469881][ T30] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 110.479639][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.496715][ T30] usb 4-1: Product: syz [ 110.527006][ T30] usb 4-1: Manufacturer: syz [ 110.536445][ T30] usb 4-1: SerialNumber: syz [ 110.550502][ T30] usb 4-1: config 0 descriptor?? [ 110.558506][ T30] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 110.572018][ T5818] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 110.598927][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.626883][ T805] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.634396][ T5818] usb 1-1: Product: syz [ 110.634419][ T5818] usb 1-1: Manufacturer: syz [ 110.634432][ T5818] usb 1-1: SerialNumber: syz [ 110.664122][ T5818] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 110.761096][ T30] sonixb 4-1:0.0: Error reading register 00: -71 [ 110.778805][ T30] usb 4-1: USB disconnect, device number 8 [ 110.827823][ T805] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 110.838466][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.849750][ T805] usb 5-1: Product: syz [ 110.853948][ T805] usb 5-1: Manufacturer: syz [ 110.859022][ T805] usb 5-1: SerialNumber: syz [ 110.859777][ T5818] usb 1-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 110.931812][ T5818] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 110.932260][ T805] usb 5-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 110.965818][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.083496][ T5738] usb 1-1: USB disconnect, device number 10 [ 111.104746][ T805] usb 5-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 111.117167][ T5724] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 111.143712][ T805] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.172788][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.258667][ T5724] usb 3-1: device descriptor read/64, error -71 [ 111.368258][ T30] usb 5-1: USB disconnect, device number 8 [ 111.986856][ T5724] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 111.999013][ T6434] FAULT_INJECTION: forcing a failure. [ 111.999013][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 112.018807][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.0.161 Not tainted syzkaller #0 PREEMPT(full) [ 112.018830][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.018840][ T6434] Call Trace: [ 112.018846][ T6434] [ 112.018852][ T6434] dump_stack_lvl+0x100/0x190 [ 112.018878][ T6434] should_fail_ex.cold+0x5/0xa [ 112.018902][ T6434] ? tomoyo_realpath_from_path+0xb6/0x690 [ 112.018930][ T6434] should_failslab+0xc2/0x120 [ 112.018950][ T6434] __kmalloc_noprof+0xe0/0x850 [ 112.018974][ T6434] ? kfree+0x1dd/0x6c0 [ 112.019000][ T6434] tomoyo_realpath_from_path+0xb6/0x690 [ 112.019032][ T6434] tomoyo_path_number_perm+0x23c/0x580 [ 112.019054][ T6434] ? tomoyo_path_number_perm+0x22e/0x580 [ 112.019079][ T6434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.019126][ T6434] ? find_held_lock+0x2b/0x80 [ 112.019141][ T6434] ? __fget_files+0x215/0x3d0 [ 112.019161][ T6434] ? hook_file_ioctl_common+0x149/0x410 [ 112.019179][ T6434] ? __fget_files+0x215/0x3d0 [ 112.019204][ T6434] ? __fget_files+0x21f/0x3d0 [ 112.019229][ T6434] security_file_ioctl+0xd3/0x230 [ 112.019255][ T6434] __x64_sys_ioctl+0xb7/0x210 [ 112.019275][ T6434] do_syscall_64+0x115/0x870 [ 112.019297][ T6434] ? clear_bhb_loop+0x40/0x90 [ 112.019318][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.019338][ T6434] RIP: 0033:0x7f2e6239ce59 [ 112.019352][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.019367][ T6434] RSP: 002b:00007f2e6329a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.019384][ T6434] RAX: ffffffffffffffda RBX: 00007f2e62615fa0 RCX: 00007f2e6239ce59 [ 112.019400][ T6434] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 112.019410][ T6434] RBP: 00007f2e6329a090 R08: 0000000000000000 R09: 0000000000000000 [ 112.019420][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.019430][ T6434] R13: 00007f2e62616038 R14: 00007f2e62615fa0 R15: 00007ffcdb269ef8 [ 112.019454][ T6434] [ 112.019469][ T6434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.242922][ T6434] binder: 6433:6434 ioctl c0306201 200000000640 returned -22 [ 112.250815][ T5818] IPVS: starting estimator thread 0... [ 112.286757][ T5724] usb 3-1: device descriptor read/64, error -71 [ 112.349154][ T6442] IPVS: using max 52 ests per chain, 124800 per kthread [ 112.858931][ T5724] usb usb3-port1: attempt power cycle [ 114.287540][ T5724] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 114.428264][ T5724] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 114.468523][ T5724] usb 3-1: Using ep0 maxpacket: 16 [ 114.487915][ T5724] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 114.510795][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.527409][ T5724] usb 3-1: Product: syz [ 114.537188][ T5724] usb 3-1: Manufacturer: syz [ 114.546859][ T5724] usb 3-1: SerialNumber: syz [ 114.570016][ T5724] usb 3-1: config 0 descriptor?? [ 114.586445][ T5724] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 114.911479][ T29] audit: type=1400 audit(1781308822.206:336): avc: denied { ioctl } for pid=6455 comm="syz.1.168" path="socket:[13399]" dev="sockfs" ino=13399 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.441133][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.470299][ T5724] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 115.488412][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.740162][ T5738] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.899867][ T5738] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 115.909108][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.917130][ T5738] usb 1-1: Product: syz [ 115.921341][ T5738] usb 1-1: Manufacturer: syz [ 115.925919][ T5738] usb 1-1: SerialNumber: syz [ 115.932186][ T5738] usb 1-1: config 0 descriptor?? [ 115.942964][ T5738] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 116.154893][ T5738] sonixb 1-1:0.0: Error reading register 00: -71 [ 116.188004][ T5738] usb 1-1: USB disconnect, device number 11 [ 117.740452][ T6490] FAULT_INJECTION: forcing a failure. [ 117.740452][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.753560][ T6490] CPU: 0 UID: 0 PID: 6490 Comm: syz.3.175 Not tainted syzkaller #0 PREEMPT(full) [ 117.753576][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.753583][ T6490] Call Trace: [ 117.753588][ T6490] [ 117.753592][ T6490] dump_stack_lvl+0x100/0x190 [ 117.753609][ T6490] should_fail_ex.cold+0x5/0xa [ 117.753625][ T6490] _copy_from_user+0x2e/0xd0 [ 117.753640][ T6490] copy_msghdr_from_user+0x9f/0x4f0 [ 117.753655][ T6490] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 117.753675][ T6490] ___sys_sendmsg+0x106/0x1e0 [ 117.753689][ T6490] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.753717][ T6490] __sys_sendmsg+0x170/0x220 [ 117.753735][ T6490] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.753758][ T6490] ? rcu_is_watching+0x12/0xc0 [ 117.753777][ T6490] do_syscall_64+0x115/0x870 [ 117.753791][ T6490] ? clear_bhb_loop+0x40/0x90 [ 117.753805][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.753816][ T6490] RIP: 0033:0x7f22e3f9ce59 [ 117.753827][ T6490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.753838][ T6490] RSP: 002b:00007f22e4e65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.753851][ T6490] RAX: ffffffffffffffda RBX: 00007f22e4215fa0 RCX: 00007f22e3f9ce59 [ 117.753858][ T6490] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000007 [ 117.753865][ T6490] RBP: 00007f22e4e65090 R08: 0000000000000000 R09: 0000000000000000 [ 117.753871][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.753878][ T6490] R13: 00007f22e4216038 R14: 00007f22e4215fa0 R15: 00007ffee2b034d8 [ 117.753891][ T6490] [ 117.973156][ T6491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.175'. [ 117.982159][ T6491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.175'. [ 118.446433][ T11] usb 3-1: USB disconnect, device number 14 [ 118.650073][ T29] audit: type=1400 audit(1781308825.766:337): avc: denied { create } for pid=6493 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.727025][ T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.916757][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 118.939350][ T30] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.949960][ T30] usb 2-1: config 0 has no interface number 0 [ 118.964054][ T30] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.986808][ T30] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 119.019393][ T30] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.033532][ T30] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.337743][ T30] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.349372][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.361255][ T30] usb 2-1: config 0 descriptor?? [ 119.380624][ T30] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 119.652510][ T6522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.708065][ T29] audit: type=1400 audit(1781308827.006:338): avc: denied { ioctl } for pid=6495 comm="syz.1.176" path="socket:[13452]" dev="sockfs" ino=13452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.825797][ T29] audit: type=1400 audit(1781308828.116:339): avc: denied { create } for pid=6529 comm="syz.0.186" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.873988][ T6536] FAULT_INJECTION: forcing a failure. [ 120.873988][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 120.892666][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.0.186 Not tainted syzkaller #0 PREEMPT(full) [ 120.892690][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.892700][ T6536] Call Trace: [ 120.892706][ T6536] [ 120.892713][ T6536] dump_stack_lvl+0x100/0x190 [ 120.892740][ T6536] should_fail_ex.cold+0x5/0xa [ 120.892765][ T6536] ? tomoyo_realpath_from_path+0xb6/0x690 [ 120.892793][ T6536] should_failslab+0xc2/0x120 [ 120.892812][ T6536] __kmalloc_noprof+0xe0/0x850 [ 120.892836][ T6536] ? kfree+0x1dd/0x6c0 [ 120.892862][ T6536] tomoyo_realpath_from_path+0xb6/0x690 [ 120.892895][ T6536] tomoyo_path_number_perm+0x23c/0x580 [ 120.892918][ T6536] ? tomoyo_path_number_perm+0x22e/0x580 [ 120.892944][ T6536] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.892990][ T6536] ? find_held_lock+0x2b/0x80 [ 120.893006][ T6536] ? __fget_files+0x215/0x3d0 [ 120.893029][ T6536] ? hook_file_ioctl_common+0x149/0x410 [ 120.893048][ T6536] ? __fget_files+0x215/0x3d0 [ 120.893073][ T6536] ? __fget_files+0x21f/0x3d0 [ 120.893099][ T6536] security_file_ioctl+0xd3/0x230 [ 120.893126][ T6536] __x64_sys_ioctl+0xb7/0x210 [ 120.893148][ T6536] do_syscall_64+0x115/0x870 [ 120.893168][ T6536] ? clear_bhb_loop+0x40/0x90 [ 120.893190][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.893207][ T6536] RIP: 0033:0x7f2e6239ce59 [ 120.893223][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.893240][ T6536] RSP: 002b:00007f2e63258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.893257][ T6536] RAX: ffffffffffffffda RBX: 00007f2e62616180 RCX: 00007f2e6239ce59 [ 120.893268][ T6536] RDX: 0000200000000280 RSI: 000000004038ae7a RDI: 0000000000000008 [ 120.893279][ T6536] RBP: 00007f2e63258090 R08: 0000000000000000 R09: 0000000000000000 [ 120.893289][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.893299][ T6536] R13: 00007f2e62616218 R14: 00007f2e62616180 R15: 00007ffcdb269ef8 [ 120.893327][ T6536] [ 121.143659][ T6536] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.504513][ T30] usb 2-1: USB disconnect, device number 8 [ 121.519824][ T30] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 121.659134][ T5631] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 121.947054][ T5738] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.151240][ T29] audit: type=1400 audit(1781308829.396:340): avc: denied { bind } for pid=6546 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.271592][ T5738] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 122.333121][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.369914][ T5738] usb 5-1: Product: syz [ 122.374309][ T5738] usb 5-1: Manufacturer: syz [ 122.381996][ T5738] usb 5-1: SerialNumber: syz [ 122.392079][ T29] audit: type=1400 audit(1781308829.686:341): avc: denied { setopt } for pid=6556 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.401698][ T5738] usb 5-1: config 0 descriptor?? [ 122.420187][ T6557] IPVS: sed: FWM 3 0x00000003 - no destination available [ 122.424629][ T5738] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 122.498519][ T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.659179][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.681106][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.696009][ T5738] sonixb 5-1:0.0: Error reading register 00: -71 [ 122.704575][ T30] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 122.734396][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.745605][ T5738] usb 5-1: USB disconnect, device number 9 [ 122.773268][ T30] usb 2-1: config 0 descriptor?? [ 123.002634][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 123.256688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.328490][ T30] hid_parser_main: 28 callbacks suppressed [ 123.328504][ T30] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 123.347117][ T30] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 123.356198][ T30] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 123.377132][ T30] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 123.402637][ T30] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 123.424660][ T29] audit: type=1326 audit(1781308830.716:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.196" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e6239ce59 code=0x0 [ 123.572958][ T30] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 123.587484][ T30] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 123.602296][ T30] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 123.602753][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.614916][ T30] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 123.666534][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.765242][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -32 [ 124.400923][ T6586] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 124.409481][ T6586] cramfs: wrong magic [ 124.760499][ T6595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.202'. [ 126.176999][ T805] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 126.239391][ T5738] usb 2-1: USB disconnect, device number 9 [ 126.428597][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 126.468775][ T805] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.526448][ T805] usb 3-1: config 0 has no interface number 0 [ 126.571027][ T805] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 126.585449][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.622009][ T805] usb 3-1: Product: syz [ 126.643063][ T805] usb 3-1: Manufacturer: syz [ 126.649345][ T805] usb 3-1: SerialNumber: syz [ 126.674376][ T805] usb 3-1: config 0 descriptor?? [ 126.688754][ T805] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 126.710422][ T805] usb 3-1: selecting invalid altsetting 1 [ 126.723457][ T805] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 126.754769][ T805] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.918071][ T805] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 126.943383][ T805] usb 3-1: media controller created [ 126.977164][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.139776][ T805] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 127.148026][ T805] zl10353_read_register: readreg error (reg=127, ret==-71) [ 127.250029][ T805] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 127.259166][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.259227][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.403436][ T805] usb 3-1: USB disconnect, device number 15 [ 127.794314][ T29] audit: type=1400 audit(1781308835.086:343): avc: denied { read write } for pid=6633 comm="syz.3.212" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 127.824293][ T29] audit: type=1400 audit(1781308835.086:344): avc: denied { open } for pid=6633 comm="syz.3.212" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 127.892250][ T29] audit: type=1400 audit(1781308835.086:345): avc: denied { ioctl } for pid=6633 comm="syz.3.212" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 128.020249][ T6641] netlink: 600 bytes leftover after parsing attributes in process `syz.2.213'. [ 128.110785][ T6647] FAULT_INJECTION: forcing a failure. [ 128.110785][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.124906][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.2.215 Not tainted syzkaller #0 PREEMPT(full) [ 128.124923][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.124929][ T6647] Call Trace: [ 128.124933][ T6647] [ 128.124937][ T6647] dump_stack_lvl+0x100/0x190 [ 128.124955][ T6647] should_fail_ex.cold+0x5/0xa [ 128.124971][ T6647] _copy_from_user+0x2e/0xd0 [ 128.124986][ T6647] copy_msghdr_from_user+0x9f/0x4f0 [ 128.125005][ T6647] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 128.125035][ T6647] ___sys_sendmsg+0x106/0x1e0 [ 128.125057][ T6647] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.125091][ T6647] __sys_sendmsg+0x170/0x220 [ 128.125109][ T6647] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.125132][ T6647] ? rcu_is_watching+0x12/0xc0 [ 128.125151][ T6647] do_syscall_64+0x115/0x870 [ 128.125166][ T6647] ? clear_bhb_loop+0x40/0x90 [ 128.125179][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.125191][ T6647] RIP: 0033:0x7f939db9ce59 [ 128.125201][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.125215][ T6647] RSP: 002b:00007f939ea5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.125226][ T6647] RAX: ffffffffffffffda RBX: 00007f939de15fa0 RCX: 00007f939db9ce59 [ 128.125233][ T6647] RDX: 000000000400c010 RSI: 0000200000000740 RDI: 0000000000000003 [ 128.125240][ T6647] RBP: 00007f939ea5f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.125246][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.125255][ T6647] R13: 00007f939de16038 R14: 00007f939de15fa0 R15: 00007ffca789fd18 [ 128.125269][ T6647] [ 128.743671][ T5738] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.038782][ T5738] usb 2-1: Using ep0 maxpacket: 8 [ 129.115265][ T5738] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 129.159721][ T5738] usb 2-1: config 0 has no interface number 0 [ 129.357197][ T5738] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.426554][ T5738] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 129.443111][ T5738] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.454425][ T5738] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.468944][ T5738] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 129.502418][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.521704][ T5738] usb 2-1: config 0 descriptor?? [ 129.560108][ T6664] raw_sendmsg: syz.3.223 forgot to set AF_INET. Fix it! [ 129.571962][ T5738] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 129.637384][ T6667] IPVS: sed: FWM 3 0x00000003 - no destination available [ 129.825442][ T6670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.761423][ T6674] IPVS: sed: FWM 3 0x00000003 - no destination available [ 131.551279][ T804] usb 2-1: USB disconnect, device number 10 [ 131.589947][ T804] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 131.602895][ T30] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 131.791477][ T30] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 131.808128][ T30] usb 4-1: config 0 has no interface number 0 [ 131.827485][ T30] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.867141][ T30] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 131.888460][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.918712][ T30] usb 4-1: Product: syz [ 131.936751][ T30] usb 4-1: Manufacturer: syz [ 131.950137][ T30] usb 4-1: SerialNumber: syz [ 131.974838][ T30] usb 4-1: config 0 descriptor?? [ 132.002483][ T30] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 132.401438][ T805] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.464071][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 133.691476][ T805] usb 5-1: config 0 has no interfaces? [ 133.700639][ T805] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 133.714943][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.726180][ T805] usb 5-1: Product: syz [ 133.730501][ T805] usb 5-1: Manufacturer: syz [ 133.735195][ T805] usb 5-1: SerialNumber: syz [ 134.029831][ T805] usb 5-1: config 0 descriptor?? [ 134.333743][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 134.350892][ T5818] usb 4-1: USB disconnect, device number 9 [ 134.390318][ T5818] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 134.708125][ T5631] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 134.954558][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 135.218858][ T6738] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 135.251747][ T29] audit: type=1400 audit(1781308842.546:346): avc: denied { name_bind } for pid=6739 comm="syz.2.241" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 135.256703][ T6740] 9p: Bad value for 'rfdno' [ 135.317981][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.391108][ T6738] team0: Port device netdevsim1 added [ 135.426725][ T30] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 135.646740][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 135.657112][ T30] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 135.678808][ T30] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 135.698524][ T30] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 135.709656][ T30] usb 2-1: config 1 has no interface number 0 [ 135.715822][ T30] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.727640][ T30] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 135.791588][ T11] usb 5-1: USB disconnect, device number 10 [ 135.802841][ T30] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 135.824784][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.855449][ T30] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 136.055982][ T30] snd_usb_pod 2-1:1.1: set_interface failed [ 136.073365][ T30] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 136.092245][ T30] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 136.116097][ T30] usb 2-1: USB disconnect, device number 11 [ 136.201489][ T29] audit: type=1400 audit(1781308843.496:347): avc: denied { bind } for pid=6750 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.202303][ T6751] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 136.223286][ T29] audit: type=1400 audit(1781308843.496:348): avc: denied { setopt } for pid=6750 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.254769][ T6753] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 136.268201][ T6751] team0: Failed to send options change via netlink (err -105) [ 136.275842][ T6751] team0: Port device dummy0 added [ 136.281582][ T6753] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.292556][ T6753] team0: Failed to send options change via netlink (err -105) [ 136.300279][ T6753] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.321234][ T6753] team0: Port device dummy0 removed [ 136.332065][ T6753] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.546775][ T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 136.597454][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 137.397115][ T29] audit: type=1400 audit(1781308844.146:349): avc: denied { create } for pid=6764 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.875444][ T30] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 137.889052][ T6770] netlink: 52 bytes leftover after parsing attributes in process `syz.4.250'. [ 137.942171][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.953776][ T30] usb 2-1: Product: syz [ 137.958857][ T30] usb 2-1: Manufacturer: syz [ 137.963477][ T30] usb 2-1: SerialNumber: syz [ 137.977921][ T30] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 138.182104][ T30] usb 2-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 138.274726][ T30] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 138.385460][ T29] audit: type=1400 audit(1781308845.676:350): avc: denied { create } for pid=6782 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 138.399890][ T6784] No such timeout policy "syz0" [ 138.444052][ T30] usb 2-1: USB disconnect, device number 12 [ 138.488745][ T805] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 138.537666][ T29] audit: type=1400 audit(1781308845.696:351): avc: denied { setopt } for pid=6782 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.736843][ T805] usb 3-1: Using ep0 maxpacket: 8 [ 138.750419][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.768666][ T805] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 138.778332][ T805] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.812333][ T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.859277][ T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.911876][ T805] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.955206][ T805] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.973641][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.212158][ T805] usb 3-1: usb_control_msg returned -32 [ 139.213061][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.226600][ T805] usbtmc 3-1:16.0: can't read capabilities [ 139.263392][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.293921][ T6779] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 139.302176][ T6779] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 139.559862][ T11] usb 3-1: USB disconnect, device number 16 [ 139.787886][ T804] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 139.836774][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.989050][ T804] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 140.000118][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.014554][ T804] usb 2-1: Product: syz [ 140.018908][ T804] usb 2-1: Manufacturer: syz [ 140.036699][ T804] usb 2-1: SerialNumber: syz [ 140.068389][ T30] usb 4-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 140.079506][ T30] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 140.155536][ T804] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 140.171987][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.187671][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.228934][ T30] usb 4-1: Product: syz [ 140.265710][ T30] usb 4-1: Manufacturer: syz [ 140.293638][ T30] usb 4-1: SerialNumber: syz [ 140.405929][ T804] usb 2-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 140.741219][ T804] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.766107][ T804] usb 2-1: USB disconnect, device number 13 [ 140.864101][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.975258][ T6823] IPVS: sed: FWM 3 0x00000003 - no destination available [ 141.908811][ T804] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 141.944997][ T6839] netlink: 36 bytes leftover after parsing attributes in process `syz.1.272'. [ 141.961197][ T29] audit: type=1400 audit(1781308849.256:352): avc: denied { audit_write } for pid=6806 comm="syz.3.261" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 141.982767][ T29] audit: type=1400 audit(1781308849.256:353): avc: denied { ioctl } for pid=6806 comm="syz.3.261" path="socket:[15533]" dev="sockfs" ino=15533 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.987011][ T5738] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.010394][ T29] audit: type=1400 audit(1781308849.256:354): avc: denied { watch } for pid=6806 comm="syz.3.261" path="/51" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.037645][ T29] audit: type=1400 audit(1781308849.256:355): avc: denied { write } for pid=6806 comm="syz.3.261" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 142.065687][ T29] audit: type=1400 audit(1781308849.356:356): avc: denied { read } for pid=6838 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.096762][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 142.106167][ T804] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 142.116831][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.124918][ T804] usb 3-1: Product: syz [ 142.129406][ T804] usb 3-1: Manufacturer: syz [ 142.134065][ T804] usb 3-1: SerialNumber: syz [ 142.141642][ T804] usb 3-1: config 0 descriptor?? [ 142.158469][ T804] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 142.181792][ T5738] usb 5-1: Using ep0 maxpacket: 32 [ 142.188819][ T5738] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 142.204379][ T5738] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 142.213322][ T5738] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 142.222623][ T5738] usb 5-1: config 1 has no interface number 0 [ 142.229011][ T5738] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.240691][ T5738] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 142.253857][ T5738] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 142.265205][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.279892][ T5738] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 142.547283][ T5738] snd_usb_pod 5-1:1.1: set_interface failed [ 142.560638][ T5738] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 142.580618][ T5738] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 142.605810][ T5738] usb 5-1: USB disconnect, device number 11 [ 143.083535][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.179496][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.230395][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 143.285311][ T30] cdc_ncm 4-1:1.0: bind() failure [ 143.307929][ T6864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.276'. [ 143.327357][ T30] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 143.340771][ T804] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 143.374565][ T30] cdc_ncm 4-1:1.1: bind() failure [ 143.388297][ T6864] capability: warning: `syz.3.276' uses deprecated v2 capabilities in a way that may be insecure [ 143.412864][ T30] usb 4-1: USB disconnect, device number 10 [ 143.678750][ T804] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 144.258011][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.344656][ T804] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.386343][ T804] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 144.417709][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.588157][ T804] usb 1-1: config 0 descriptor?? [ 144.675491][ T804] usb 3-1: USB disconnect, device number 17 [ 145.219635][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.245935][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.324896][ T6881] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 145.555759][ T6878] IPVS: sed: FWM 3 0x00000003 - no destination available [ 146.056333][ T11] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.367254][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 146.375334][ T11] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 146.387225][ T11] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 146.395976][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 146.407982][ T11] usb 4-1: config 1 has no interface number 0 [ 146.420389][ T11] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.432321][ T11] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.444171][ T11] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 146.461153][ T11] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 146.472201][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.501599][ T11] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 146.525903][ T6892] netlink: 52 bytes leftover after parsing attributes in process `syz.2.283'. [ 146.746749][ T5847] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.757745][ T11] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 146.780552][ T11] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 146.795277][ T11] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 146.835786][ T30] usb 1-1: USB disconnect, device number 12 [ 146.900800][ T5847] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 146.917685][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.925728][ T5847] usb 2-1: Product: syz [ 146.930370][ T5847] usb 2-1: Manufacturer: syz [ 146.934993][ T5847] usb 2-1: SerialNumber: syz [ 146.944951][ T5847] usb 2-1: config 0 descriptor?? [ 146.962450][ T5847] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 146.979948][ T29] audit: type=1400 audit(1781308854.276:357): avc: denied { call } for pid=6903 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 147.002446][ T29] audit: type=1400 audit(1781308854.276:358): avc: denied { transfer } for pid=6903 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 147.039640][ T29] audit: type=1400 audit(1781308854.276:359): avc: denied { setopt } for pid=6883 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.060402][ T29] audit: type=1400 audit(1781308854.326:360): avc: denied { connect } for pid=6907 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.086746][ T11] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 147.182192][ T5847] sonixb 2-1:0.0: Error reading register 00: -71 [ 147.198227][ T5847] usb 2-1: USB disconnect, device number 14 [ 147.259859][ T11] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 147.286819][ T11] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 147.313529][ T6910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.319828][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.327103][ T6910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.340809][ T11] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 147.353933][ T6910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.364171][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.372939][ T11] usb 3-1: Product: syz [ 147.377681][ T11] usb 3-1: Manufacturer: syz [ 147.383301][ T11] usb 3-1: SerialNumber: syz [ 147.396544][ T6910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.410825][ T11] usb 3-1: config 0 descriptor?? [ 147.432088][ T11] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 147.439868][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 147.448976][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 147.457080][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 147.467917][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 147.475745][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 147.488021][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 147.522920][ T11] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 147.535870][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 147.553816][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 147.562830][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 147.588957][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 147.609219][ T11] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 147.626155][ T11] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 147.667138][ T29] audit: type=1400 audit(1781308854.946:361): avc: denied { write } for pid=6899 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.203402][ T6924] FAULT_INJECTION: forcing a failure. [ 148.203402][ T6924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.268210][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.268241][ T6924] Tainted: [L]=SOFTLOCKUP [ 148.268248][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.268257][ T6924] Call Trace: [ 148.268264][ T6924] [ 148.268271][ T6924] dump_stack_lvl+0x100/0x190 [ 148.268296][ T6924] should_fail_ex.cold+0x5/0xa [ 148.268322][ T6924] _copy_from_user+0x2e/0xd0 [ 148.268345][ T6924] move_addr_to_kernel+0x65/0x170 [ 148.268368][ T6924] __sys_connect+0xb5/0x170 [ 148.268391][ T6924] ? __pfx___sys_connect+0x10/0x10 [ 148.268412][ T6924] ? __fget_files+0x21f/0x3d0 [ 148.268443][ T6924] ? __pfx_ksys_write+0x10/0x10 [ 148.268468][ T6924] __x64_sys_connect+0x72/0xb0 [ 148.268490][ T6924] ? lockdep_hardirqs_on+0x78/0x100 [ 148.268512][ T6924] do_syscall_64+0x115/0x870 [ 148.268533][ T6924] ? clear_bhb_loop+0x40/0x90 [ 148.268555][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.268573][ T6924] RIP: 0033:0x7f2e6239ce59 [ 148.268588][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.268610][ T6924] RSP: 002b:00007f2e6329a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 148.268627][ T6924] RAX: ffffffffffffffda RBX: 00007f2e62615fa0 RCX: 00007f2e6239ce59 [ 148.268638][ T6924] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004 [ 148.268648][ T6924] RBP: 00007f2e6329a090 R08: 0000000000000000 R09: 0000000000000000 [ 148.268658][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.268668][ T6924] R13: 00007f2e62616038 R14: 00007f2e62615fa0 R15: 00007ffcdb269ef8 [ 148.268692][ T6924] [ 148.540228][ T11] usb 3-1: USB disconnect, device number 18 [ 148.617663][ T11] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 148.687464][ T11] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 148.697365][ T6924] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 148.699838][ T5847] usb 4-1: USB disconnect, device number 11 [ 148.710391][ T6924] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.719599][ T11] keyspan 3-1:0.0: device disconnected [ 148.721304][ T6924] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.738383][ T6924] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.860518][ T6931] netlink: 52 bytes leftover after parsing attributes in process `syz.4.294'. [ 149.531127][ T30] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.538797][ T5847] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 150.026764][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 150.036847][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 150.045809][ T30] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 150.059164][ T30] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 150.069000][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 150.080416][ T30] usb 1-1: config 1 has no interface number 0 [ 150.086963][ T5847] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.096534][ T5847] usb 4-1: config 179 has no interface number 0 [ 150.103107][ T30] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.115372][ T5847] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 150.128731][ T30] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.128758][ T30] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 150.128798][ T30] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 150.128820][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.131938][ T5847] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 150.185216][ T5847] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.199764][ T30] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 150.212075][ T5847] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59136, setting to 1024 [ 150.224494][ T5847] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.244541][ T6946] autofs: Unknown parameter '' [ 150.258373][ T5847] usb 4-1: config 179 interface 65 has no altsetting 0 [ 150.305217][ T5847] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 150.331187][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.390613][ T6929] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.398257][ T30] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 150.405997][ T30] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 150.415776][ T30] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 150.472856][ T5847] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 150.577006][ T4968] input input5: unable to receive magic message: -110 [ 150.614948][ T6929] FAULT_INJECTION: forcing a failure. [ 150.614948][ T6929] name failslab, interval 1, probability 0, space 0, times 0 [ 150.627667][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.636673][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 150.646895][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.3.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.646923][ T6929] Tainted: [L]=SOFTLOCKUP [ 150.646929][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.646939][ T6929] Call Trace: [ 150.646944][ T6929] [ 150.646951][ T6929] dump_stack_lvl+0x100/0x190 [ 150.646975][ T6929] should_fail_ex.cold+0x5/0xa [ 150.646998][ T6929] should_failslab+0xc2/0x120 [ 150.647018][ T6929] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 150.647044][ T6929] ? do_getname+0x35/0x390 [ 150.647068][ T6929] ? find_held_lock+0x2b/0x80 [ 150.647083][ T6929] ? ksys_write+0x190/0x250 [ 150.647105][ T6929] do_getname+0x35/0x390 [ 150.647132][ T6929] do_sys_openat2+0xc5/0x1e0 [ 150.647157][ T6929] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.647181][ T6929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.647209][ T6929] ? __fget_files+0x21f/0x3d0 [ 150.647234][ T6929] __x64_sys_openat+0x12d/0x210 [ 150.647260][ T6929] ? __pfx___x64_sys_openat+0x10/0x10 [ 150.647282][ T6929] ? ksys_write+0x1ac/0x250 [ 150.647304][ T6929] ? rcu_is_watching+0x12/0xc0 [ 150.647333][ T6929] do_syscall_64+0x115/0x870 [ 150.647356][ T6929] ? clear_bhb_loop+0x40/0x90 [ 150.647375][ T6929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.647389][ T6929] RIP: 0033:0x7f22e3f5d68e [ 150.647402][ T6929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.647415][ T6929] RSP: 002b:00007f22e4e64b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.647430][ T6929] RAX: ffffffffffffffda RBX: 00007f22e4e656c0 RCX: 00007f22e3f5d68e [ 150.647439][ T6929] RDX: 0000000000004080 RSI: 00007f22e4e64c00 RDI: ffffffffffffff9c [ 150.647448][ T6929] RBP: 00007f22e4e64c00 R08: 0000000000000000 R09: 0000000000000000 [ 150.647456][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 150.647465][ T6929] R13: 00007f22e4216038 R14: 00007f22e4215fa0 R15: 00007ffee2b034d8 [ 150.647484][ T6929] [ 150.649831][ T5847] usb 4-1: USB disconnect, device number 12 [ 150.660697][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.809761][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.850440][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.851664][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.169441][ T5738] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 151.385582][ T5738] usb 3-1: Using ep0 maxpacket: 32 [ 151.410121][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.491995][ T5738] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 151.528352][ T6971] netlink: 830 bytes leftover after parsing attributes in process `syz.3.302'. [ 151.538582][ T11] bond_slave_0: entered promiscuous mode [ 151.544967][ T11] bond_slave_1: entered promiscuous mode [ 151.552737][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.574330][ T11] dummy0: entered promiscuous mode [ 151.585278][ T5738] usb 3-1: Product: syz [ 151.780180][ T5738] usb 3-1: Manufacturer: syz [ 151.796502][ T5738] usb 3-1: SerialNumber: syz [ 152.058207][ T5738] usb 3-1: config 0 descriptor?? [ 152.069596][ T30] usb 1-1: USB disconnect, device number 13 [ 152.071370][ T5738] usb 3-1: no audio or video endpoints found [ 152.215724][ T6981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.306'. [ 153.087102][ T11] usb 3-1: USB disconnect, device number 19 [ 155.111189][ T29] audit: type=1400 audit(1781308862.386:362): avc: denied { listen } for pid=7015 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.171541][ T7019] FAULT_INJECTION: forcing a failure. [ 155.171541][ T7019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.331796][ T7019] CPU: 1 UID: 0 PID: 7019 Comm: syz.2.315 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.331828][ T7019] Tainted: [L]=SOFTLOCKUP [ 155.331834][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.331845][ T7019] Call Trace: [ 155.331851][ T7019] [ 155.331861][ T7019] dump_stack_lvl+0x100/0x190 [ 155.331887][ T7019] should_fail_ex.cold+0x5/0xa [ 155.331911][ T7019] _copy_from_user+0x2e/0xd0 [ 155.331934][ T7019] copy_msghdr_from_user+0x9f/0x4f0 [ 155.331958][ T7019] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 155.331985][ T7019] ? __lock_acquire+0x4a5/0x2630 [ 155.332013][ T7019] ___sys_recvmsg+0xdd/0x1a0 [ 155.332035][ T7019] ? __pfx____sys_recvmsg+0x10/0x10 [ 155.332077][ T7019] __sys_recvmsg+0x16d/0x220 [ 155.332104][ T7019] ? __pfx___sys_recvmsg+0x10/0x10 [ 155.332130][ T7019] ? __pfx_preempt_count_add+0x10/0x10 [ 155.332165][ T7019] ? rcu_is_watching+0x12/0xc0 [ 155.332194][ T7019] do_syscall_64+0x115/0x870 [ 155.332216][ T7019] ? clear_bhb_loop+0x40/0x90 [ 155.332237][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.332254][ T7019] RIP: 0033:0x7f939db9ce59 [ 155.332268][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.332284][ T7019] RSP: 002b:00007f939ea3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 155.332301][ T7019] RAX: ffffffffffffffda RBX: 00007f939de16090 RCX: 00007f939db9ce59 [ 155.332312][ T7019] RDX: 0000000000002022 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 155.332322][ T7019] RBP: 00007f939ea3e090 R08: 0000000000000000 R09: 0000000000000000 [ 155.332331][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.332341][ T7019] R13: 00007f939de16128 R14: 00007f939de16090 R15: 00007ffca789fd18 [ 155.332362][ T7019] [ 157.001969][ T7027] netlink: 52 bytes leftover after parsing attributes in process `syz.2.318'. [ 159.020453][ T29] audit: type=1400 audit(1781308866.316:363): avc: denied { create } for pid=7035 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.129242][ T29] audit: type=1400 audit(1781308866.316:364): avc: denied { write } for pid=7035 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.573847][ T29] audit: type=1400 audit(1781308866.866:365): avc: denied { read } for pid=7044 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.605653][ T7045] xt_hashlimit: size too large, truncated to 1048576 [ 160.520498][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 160.571577][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.646732][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.882757][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 161.329748][ T30] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.374587][ T30] usb 5-1: config 0 has no interface number 0 [ 161.388583][ T30] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.415094][ T30] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 161.499725][ T30] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.600268][ T30] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.696803][ T30] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.754897][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.965846][ T30] usb 5-1: config 0 descriptor?? [ 162.296941][ T30] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 162.488267][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.530596][ T7091] FAULT_INJECTION: forcing a failure. [ 162.530596][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 162.774423][ T7091] CPU: 0 UID: 0 PID: 7091 Comm: syz.3.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.774443][ T7091] Tainted: [L]=SOFTLOCKUP [ 162.774447][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.774454][ T7091] Call Trace: [ 162.774458][ T7091] [ 162.774462][ T7091] dump_stack_lvl+0x100/0x190 [ 162.774479][ T7091] should_fail_ex.cold+0x5/0xa [ 162.774495][ T7091] ? tomoyo_realpath_from_path+0xb6/0x690 [ 162.774513][ T7091] should_failslab+0xc2/0x120 [ 162.774525][ T7091] __kmalloc_noprof+0xe0/0x850 [ 162.774542][ T7091] ? kfree+0x1dd/0x6c0 [ 162.774559][ T7091] tomoyo_realpath_from_path+0xb6/0x690 [ 162.774580][ T7091] tomoyo_path_number_perm+0x23c/0x580 [ 162.774599][ T7091] ? tomoyo_path_number_perm+0x22e/0x580 [ 162.774615][ T7091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.774644][ T7091] ? find_held_lock+0x2b/0x80 [ 162.774654][ T7091] ? __fget_files+0x215/0x3d0 [ 162.774668][ T7091] ? hook_file_ioctl_common+0x149/0x410 [ 162.774680][ T7091] ? __fget_files+0x215/0x3d0 [ 162.774696][ T7091] ? __fget_files+0x21f/0x3d0 [ 162.774713][ T7091] security_file_ioctl+0xd3/0x230 [ 162.774730][ T7091] __x64_sys_ioctl+0xb7/0x210 [ 162.774743][ T7091] do_syscall_64+0x115/0x870 [ 162.774757][ T7091] ? clear_bhb_loop+0x40/0x90 [ 162.774771][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.774782][ T7091] RIP: 0033:0x7f22e3f9ce59 [ 162.774792][ T7091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.774803][ T7091] RSP: 002b:00007f22e4e65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.774815][ T7091] RAX: ffffffffffffffda RBX: 00007f22e4215fa0 RCX: 00007f22e3f9ce59 [ 162.774822][ T7091] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 162.774828][ T7091] RBP: 00007f22e4e65090 R08: 0000000000000000 R09: 0000000000000000 [ 162.774835][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.774841][ T7091] R13: 00007f22e4216038 R14: 00007f22e4215fa0 R15: 00007ffee2b034d8 [ 162.774855][ T7091] [ 162.774859][ T7091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.806308][ T29] audit: type=1400 audit(1781308871.016:366): avc: denied { append } for pid=7101 comm="syz.0.336" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.845555][ T29] audit: type=1400 audit(1781308871.026:367): avc: denied { ioctl } for pid=7101 comm="syz.0.336" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.906340][ T30] usb 5-1: USB disconnect, device number 12 [ 163.955584][ T30] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 164.186787][ T5818] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 164.436810][ T805] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 164.544762][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 164.559527][ T7120] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 164.575520][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 164.631614][ T5818] usb 1-1: can't read configurations, error -61 [ 164.787312][ T5818] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 164.917038][ T805] usb 3-1: Using ep0 maxpacket: 8 [ 164.927340][ T805] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.936131][ T805] usb 3-1: config 0 has no interface number 0 [ 164.954282][ T805] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.971689][ T805] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.996406][ T5710] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.019043][ T805] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.040988][ T805] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.055587][ T805] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 165.066208][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.099845][ T805] usb 3-1: config 0 descriptor?? [ 165.201750][ T805] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 165.236712][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 165.243381][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 165.251000][ T5818] usb 1-1: can't read configurations, error -61 [ 165.258017][ T5818] usb usb1-port1: attempt power cycle [ 165.376726][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 165.383332][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.393571][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.405436][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.409086][ T7135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.415632][ T5710] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 165.438598][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.454217][ T5710] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.463555][ T5710] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.471822][ T5710] usb 2-1: Manufacturer: syz [ 165.480250][ T5710] usb 2-1: config 0 descriptor?? [ 165.493377][ T30] usb 3-1: USB disconnect, device number 20 [ 165.493901][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 165.506781][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 165.516036][ T30] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 165.641262][ T5818] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 165.669624][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 165.717593][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 165.735217][ T5818] usb 1-1: can't read configurations, error -61 [ 165.907046][ T5818] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 165.969140][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 165.988293][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 166.020796][ T5818] usb 1-1: can't read configurations, error -61 [ 166.027854][ T5818] usb usb1-port1: unable to enumerate USB device [ 166.066846][ T5710] rc_core: IR keymap rc-hauppauge not found [ 166.080586][ T5710] Registered IR keymap rc-empty [ 166.091918][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.126841][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.358437][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 166.395926][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 166.412350][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 166.500948][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.956948][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 168.209744][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 168.238027][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 168.256972][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 168.571870][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 168.619101][ T7158] FAULT_INJECTION: forcing a failure. [ 168.619101][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.637561][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 168.653989][ T7155] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 168.671085][ T7155] IPVS: sed: FWM 3 0x00000003 - no destination available [ 168.824378][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.0.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.824403][ T7158] Tainted: [L]=SOFTLOCKUP [ 168.824407][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.824413][ T7158] Call Trace: [ 168.824417][ T7158] [ 168.824422][ T7158] dump_stack_lvl+0x100/0x190 [ 168.824439][ T7158] should_fail_ex.cold+0x5/0xa [ 168.824457][ T7158] _copy_to_user+0x32/0xd0 [ 168.824475][ T7158] simple_read_from_buffer+0xcb/0x170 [ 168.824491][ T7158] proc_fail_nth_read+0x1af/0x230 [ 168.824505][ T7158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.824518][ T7158] ? rw_verify_area+0xce/0x6d0 [ 168.824528][ T7158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.824541][ T7158] vfs_read+0x1e4/0xb30 [ 168.824554][ T7158] ? __pfx_vfs_read+0x10/0x10 [ 168.824566][ T7158] ? __fget_files+0x215/0x3d0 [ 168.824583][ T7158] ? __fget_files+0x21f/0x3d0 [ 168.824601][ T7158] ksys_read+0x12a/0x250 [ 168.824613][ T7158] ? __pfx_ksys_read+0x10/0x10 [ 168.824626][ T7158] ? rcu_is_watching+0x12/0xc0 [ 168.824644][ T7158] do_syscall_64+0x115/0x870 [ 168.824659][ T7158] ? clear_bhb_loop+0x40/0x90 [ 168.824673][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.824685][ T7158] RIP: 0033:0x7f2e6235d68e [ 168.824694][ T7158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.824705][ T7158] RSP: 002b:00007f2e63299fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.824717][ T7158] RAX: ffffffffffffffda RBX: 00007f2e6329a6c0 RCX: 00007f2e6235d68e [ 168.824724][ T7158] RDX: 000000000000000f RSI: 00007f2e6329a0a0 RDI: 0000000000000005 [ 168.824730][ T7158] RBP: 00007f2e6329a090 R08: 0000000000000000 R09: 0000000000000000 [ 168.824737][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.824743][ T7158] R13: 00007f2e62616038 R14: 00007f2e62615fa0 R15: 00007ffcdb269ef8 [ 168.824757][ T7158] [ 168.826742][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.105891][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.187365][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.237818][ T5710] mceusb 2-1:0.0: Registered ࠀT with mce emulator interface version 1 [ 169.246164][ T5710] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 169.260895][ T5710] usb 2-1: USB disconnect, device number 15 [ 169.447732][ T804] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 169.503013][ T29] audit: type=1400 audit(1781308876.796:368): avc: denied { write } for pid=7171 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.543885][ T29] audit: type=1400 audit(1781308876.836:369): avc: denied { setopt } for pid=7171 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.579800][ T29] audit: type=1400 audit(1781308876.866:370): avc: denied { shutdown } for pid=7171 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.623812][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.635253][ T804] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 169.668343][ T7178] IPVS: sed: FWM 3 0x00000003 - no destination available [ 169.669531][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.799749][ T804] usb 1-1: config 0 descriptor?? [ 169.918238][ T804] pwc: Askey VC010 type 2 USB webcam detected. [ 170.852087][ T7185] IPVS: sed: FWM 3 0x00000003 - no destination available [ 171.520067][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 171.920941][ T7199] bridge0: port 3(veth0_to_bridge) entered blocking state [ 171.929885][ T7199] bridge0: port 3(veth0_to_bridge) entered disabled state [ 171.943690][ T7199] veth0_to_bridge: entered allmulticast mode [ 171.974243][ T7199] veth0_to_bridge: entered promiscuous mode [ 171.988291][ T7199] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.009538][ T7199] bridge0: port 3(veth0_to_bridge) entered blocking state [ 172.016834][ T7199] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 172.406790][ T804] pwc: send_video_command error -71 [ 172.615543][ T804] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 172.623627][ T804] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 172.722254][ T804] usb 1-1: USB disconnect, device number 18 [ 172.756552][ T29] audit: type=1400 audit(1781308880.046:371): avc: denied { open } for pid=7205 comm="syz.0.363" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 172.797326][ T29] audit: type=1400 audit(1781308880.086:372): avc: denied { read } for pid=7197 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.818156][ T29] audit: type=1400 audit(1781308880.086:373): avc: denied { mounton } for pid=7197 comm="syz.4.361" path="/67/file0" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.063789][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.360'. [ 173.140187][ T5745] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 173.173691][ T29] audit: type=1400 audit(1781308880.466:374): avc: denied { listen } for pid=7205 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.204611][ T804] libceph: connect (1)[c::]:6789 error -101 [ 173.211239][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 173.301219][ T5745] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 173.310444][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.319289][ T5745] usb 2-1: Product: syz [ 173.323541][ T5745] usb 2-1: Manufacturer: syz [ 173.328871][ T5745] usb 2-1: SerialNumber: syz [ 173.348191][ T5745] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 173.470691][ T7210] ceph: No mds server is up or the cluster is laggy [ 173.479848][ T804] libceph: connect (1)[c::]:6789 error -101 [ 173.485902][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 173.550031][ T5745] usb 2-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 173.659702][ T5745] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 173.685768][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.734821][ T7226] FAULT_INJECTION: forcing a failure. [ 173.734821][ T7226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.763814][ T7226] CPU: 1 UID: 0 PID: 7226 Comm: syz.3.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.763843][ T7226] Tainted: [L]=SOFTLOCKUP [ 173.763848][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.763858][ T7226] Call Trace: [ 173.763864][ T7226] [ 173.763870][ T7226] dump_stack_lvl+0x100/0x190 [ 173.763894][ T7226] should_fail_ex.cold+0x5/0xa [ 173.763917][ T7226] _copy_to_user+0x32/0xd0 [ 173.763940][ T7226] simple_read_from_buffer+0xcb/0x170 [ 173.763963][ T7226] proc_fail_nth_read+0x1af/0x230 [ 173.763982][ T7226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.764001][ T7226] ? rw_verify_area+0xce/0x6d0 [ 173.764016][ T7226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.764034][ T7226] vfs_read+0x1e4/0xb30 [ 173.764061][ T7226] ? __pfx_vfs_read+0x10/0x10 [ 173.764077][ T7226] ? __fget_files+0x215/0x3d0 [ 173.764103][ T7226] ? __fget_files+0x21f/0x3d0 [ 173.764130][ T7226] ksys_read+0x12a/0x250 [ 173.764147][ T7226] ? __pfx_ksys_read+0x10/0x10 [ 173.764167][ T7226] ? rcu_is_watching+0x12/0xc0 [ 173.764194][ T7226] do_syscall_64+0x115/0x870 [ 173.764215][ T7226] ? clear_bhb_loop+0x40/0x90 [ 173.764235][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.764252][ T7226] RIP: 0033:0x7f22e3f5d68e [ 173.764266][ T7226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.764281][ T7226] RSP: 002b:00007f22e4e22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.764298][ T7226] RAX: ffffffffffffffda RBX: 00007f22e4e236c0 RCX: 00007f22e3f5d68e [ 173.764308][ T7226] RDX: 000000000000000f RSI: 00007f22e4e230a0 RDI: 0000000000000005 [ 173.764317][ T7226] RBP: 00007f22e4e23090 R08: 0000000000000000 R09: 0000000000000000 [ 173.764327][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.764336][ T7226] R13: 00007f22e4216218 R14: 00007f22e4216180 R15: 00007ffee2b034d8 [ 173.764359][ T7226] [ 174.118949][ T30] usb 2-1: USB disconnect, device number 16 [ 174.377184][ T7236] IPVS: sed: FWM 3 0x00000003 - no destination available [ 175.541849][ T7247] fuse: Bad value for 'group_id' [ 175.576577][ T7247] fuse: Bad value for 'group_id' [ 175.584591][ T29] audit: type=1326 audit(1781308882.876:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.2.373" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f939db9ce59 code=0x10000 [ 175.620560][ T7244] FAULT_INJECTION: forcing a failure. [ 175.620560][ T7244] name failslab, interval 1, probability 0, space 0, times 0 [ 175.648125][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.1.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.648152][ T7244] Tainted: [L]=SOFTLOCKUP [ 175.648158][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.648170][ T7244] Call Trace: [ 175.648176][ T7244] [ 175.648183][ T7244] dump_stack_lvl+0x100/0x190 [ 175.648206][ T7244] should_fail_ex.cold+0x5/0xa [ 175.648231][ T7244] should_failslab+0xc2/0x120 [ 175.648250][ T7244] __kvmalloc_node_noprof+0xfa/0xa00 [ 175.648277][ T7244] ? fuse_readdir_uncached+0x211/0x1bd0 [ 175.648298][ T7244] ? rcu_is_watching+0x12/0xc0 [ 175.648330][ T7244] fuse_readdir_uncached+0x211/0x1bd0 [ 175.648353][ T7244] ? unwind_next_frame+0x3be/0x2090 [ 175.648381][ T7244] ? __kasan_check_byte+0x13/0x50 [ 175.648401][ T7244] ? is_bpf_text_address+0x8a/0x1a0 [ 175.648422][ T7244] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 175.648438][ T7244] ? rcu_is_watching+0x12/0xc0 [ 175.648463][ T7244] ? is_bpf_text_address+0x8a/0x1a0 [ 175.648483][ T7244] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 175.648504][ T7244] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 175.648522][ T7244] ? is_bpf_text_address+0x94/0x1a0 [ 175.648544][ T7244] ? kernel_text_address+0x8d/0x100 [ 175.648566][ T7244] ? __kernel_text_address+0xd/0x30 [ 175.648588][ T7244] ? unwind_get_return_address+0x59/0xa0 [ 175.648614][ T7244] ? arch_stack_walk+0xa6/0xf0 [ 175.648648][ T7244] ? stack_trace_save+0x8e/0xc0 [ 175.648665][ T7244] ? __pfx_stack_trace_save+0x10/0x10 [ 175.648686][ T7244] ? check_noncircular+0x97/0x160 [ 175.648707][ T7244] ? add_lock_to_list+0x99/0x110 [ 175.648740][ T7244] ? inode_query_iversion+0x10b/0x190 [ 175.648759][ T7244] ? find_held_lock+0x2b/0x80 [ 175.648774][ T7244] ? fuse_readdir+0x941/0x1cb0 [ 175.648796][ T7244] ? fuse_readdir+0x941/0x1cb0 [ 175.648821][ T7244] fuse_readdir+0x955/0x1cb0 [ 175.648844][ T7244] ? down_read_killable+0x307/0x4b0 [ 175.648875][ T7244] ? selinux_file_permission+0x8f/0x6d0 [ 175.648909][ T7244] iterate_dir+0x296/0xae0 [ 175.648933][ T7244] __x64_sys_getdents64+0x13b/0x2c0 [ 175.648955][ T7244] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 175.648974][ T7244] ? fput+0x79/0x100 [ 175.649004][ T7244] ? __pfx_filldir64+0x10/0x10 [ 175.649026][ T7244] ? rcu_is_watching+0x12/0xc0 [ 175.649055][ T7244] do_syscall_64+0x115/0x870 [ 175.649077][ T7244] ? clear_bhb_loop+0x40/0x90 [ 175.649100][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.649118][ T7244] RIP: 0033:0x7f93de79ce59 [ 175.649133][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.649149][ T7244] RSP: 002b:00007f93df679028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 175.649167][ T7244] RAX: ffffffffffffffda RBX: 00007f93dea15fa0 RCX: 00007f93de79ce59 [ 175.649178][ T7244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 175.649188][ T7244] RBP: 00007f93df679090 R08: 0000000000000000 R09: 0000000000000000 [ 175.649198][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.649208][ T7244] R13: 00007f93dea16038 R14: 00007f93dea15fa0 R15: 00007ffeb917b698 [ 175.649233][ T7244] [ 177.266819][ T5818] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 177.438325][ T5818] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 177.446600][ T5818] usb 5-1: config 0 has no interface number 0 [ 177.469469][ T5818] usb 5-1: config 0 interface 41 has no altsetting 0 [ 177.487351][ T5818] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 177.496724][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.516106][ T5818] usb 5-1: Product: syz [ 177.534646][ T5818] usb 5-1: Manufacturer: syz [ 177.548505][ T5818] usb 5-1: SerialNumber: syz [ 177.564247][ T5818] usb 5-1: config 0 descriptor?? [ 177.909926][ T29] audit: type=1400 audit(1781308885.206:376): avc: denied { getopt } for pid=7260 comm="syz.1.378" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.030308][ T5818] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 178.056941][ T29] audit: type=1400 audit(1781308885.316:377): avc: denied { mount } for pid=7255 comm="syz.4.376" name="/" dev="ramfs" ino=18486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 178.088408][ T5818] usb 5-1: USB disconnect, device number 13 [ 178.151793][ T29] audit: type=1400 audit(1781308885.326:378): avc: denied { watch watch_reads } for pid=7255 comm="syz.4.376" path="/" dev="ramfs" ino=18486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 179.709526][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 180.042207][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 181.995472][ T805] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 182.160181][ T7296] IPVS: sed: FWM 3 0x00000003 - no destination available [ 182.342723][ T805] usb 1-1: Using ep0 maxpacket: 8 [ 182.422848][ T805] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.431983][ T805] usb 1-1: config 0 has no interface number 0 [ 182.448421][ T805] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.470071][ T805] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 182.496709][ T805] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.519960][ T805] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.545948][ T805] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.566175][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.873646][ T805] usb 1-1: config 0 descriptor?? [ 182.883350][ T805] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 183.182955][ T7305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.331353][ T11] usb 1-1: USB disconnect, device number 19 [ 183.331366][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 183.370534][ T7291] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 183.400742][ T11] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 183.580273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.592596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.604831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.617052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.629142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.641277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.653323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.665477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.299441][ T29] audit: type=1400 audit(1781308893.586:379): avc: denied { write } for pid=7324 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.403560][ T29] audit: type=1400 audit(1781308893.676:380): avc: denied { read } for pid=7324 comm="syz.4.395" lport=42741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.457420][ T5818] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 186.472960][ T7326] binder: BINDER_SET_CONTEXT_MGR already set [ 186.553972][ T7326] binder: 7324:7326 ioctl 4018620d 200000004a80 returned -16 [ 186.796700][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 187.166789][ C0] net_ratelimit: 17665 callbacks suppressed [ 187.166802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.184757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.196883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.208925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.220978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.233010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.245047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.257131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.269170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.281197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.802736][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.075171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 189.304257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 189.344225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 189.385026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 189.424322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 189.455152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 189.598086][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.393496][ T5818] usb 2-1: device descriptor read/all, error -71 [ 191.408847][ C0] sched: DL replenish lagged too much [ 192.176905][ C1] net_ratelimit: 24224 callbacks suppressed [ 192.176924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 192.177519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.183074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 192.195675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.206936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 192.219550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.230812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 192.243455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.254602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 192.267168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.186782][ C1] net_ratelimit: 24881 callbacks suppressed [ 197.186802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 197.187501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.192997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 197.204989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.216856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 197.228755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.240750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 197.253335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.264585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 197.276567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.196658][ C1] net_ratelimit: 26544 callbacks suppressed [ 202.196676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 202.196818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.202872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 202.214868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.226737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 202.238636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.250670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 202.265079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.274468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 202.286461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.206665][ C1] net_ratelimit: 26400 callbacks suppressed [ 207.206685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 207.207329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.212871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 207.224883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.237094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 207.248641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.260661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 207.273271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.284488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 207.296487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.216667][ C1] net_ratelimit: 26107 callbacks suppressed [ 212.216687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 212.216945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.222851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 212.234922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.246797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 212.258685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.270693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 212.283851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.294535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 212.306494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.226845][ C1] net_ratelimit: 26163 callbacks suppressed [ 217.226865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 217.227318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.233024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 217.245063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.256891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 217.268944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.280904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 217.293510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.304753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 217.316759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.236847][ C1] net_ratelimit: 26199 callbacks suppressed [ 222.236851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.236866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 222.237101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 222.243079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.254926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 222.266872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.278848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 222.291446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.302767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 222.314731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.246934][ C1] net_ratelimit: 25843 callbacks suppressed [ 227.246954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 227.246976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.253192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 227.265184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.277015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 227.288958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.300947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 227.313558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.324795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 227.336817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.256782][ C1] net_ratelimit: 25661 callbacks suppressed [ 232.256801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 232.257138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.262982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 232.275023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.286866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 232.298866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.310827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 232.323400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.334673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 232.346663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.266750][ C0] net_ratelimit: 26046 callbacks suppressed [ 237.266769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.266768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 237.267029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 237.272891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.284942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 237.297415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.308880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 237.320729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.332682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 237.344501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.276825][ C1] net_ratelimit: 26435 callbacks suppressed [ 242.276844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 242.276856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.277056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.282997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 242.295556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.306968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 242.318899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.330818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 242.342634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.354640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 247.286820][ C1] net_ratelimit: 25566 callbacks suppressed [ 247.286839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 247.286902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.293018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 247.304953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.316972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 247.329537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.340781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 247.352785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.364631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 247.376581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.723555][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.738844][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.296634][ C1] net_ratelimit: 26088 callbacks suppressed [ 252.296652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 252.296707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.302838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 252.315421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.326713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 252.338685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.350570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 252.362474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.374469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 252.387007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.306701][ C1] net_ratelimit: 26251 callbacks suppressed [ 257.306720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 257.306875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.312910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 257.324845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.336834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 257.349454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.360750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 257.372769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.384572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 257.396522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.316733][ C1] net_ratelimit: 26804 callbacks suppressed [ 262.316754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 262.316848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.322902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 262.334938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.346758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 262.358730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.370648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 262.383276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.394480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 262.406501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.326782][ C1] net_ratelimit: 27106 callbacks suppressed [ 267.326801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 267.326901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.332945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 267.344916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.356926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 267.369496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.380720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 267.392741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.404556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 267.416496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.336684][ C1] net_ratelimit: 26279 callbacks suppressed [ 272.336703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 272.337266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.342866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 272.354865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.366710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 272.378631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.390611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 272.403176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.414478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 272.426463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.346687][ C1] net_ratelimit: 26493 callbacks suppressed [ 277.346706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 277.346786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.352874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 277.365512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.377349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 277.389290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.401261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 277.413868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.425100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 277.437851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.356756][ C1] net_ratelimit: 26383 callbacks suppressed [ 282.356776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 282.357143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.362951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 282.374946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.386823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 282.398756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.410886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 282.424371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.434632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 282.446619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.366761][ C0] net_ratelimit: 26326 callbacks suppressed [ 287.366779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.366816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 287.372964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.384829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 287.396791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.408759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 287.421286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.432602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 287.444601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.457137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 292.376655][ C0] net_ratelimit: 25542 callbacks suppressed [ 292.376675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.376808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 292.382929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.394714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 292.406659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.418761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 292.431284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.442553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 292.454541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.466492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 297.386721][ C1] net_ratelimit: 25862 callbacks suppressed [ 297.386741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 297.387263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.392934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 297.404955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.416810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 297.428684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.440744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 297.453189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.464543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 297.476508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.396793][ C1] net_ratelimit: 25828 callbacks suppressed [ 302.396811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 302.396817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.397141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.402986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 302.414952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.426820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 302.439456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.450767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 302.462699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.474588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 305.256600][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 305.263571][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7242/1:b..l [ 305.271827][ C1] rcu: (detected by 1, t=10503 jiffies, g=24309, q=2102 ncpus=2) [ 305.279625][ C1] task:syz.3.370 state:R running task stack:23144 pid:7242 tgid:7242 ppid:5613 task_flags:0x40064c flags:0x00080001 [ 305.293805][ C1] Call Trace: [ 305.297087][ C1] [ 305.300017][ C1] __schedule+0x1295/0x67a0 [ 305.304538][ C1] ? lock_acquire+0x1b1/0x370 [ 305.309220][ C1] ? __pfx___schedule+0x10/0x10 [ 305.314066][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.318836][ C1] preempt_schedule_irq+0x50/0x90 [ 305.323860][ C1] irqentry_exit+0x205/0x970 [ 305.328450][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.334426][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 305.339620][ C1] Code: 05 fb 03 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 8d f2 0e 0f 82 a4 02 00 00 8b 35 8e c0 f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 03 25 12 0f 85 ed 02 00 00 48 83 c4 [ 305.359221][ C1] RSP: 0018:ffffc90004d16ea0 EFLAGS: 00000206 [ 305.365281][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 305.373242][ C1] RDX: 0000000000000000 RSI: ffffffff8deea8b5 RDI: ffffffff8c1c4780 [ 305.381223][ C1] RBP: ffffffff8e7e5560 R08: 0000000086db7919 R09: 0000000000000007 [ 305.389181][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 305.397144][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.405120][ C1] ? unwind_next_frame+0x3be/0x2090 [ 305.410320][ C1] ? unwind_next_frame+0x3be/0x2090 [ 305.415519][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 305.421670][ C1] unwind_next_frame+0xd1/0x2090 [ 305.426604][ C1] ? unwind_next_frame+0xbd/0x2090 [ 305.431710][ C1] ? do_exit+0x951/0x2af0 [ 305.436037][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 305.442186][ C1] arch_stack_walk+0x94/0xf0 [ 305.446780][ C1] ? do_exit+0x951/0x2af0 [ 305.451106][ C1] stack_trace_save+0x8e/0xc0 [ 305.455777][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 305.461148][ C1] ? __lock_acquire+0x4a5/0x2630 [ 305.466099][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 305.471900][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 305.477095][ C1] save_stack+0x162/0x1e0 [ 305.481418][ C1] ? __pfx_save_stack+0x10/0x10 [ 305.486259][ C1] ? free_unref_folios+0xa44/0x1730 [ 305.491455][ C1] ? folios_put_refs+0x571/0xa90 [ 305.496392][ C1] ? shmem_undo_range+0x5e5/0x1570 [ 305.501495][ C1] ? shmem_evict_inode+0x3f3/0xc40 [ 305.506598][ C1] ? evict+0x3c2/0xad0 [ 305.510664][ C1] ? iput.part.0+0x605/0xf50 [ 305.515243][ C1] ? iput+0x35/0x40 [ 305.519038][ C1] ? dentry_unlink_inode+0x2c0/0x4c0 [ 305.524320][ C1] ? __dentry_kill+0x1d0/0x690 [ 305.529080][ C1] ? finish_dput+0x76/0x480 [ 305.533571][ C1] ? dput.part.0+0x456/0x570 [ 305.538151][ C1] ? dput+0x1f/0x30 [ 305.541951][ C1] ? __fput+0x519/0xb50 [ 305.546103][ C1] ? task_work_run+0x150/0x240 [ 305.550871][ C1] ? do_exit+0x951/0x2af0 [ 305.555195][ C1] ? page_ext_put+0x3e/0xd0 [ 305.559697][ C1] __reset_page_owner+0x84/0x190 [ 305.564632][ C1] free_unref_folios+0xa44/0x1730 [ 305.569694][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 305.575519][ C1] folios_put_refs+0x571/0xa90 [ 305.580294][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 305.585584][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 305.591908][ C1] shmem_undo_range+0x5e5/0x1570 [ 305.596844][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 305.602353][ C1] shmem_evict_inode+0x3f3/0xc40 [ 305.607285][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 305.613001][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 305.618457][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 305.624525][ C1] ? find_held_lock+0x2b/0x80 [ 305.629195][ C1] ? evict+0x37e/0xad0 [ 305.633262][ C1] ? evict+0x37e/0xad0 [ 305.637332][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 305.642785][ C1] evict+0x3c2/0xad0 [ 305.646680][ C1] ? find_held_lock+0x2b/0x80 [ 305.651348][ C1] ? __pfx_evict+0x10/0x10 [ 305.655767][ C1] ? iput.part.0+0x5fd/0xf50 [ 305.660352][ C1] iput.part.0+0x605/0xf50 [ 305.664757][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 305.670040][ C1] iput+0x35/0x40 [ 305.673663][ C1] dentry_unlink_inode+0x2c0/0x4c0 [ 305.678773][ C1] __dentry_kill+0x1d0/0x690 [ 305.683363][ C1] finish_dput+0x76/0x480 [ 305.687686][ C1] dput.part.0+0x456/0x570 [ 305.692094][ C1] dput+0x1f/0x30 [ 305.695740][ C1] __fput+0x519/0xb50 [ 305.699812][ C1] task_work_run+0x150/0x240 [ 305.704403][ C1] ? __pfx_task_work_run+0x10/0x10 [ 305.709513][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 305.714719][ C1] do_exit+0x951/0x2af0 [ 305.718864][ C1] ? __pfx___schedule+0x10/0x10 [ 305.723713][ C1] ? __pfx_do_exit+0x10/0x10 [ 305.728294][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 305.734297][ C1] do_group_exit+0xd5/0x2a0 [ 305.738797][ C1] get_signal+0x20ff/0x2210 [ 305.743308][ C1] ? __pfx_get_signal+0x10/0x10 [ 305.748164][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 305.753709][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 305.759869][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.764634][ C1] irqentry_exit+0x39e/0x970 [ 305.769227][ C1] asm_exc_page_fault+0x26/0x30 [ 305.774072][ C1] RIP: 0033:0x7f22e3f9ce61 [ 305.778480][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 305.784542][ C1] RAX: 0000000000000000 RBX: 00007f22e4216270 RCX: 00007f22e3f9ce59 [ 305.792502][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 305.800469][ C1] RBP: 00007f22e4032d6f R08: 0000000000000000 R09: 0000000000000000 [ 305.808429][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 305.816391][ C1] R13: 00007f22e4216308 R14: 00007f22e4216270 R15: 00007ffee2b034d8 [ 305.824394][ C1] [ 307.406632][ C1] net_ratelimit: 24635 callbacks suppressed [ 307.406651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 307.406733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.412788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 307.424968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.436816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 307.449370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.460650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 307.472646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.484470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 307.496396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.416882][ C1] net_ratelimit: 26870 callbacks suppressed [ 312.416902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 312.417089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.423087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 312.435129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.446942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 312.458886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.470844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 312.482837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.494671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:42:8c:27:9d:74, vlan:0) [ 312.508092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.521797][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.537567][ T1312] ieee802154 phy1 wpan1: encryption failed: -22