last executing test programs: 1m21.735393478s ago: executing program 0 (id=220): socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) timer_create(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x4, @rand_addr=0x64010102}}, 0x1e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x7edd56ae, 0x0, 0x0, 0xffffffffffffffff}}, 0x40) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x8, 0x7fffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x2, &(0x7f00000000c0)) mknod$loop(0x0, 0x400, 0x1) fspick(0xffffffffffffff9c, 0x0, 0x0) 1m20.796141491s ago: executing program 0 (id=225): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4ea3, 0x4, @mcast2, 0x2}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x2f8}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="400000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0049000000000000180012800e0001000400028008000300"/36, @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0xd, 0x0, 0x2206c010}, 0x4000009) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x306, @local}, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 'macvlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1m18.92359345s ago: executing program 0 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpriority(0x0, r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r4, 0x1) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x0, 0x198, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x5, 0xfa, 0x2f, 0x0, @broadcast, @local}}}}) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000240)=0x5, 0x4) 1m17.952453795s ago: executing program 0 (id=234): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000280)=ANY=[], 0x0) sched_setaffinity(r1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe8, 0xffffffffffffffff}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000c027e417771e272e7919df00008de14e4ea9c1f0809c00c1fd6b5f957d226421a35400009500000000000000d386dd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setregid(0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f00000000c0)=[0x0]) syz_io_uring_submit(0x0, 0x0, 0x0) clock_getres(0x9, 0x0) sendmmsg$unix(r4, &(0x7f0000003cc0)=[{{&(0x7f0000000340)=@abs={0xad248bd99365ad81, 0x0, 0x4e23}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000003c0)="1aa21f7c4637e92b902ddef253db9fcfdbcb0eab6e9b2cb240d2b68c8bdf4180947e2a2b3152b1dd0e38faf6535b84491539a1c48f8d8c1ffdb9b5db7d89cb2c25a5cda9", 0x44}], 0x1, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r3]}}], 0x38, 0x20008001}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="64f5552a4c338e0479e89931113c26782a7d4df7e557f4c581b07da9a8be831cec35fb2174d22061ef2bde9f1515b3957a50aef0df129b6c81325b6d93a16f4b463bb54413ef205ef5959a175e0a596911c26f89b17a8146403919baa155a5437046a7f3987bb8f1bc4e3ea28fca9cba3ad24263cefa10dfb322e5a9e213df769c8d40dcfcd18c426c81810376ccd8ac39dbef2013fc7b9395a76d0bf3336b5a8f427c07e936c1e4b3c6de707fedb9ab6fa91113270b28e177a7bf2452b5a13e26b797b7d561d5d10e6655497a3f07fca487488e456760c955dfff064d9641d1d27f97482f9009ae197f306f1d2687300c", 0xf1}, {&(0x7f0000000780)="be4bba42c445d262e95151c48027b62d7ea66f518c4820df8699b9274d45be484f0706dc2b328e45e2aa4e286e3632", 0x2f}], 0x2, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [r6, r3]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x80, 0x20008001}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}], 0x20, 0x4000080}}, {{&(0x7f0000003bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c40), 0x0, 0x0, 0x0, 0x10}}], 0x4, 0x8800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 1m15.810843872s ago: executing program 0 (id=241): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24008880}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 1m12.173836687s ago: executing program 0 (id=253): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x8000, @local, 0x80000000}}}, 0x3a) r7 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x5, 0x6, 0x8, 0xaf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt(r7, 0x1, 0x4, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff9500000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r11, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r11, 0x0, 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x735}, 0x8) 57.089353389s ago: executing program 32 (id=253): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x8000, @local, 0x80000000}}}, 0x3a) r7 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x5, 0x6, 0x8, 0xaf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt(r7, 0x1, 0x4, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff9500000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r11, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r11, 0x0, 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x735}, 0x8) 40.712214836s ago: executing program 2 (id=345): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="7e2bc835bcaed4e8b88ff6c940123fc6c682d5ef85114bc136d0f826e97ab2fc7f38932189ace4204c77793f0966603da076a919d44393f7a9a215c1bbf0b3324fb5f3665e2fea8df79353896d262424d09c0029f1cdb283a3b78e39a33910b334ac8d7dcfc4c6a6c8328c1671ab659a0d251d316b8bc71a679c793b73ec5fde2a0f712c05609aff685bca6d265d6e985864a8aca83ae962d9ff909b107a112cb7ee045c1cc0b1571840dab679216e76f379d7c17c8b3a21c1c4689505a9247ee4ac1615c23216ce43614d2a2907eea83bacd374d5ede7c18e35", 0xda}, {&(0x7f0000000580)="3925c60960679dcafeac838a96b45d9dd79017b7166c09fa7818247ae8fc208aea0c7660d22bbcd0a5bc168796179aab3cc4b0bdd34e36a9b450f3d8184adf25d089c0928b42553271cc", 0x4a}, {&(0x7f0000000600)="18dfa338e364acc80f30fe7fcab3cdaa19182193ab1d4b1e48d44cad0dcc60500ae1588d5a8a8565258421414355f2e901eb320a33ba9fa458548be6fe5a88826c2a051c0faf25b3d3fbaee4d370d47a6940e2b973d1553ce69ed6b83f787b21c8ed1f9696edb38130aba0495924b8789ea271", 0x73}, {&(0x7f0000000680)="2a15f87e3fb6e3f3dc86231127fdb8885d9d5c00809df67f8d7823ba886a85366c23055a7f33b1de06edc2aa3413c05e8af6795997c980edd5c252a2b5f84c36efc944ca4016ac607d4d0d2a82353333546480f0a3f44c2ed86631489c971a74ca2ac3cf4059baa695ec710edb5b83564d77582036fd4fa880d2ff5d8c61bbad0a10d039434d76036afda4e82ad808e496ae33aebc723b5c8584ff75696118595d3406f91a867f3444e766aa24", 0xad}, {&(0x7f0000000180)="9b2d440ed8c6778fb03a88ccf70a67d9b64d9be232f62afce5e8b341fe72d0f93d7594de66d7a7342b", 0x29}], 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="94d903aa720af303f9a1ccad314cdd61be8336d477448177ad0d1f1b84b31a461684bee9987660e8354a42360cdb7f737bdf4faa8b2245593571554ba8a9c4ed74b4c04f9602e7619504b5cd4c2367048362d2e8d4a8e1e9acf7653c039666bd50eec70f3222ca", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x801}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000900)="85600ee91da59362eb2258c19cb1544b656fb21dab690a0e0eeea1eb3f5a7b7b7b6afe8277b8ffda6803648d1a524ccb9309cefc29647a09f659de85a5262a0f053942c1ee21509e1245fe4cfdac68f5c6f33ae19c4df978d06fc93e007233aafa1d4007f19430211dfcc6ea15b494ddff25c7d43308bbba", 0x78}, {&(0x7f0000000280)="7e449698ae06d432885003d324782cb43f", 0x11}, {&(0x7f00000009c0)="c8d912883263847fcac74f32e981a844604c8e881cc558f7e9d3dc7246d3ca0166da065260423290d2a267ee361039", 0x2f}, {&(0x7f0000000a00)="11375d4e4bc72a09d01fe0c93bb9f73416fc50addba27fcacf4a4dc3091795c6e35ae7d5a007e5c91098b718391b5a714dd9bf5acf42282b2925bf", 0x3b}, {&(0x7f0000000a40)="6d48cd2d81a46d9ea7c2c813568162e742a16366d1bbba9316b5a4e91c550c831f111a5d1bc0887e59413aa7d4d8dd926da515ef407b31f4fc6a730b5981682da8b68a", 0x43}, {&(0x7f0000000ac0)="5e7dbd25e3d339a0555c70b121b1b0f9c09ea9c5bcd38b8d53466d43245583f276c6eeeff2f896cd2d24827e34676e42fa33997e5a2cd93fe78e4fe34c18876f9554e62013043d5dd225246195c468c5357d3fc7920c8753ffb917f3b11a6cc911b72d86", 0x64}, {&(0x7f0000000b40)="6f06a7b9c9ada7e179fa5ef004595ca68aba30ac8b86c37bfc70779eab68df7ee64ac1f169457811149ce6a95dfffb1bc5b2effbf5a6e6f58d237080e5a1777f7944b26d3b7dfce9cf8e75648d5d15b89f66f38e01b344ed075825fc0a94da0eda5a1cc74a1b9613244b552d824da0650e8d64f30a37719c1ce6f97c63a8df70c7c0cd4a6a49ca4a4faba3a91e88", 0x8e}], 0x7, &(0x7f0000001980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000000001fbac000200000007e13628026d14551e003b7dc866c51f570494938bd6ee94133eebd5260afcf66fe5ed1a2dcc37502e0e2f260bb5a3273502c7c0907fb34c7506b843c70e915b2b2e050623104dc05dbd207b6d343a41acf1db729ca1ac99c7684fd3850000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x800}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000e00)="2b40e0e9fd31f57ac90d7dd9497a0ded37cf178bf927bda4fffbc399c241c678", 0x20}, {&(0x7f0000000e40)="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", 0xff}, {&(0x7f0000000f40)="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", 0xfa}, {&(0x7f0000001380)="5f5f07d3bf9346b2ca549c6ab8e82962a0ac29a3e8137d31d31bf757f5fe1ab5a7f36afa66d48d14fd3848d35125891676241b5e5500ec5b9ded51a8a170d6b348f7efe8975ad0f8183a77232f200e63efbe552c8a2a4754aaedf0c7a8a9fb1e6eb7f081ca62c4a3a53ebbf2f93f40321253604ab1d1b73c6eacdedce287972cbece9185401c6595e6c9ec82bbcda8b989b181b0a0c5e8eac9eaa49884da887941b1503e5784316fd775ae44f3e144ce7331813fc77c0693362eb978f3a3c8924e2de8914499b3e4fd90a2b6d19c1c93789df6da86f0eb86ce9c3f69b2f298563903fa7010d314cf54bbd798a03a3f458fb9aefd974b78994f2e5c6cc9254e68226d6b5489e2bb0087f0ea953d6042b9ea27923e91082ae4cdad6acf95863dbc1bfa5ac3f244", 0x126}, {&(0x7f0000001140)="54789ea7fc6c226bba5cf2b8788cdf2faadcd103e447c669c6eaa5c921b9d77ce190f08cffdb676b008896e9c1f4afb60c3c", 0x32}, {&(0x7f0000001180)="c42fd7c560d47a0cf714210590e8e79d2bcfce4f8ceb633c8e7b34acb7a9c7ec31bd150b43e75716af157dcbc5e19319d5e531d68baae963c08c01892e231b86f5daf505d4f8e3ba95aa5ea391690ae9bf25a2f8d7ebfabeaa907e254c98c49d5ba3ce22b71c73b5355328cf6f85a9c3896b3ce86e07cffc2d2372b6e791eab1ea2248bb5b5692fc0cd5c007326de7", 0x8f}], 0x6, &(0x7f00000016c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ffffffff"], 0x88, 0x4000000}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001780)="9f00df5efb7afd7f29e2513e43abbf535685241c7619e8835926b9bd1d46723179ce1032ab43944653225cedce40035cf7c50b8de7946c4a4d4642a3e0bdebaecdbc438ecb03d106523e937aff7eaa53b6f7d32c6fb6aca659c26b84b57db48f885111972e25b37edf8638750ceb62c81bae2e803faa1910e8fae885b26a7c719bff4fbe705c1a4c0dd5e508fe8ab246b03bde8cdda8147633503995a5e736d8e4e3a9f9da341a04a9ad287eb275c9f7b9c48f2f1d3ae9fcb7844055baf382f203aefba7471724825cc586a9e0cc718a85d86f358fc02860", 0xd8}], 0x1, 0x0, 0x0, 0x400c040}}], 0x4, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x20, {0x2, 0x4e20, @broadcast}, 'veth0_macvtap\x00'}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioperm(0x0, 0x40, 0x80) getegid() ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x9f, 0x0, 0x1}) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0xe651e000) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 39.110479084s ago: executing program 2 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={'bridge0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4, 0xe192, 0x4, 0x5, 0x60c16, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000004c0)={r4, 0x5, 0x4, 0x91d}) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r9, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000340)=""/48, 0x30}, {0x0, 0x3000}], 0x3) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000500)={r9, 0x1, 0x100000000, 0x100003000}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000240)="933cf5c2a7ada1c65d30bab65faf4b5700e5abc2", &(0x7f0000000300)=""/174, &(0x7f0000000280)="b23d31c52aafd255cd8d1d18724273b946dc7619a11282967eabfce3696ae52edc52b168efd3c2dec12bb75bad", &(0x7f00000003c0)="6cc5ba23dd61c55db33beb975f10b437366d07a32812f7b171f980bd1b0d3d7f7eaa69fe6d73dbc660c6ee74fd70045afbba08d170479ce23f8126", 0x91, r7, 0x4}, 0x38) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @null, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r11, &(0x7f0000000000)=0x700, 0x12) 37.398001022s ago: executing program 4 (id=352): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x7f00) 36.245279477s ago: executing program 2 (id=354): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xf1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x48100, 0x48) read$FUSE(r1, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x41811018}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x2, 0x20000, 0x1, 0x502, 0x0, 0xffff6957, {0x0, 0x2, 0x1, 0x0, 0x8000000000000000, 0x0, 0x5, 0x0, 0x0, 0x8000, 0xf9f, 0x0, 0xee01, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220b000000a3a1a67dfc202b"], 0x0}, 0x0) 35.774802591s ago: executing program 4 (id=356): syz_init_net_socket$x25(0x9, 0x5, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x2b8, 0x25c, 0x0, 0x7, 0x350, 0x3a8, 0x3a8, 0x350, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'dvmrp0\x00'}, 0x16c, 0x218, 0x260, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xc, [@dev, @dev, @empty, @remote, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00', @private1, @remote, @loopback, @empty, @private2, @dev, @mcast1, @rand_addr=' \x01\x00']}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c00001e020205000000000000e4ffff020000020800060052415300"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0xc010) mount$overlay(0x0, &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) chdir(&(0x7f00000000c0)='./bus\x00') r7 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000002500)={0x1c, &(0x7f0000002400)={0x40, 0x12}, 0x0, 0x0}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) lseek(r8, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e", 0x2c}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) 33.660915711s ago: executing program 5 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, r5, 0x1) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x0, 0x198, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x5, 0xfa, 0x2f, 0x0, @broadcast, @local}}}}) setsockopt$inet_int(r6, 0x0, 0x2, &(0x7f0000000240)=0x5, 0x4) 32.710581765s ago: executing program 5 (id=363): delete_module(0x0, 0x800) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x8, 0xb}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x8, 0xb}, 0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) (async) r0 = syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000d37cdf3ab2d00950a919290008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000d37cdf3ab2d00950a919290008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x31df9000) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000001080)) socketpair(0x18, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair(0x18, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) 32.565109433s ago: executing program 4 (id=364): mkdir(&(0x7f0000000340)='./file0\x00', 0x40) socket$inet6(0xa, 0x3, 0x7) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) close(0xffffffffffffffff) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x59335000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r6, 0x0, 0x0, 0x1}}, 0x20) 32.431453085s ago: executing program 2 (id=365): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x0, 0x1, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0xc031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001d0001022bbd7000fedbdf254800020065737369762d6362632d6165732d7368613235361b6365000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008000640000000200500010006000000050005000a00000005000400000000000900020073797a31000000000c0003"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f00000000c0)='./bus\x00', 0x2100, 0x115) 32.337774797s ago: executing program 1 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) getpid() (async) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@buf) (async) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@buf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48094) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r5, &(0x7f00000000c0), 0x0) (async) write(r5, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f046}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x17) (async) sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x17) getpid() (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0xfffffffffffffef8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000400), 0x0, 0x0) 32.121221368s ago: executing program 5 (id=367): keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='cifs.spnego\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {0x0, 0xffffffff}, {}, {0x0, 0xfffffffc}]}}) r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xe, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)=ANY=[]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000280), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 31.357640377s ago: executing program 2 (id=368): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000280)=ANY=[], 0x0) sched_setaffinity(r1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe8, 0xffffffffffffffff}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000c027e417771e272e7919df00008de14e4ea9c1f0809c00c1fd6b5f957d226421a35400009500000000000000d386dd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setregid(0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f00000000c0)=[0x0]) syz_io_uring_submit(0x0, 0x0, 0x0) clock_getres(0x9, 0x0) sendmmsg$unix(r4, &(0x7f0000003cc0)=[{{&(0x7f0000000340)=@abs={0xad248bd99365ad81, 0x0, 0x4e23}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000003c0)="1aa21f7c4637e92b902ddef253db9fcfdbcb0eab6e9b2cb240d2b68c8bdf4180947e2a2b3152b1dd0e38faf6535b84491539a1c48f8d8c1ffdb9b5db7d89cb2c25a5cda9", 0x44}], 0x1, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r3]}}], 0x38, 0x20008001}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="64f5552a4c338e0479e89931113c26782a7d4df7e557f4c581b07da9a8be831cec35fb2174d22061ef2bde9f1515b3957a50aef0df129b6c81325b6d93a16f4b463bb54413ef205ef5959a175e0a596911c26f89b17a8146403919baa155a5437046a7f3987bb8f1bc4e3ea28fca9cba3ad24263cefa10dfb322e5a9e213df769c8d40dcfcd18c426c81810376ccd8ac39dbef2013fc7b9395a76d0bf3336b5a8f427c07e936c1e4b3c6de707fedb9ab6fa91113270b28e177a7bf2452b5a13e26b797b7d561d5d10e6655497a3f07fca487488e456760c955dfff064d9641d1d27f97482f9009ae197f306f1d2687300c", 0xf1}], 0x1, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [r6, r3]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x80, 0x20008001}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}], 0x20, 0x4000080}}, {{&(0x7f0000003bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c40), 0x0, 0x0, 0x0, 0x10}}], 0x4, 0x8800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 31.345102192s ago: executing program 3 (id=369): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6c, 0x401}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xab3, 0x8, 0x1, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mkdir(0x0, 0x8) setsockopt$sock_int(r0, 0x28, 0x26, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) 30.730438071s ago: executing program 1 (id=370): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5514, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000680)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 30.729836951s ago: executing program 3 (id=371): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setuid(0xee00) clock_settime(0x0, &(0x7f00000001c0)) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) close_range(r4, r4, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f00000001c0)='.\x00', 0x20000, 0x8) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0049364, &(0x7f0000000180)) write$6lowpan_enable(r6, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xb7ee0ae1, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000000000000000c00018006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x2000c040) 29.952771s ago: executing program 1 (id=372): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, 0x0, 0x0, 0xffffffffffffffff) 29.137353959s ago: executing program 3 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1a29, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x13, 0x2, 0x0, "b427ececbbe6d400fd00000200ef00ffffffffffff00", 0x3631564e}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2b000c, &(0x7f0000006180)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_off}]}) chdir(&(0x7f0000000040)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000050000000200000003"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) getpid() 29.13680243s ago: executing program 5 (id=374): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, &(0x7f00000001c0)={0x3, 0x801}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000b80)={0x20000002}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000080)={r9, 0x5}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.117670427s ago: executing program 4 (id=375): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000), 0xfffffffa, 0x202101) dup3(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = creat(0x0, 0xecf86c37d530494c) close(r1) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)={0x1c, r7, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffff000}]}, 0x1c}}, 0x0) shutdown(r6, 0x1) 29.043018397s ago: executing program 1 (id=376): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008b04"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4000, 0x0) 28.787994515s ago: executing program 2 (id=377): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 27.016788672s ago: executing program 3 (id=378): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) iopl(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r4 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x16}, 0xfe49, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) epoll_pwait2(r7, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5437, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 27.015594515s ago: executing program 4 (id=379): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x0, 0x1, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0xc031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001d0001022bbd7000fedbdf254800020065737369762d6362632d6165732d7368613235361b6365000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008000640000000200500010006000000050005000a00000005000400000000000900020073797a31000000000c0003"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f00000000c0)='./bus\x00', 0x2100, 0x115) 26.941127478s ago: executing program 5 (id=380): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000400) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x7fee, 0x0}}], 0x500, 0x0) close(r2) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x48, r7, 0x1, 0x70bd24, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_b, @random, {0x7, 0xf91}, @value=@ver_80211n={0x0, 0x86e, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x1, 0x54, @val={0x10, 0x1, 0x50}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 26.119634048s ago: executing program 3 (id=381): r0 = socket$inet(0xa, 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:crack_exec_t:s0\x00', 0x22, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 25.987186081s ago: executing program 4 (id=382): r0 = socket(0x1a, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x1bdb) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10}, 0x1c) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f00000000c0), 0x4) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0x16, 0x1, "b0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) 25.9479077s ago: executing program 5 (id=383): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) 25.857370668s ago: executing program 1 (id=384): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$chown(0x4, r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) brk(0x8) 25.679049956s ago: executing program 3 (id=385): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x2, 0x733, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0x10, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1200000, 0x2, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x2, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002640)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 25.021016351s ago: executing program 1 (id=386): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, 0x0, 0x0, 0xffffffffffffffff) 0s ago: executing program 33 (id=377): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) kernel console output (not intermixed with test programs): issive=1 [ 104.275999][ T30] audit: type=1400 audit(1743953539.732:324): avc: denied { write } for pid=6312 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.320928][ T5822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.323267][ T30] audit: type=1400 audit(1743953539.732:325): avc: denied { nlmsg_read } for pid=6312 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.351131][ T30] audit: type=1400 audit(1743953540.262:326): avc: denied { read } for pid=6320 comm="syz.2.115" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.376971][ T30] audit: type=1400 audit(1743953540.272:327): avc: denied { open } for pid=6320 comm="syz.2.115" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.410287][ T30] audit: type=1400 audit(1743953540.412:328): avc: denied { read } for pid=6322 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.510901][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 104.550740][ T5822] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 104.605268][ T5822] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 104.624051][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.635341][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 104.781415][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.801967][ T5822] usb 1-1: Product: syz [ 104.847820][ T5822] usb 1-1: Manufacturer: syz [ 104.852854][ T5822] usb 1-1: SerialNumber: syz [ 104.862862][ T5822] usb 1-1: config 0 descriptor?? [ 104.870370][ T6315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.878813][ T5822] hub 1-1:0.0: bad descriptor, ignoring hub [ 104.885279][ T5822] hub 1-1:0.0: probe with driver hub failed with error -5 [ 104.899416][ T5902] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.039459][ T5902] usb 3-1: device descriptor read/64, error -71 [ 105.259581][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.279950][ T5902] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.337324][ T6340] syz.0.114 uses old SIOCAX25GETINFO [ 105.441060][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.464861][ T24] usb 2-1: config 66 interface 0 has no altsetting 0 [ 105.485949][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 105.509749][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.529601][ T24] usb 2-1: Product: syz [ 105.538199][ T24] usb 2-1: Manufacturer: syz [ 105.541075][ T5902] usb 3-1: device descriptor read/64, error -71 [ 105.558364][ T24] usb 2-1: SerialNumber: syz [ 105.563147][ T81] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.664502][ T5902] usb usb3-port1: attempt power cycle [ 105.866885][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.925350][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.070220][ T24] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 106.094861][ T24] usb 2-1: USB disconnect, device number 6 [ 106.129542][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.161403][ T5902] usb 3-1: device descriptor read/8, error -71 [ 106.174470][ T81] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 106.185101][ T81] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.251170][ T81] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 106.260510][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.270855][ T81] usb 4-1: Product: syz [ 106.277233][ T81] usb 4-1: Manufacturer: syz [ 106.290309][ T81] usb 4-1: SerialNumber: syz [ 106.332195][ T6342] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 106.393669][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 106.439575][ T5902] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.471151][ T5902] usb 3-1: device descriptor read/8, error -71 [ 106.591693][ T5902] usb usb3-port1: unable to enumerate USB device [ 106.609303][ T81] usb 4-1: USB disconnect, device number 5 [ 106.899302][ T6361] xt_hashlimit: max too large, truncated to 1048576 [ 107.769833][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 107.769849][ T30] audit: type=1400 audit(1743953543.822:343): avc: denied { write } for pid=6366 comm="syz.2.129" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 107.801360][ T30] audit: type=1400 audit(1743953543.852:344): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.912431][ T30] audit: type=1400 audit(1743953543.852:345): avc: denied { open } for pid=6366 comm="syz.2.129" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 107.989007][ T30] audit: type=1400 audit(1743953543.932:346): avc: denied { connect } for pid=6372 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.010139][ T30] audit: type=1400 audit(1743953543.942:347): avc: denied { bind } for pid=6364 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 108.041803][ T30] audit: type=1400 audit(1743953544.012:348): avc: denied { shutdown } for pid=6372 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.137457][ T30] audit: type=1400 audit(1743953544.182:349): avc: denied { listen } for pid=6377 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.219467][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 108.940099][ T30] audit: type=1400 audit(1743953544.212:350): avc: denied { accept } for pid=6377 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.560054][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 109.568324][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.584881][ T9] usb 5-1: config 127 has an invalid interface number: 36 but max is 1 [ 109.606102][ T9] usb 5-1: config 127 has an invalid interface number: 51 but max is 1 [ 109.630922][ T9] usb 5-1: config 127 has an invalid interface number: 5 but max is 1 [ 109.643359][ T9] usb 5-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 109.667051][ T9] usb 5-1: config 127 has no interface number 0 [ 109.696979][ T9] usb 5-1: config 127 has no interface number 1 [ 109.706471][ T9] usb 5-1: config 127 has no interface number 2 [ 109.715596][ T9] usb 5-1: config 127 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.756521][ T9] usb 5-1: config 127 interface 5 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 109.804660][ T9] usb 5-1: config 127 interface 36 has no altsetting 0 [ 109.812664][ T9] usb 5-1: config 127 interface 51 has no altsetting 0 [ 109.829290][ T9] usb 5-1: config 127 interface 5 has no altsetting 0 [ 109.882523][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.136'. [ 112.348464][ T9] usb 5-1: string descriptor 0 read error: -71 [ 112.378405][ T9] usb 5-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=53.d4 [ 112.387866][ T5902] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 112.401627][ T6401] overlayfs: failed to resolve './file1': -2 [ 112.494436][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.506873][ T9] usb 5-1: can't set config #127, error -71 [ 112.917705][ T6407] 9pnet_fd: Insufficient options for proto=fd [ 113.648152][ T5902] usb 3-1: device descriptor read/64, error -71 [ 113.675690][ T9] usb 5-1: USB disconnect, device number 12 [ 113.817627][ T5822] usb 1-1: USB disconnect, device number 5 [ 113.883751][ T30] audit: type=1400 audit(1743953549.932:351): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.970095][ T5901] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.987876][ T30] audit: type=1400 audit(1743953550.032:352): avc: denied { create } for pid=6416 comm="syz.2.143" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.999728][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 114.061643][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 114.067616][ T30] audit: type=1400 audit(1743953550.062:353): avc: denied { mounton } for pid=6416 comm="syz.2.143" path="/25/file0" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.255109][ T30] audit: type=1400 audit(1743953550.062:354): avc: denied { mount } for pid=6416 comm="syz.2.143" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.277984][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 114.288273][ T30] audit: type=1400 audit(1743953550.072:355): avc: denied { setattr } for pid=6416 comm="syz.2.143" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.253409][ T30] audit: type=1400 audit(1743953550.072:356): avc: denied { ioctl } for pid=6416 comm="syz.2.143" path="socket:[10101]" dev="sockfs" ino=10101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.278299][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 115.297245][ T5901] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 115.319965][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.348125][ T30] audit: type=1400 audit(1743953550.122:357): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 115.350781][ T5901] usb 2-1: Product: syz [ 115.437213][ T5901] usb 2-1: Manufacturer: syz [ 115.442721][ T5901] usb 2-1: SerialNumber: syz [ 115.468261][ T5901] usb 2-1: config 0 descriptor?? [ 115.654203][ T5901] hub 2-1:0.0: bad descriptor, ignoring hub [ 115.698051][ T5901] hub 2-1:0.0: probe with driver hub failed with error -5 [ 115.813648][ T5901] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 115.827590][ T6437] block device autoloading is deprecated and will be removed. [ 115.860267][ T6437] syz.2.146: attempt to access beyond end of device [ 115.860267][ T6437] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 115.953416][ T30] audit: type=1400 audit(1743953552.002:358): avc: denied { append } for pid=6410 comm="syz.1.139" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.739528][ T30] audit: type=1400 audit(1743953552.792:359): avc: denied { listen } for pid=6449 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.746082][ T6452] bond1: entered promiscuous mode [ 116.776566][ T30] audit: type=1400 audit(1743953552.792:360): avc: denied { accept } for pid=6449 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.780274][ T6452] bond1: entered allmulticast mode [ 116.824272][ T6452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.986549][ T6459] input: syz0 as /devices/virtual/input/input7 [ 117.088135][ T6452] bond1 (unregistering): Released all slaves [ 117.487176][ T24] usb 2-1: USB disconnect, device number 7 [ 117.541875][ T6470] loop2: detected capacity change from 0 to 7 [ 117.799459][ T6470] Dev loop2: unable to read RDB block 7 [ 117.982934][ T6470] loop2: unable to read partition table [ 117.988765][ T6470] loop2: partition table beyond EOD, truncated [ 118.009504][ T6475] fuse: Bad value for 'fd' [ 118.015387][ T6470] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 118.060421][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 118.076092][ T24] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.285074][ T5196] Dev loop2: unable to read RDB block 7 [ 118.301593][ T5196] loop2: unable to read partition table [ 118.318499][ T5196] loop2: partition table beyond EOD, truncated [ 118.618257][ T1202] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 118.809383][ T1202] usb 5-1: Using ep0 maxpacket: 32 [ 118.823590][ T1202] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 118.840091][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.875184][ T1202] usb 5-1: Product: syz [ 118.900448][ T1202] usb 5-1: Manufacturer: syz [ 118.954206][ T1202] usb 5-1: SerialNumber: syz [ 119.488628][ T1202] usb 5-1: config 0 descriptor?? [ 119.500299][ T1202] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 119.883200][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 119.883234][ T30] audit: type=1400 audit(1743953555.932:366): avc: denied { bind } for pid=6476 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.059157][ T1202] gspca_sunplus: reg_w_riv err -110 [ 120.092797][ T1202] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 120.180682][ T6512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.251702][ T30] audit: type=1400 audit(1743953557.302:367): avc: denied { bind } for pid=6523 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.372083][ T30] audit: type=1400 audit(1743953557.332:368): avc: denied { open } for pid=6522 comm="syz.0.175" path="/dev/ttyq5" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 121.505859][ T6529] ======================================================= [ 121.505859][ T6529] WARNING: The mand mount option has been deprecated and [ 121.505859][ T6529] and is ignored by this kernel. Remove the mand [ 121.505859][ T6529] option from the mount to silence this warning. [ 121.505859][ T6529] ======================================================= [ 121.873681][ T30] audit: type=1400 audit(1743953557.892:369): avc: denied { create } for pid=6518 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 121.912588][ T5902] usb 5-1: USB disconnect, device number 13 [ 121.924513][ T6531] nfs4: Unknown parameter '0X' [ 121.942370][ T30] audit: type=1400 audit(1743953557.902:370): avc: denied { bind } for pid=6518 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 122.656493][ T1202] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.455228][ T1202] usb 4-1: Using ep0 maxpacket: 8 [ 123.462491][ T1202] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.479230][ T1202] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 123.511381][ T6547] overlayfs: failed to clone lowerpath [ 123.513625][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.569455][ T1202] usb 4-1: config 0 descriptor?? [ 123.590971][ T1202] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 123.663454][ T30] audit: type=1400 audit(1743953559.662:371): avc: denied { sqpoll } for pid=6546 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.847440][ T30] audit: type=1400 audit(1743953559.892:372): avc: denied { map } for pid=6543 comm="syz.0.180" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.899422][ T30] audit: type=1400 audit(1743953559.892:373): avc: denied { execute } for pid=6543 comm="syz.0.180" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.009669][ T81] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 124.070390][ T30] audit: type=1400 audit(1743953559.902:374): avc: denied { write } for pid=6543 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.257074][ T30] audit: type=1400 audit(1743953559.942:375): avc: denied { write } for pid=6552 comm="syz.4.183" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 124.857566][ T1202] gspca_vc032x: reg_w err -110 [ 124.871162][ T81] usb 3-1: Using ep0 maxpacket: 32 [ 124.882353][ T1202] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 124.902622][ T81] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.934218][ T81] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.949411][ T30] audit: type=1400 audit(1743953560.942:376): avc: denied { append } for pid=6535 comm="syz.1.178" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 124.993200][ T81] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 125.042783][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.065301][ T81] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.087595][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.112672][ T81] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.137616][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.157043][ T81] usb 3-1: config 0 descriptor?? [ 125.256251][ T5902] usb 4-1: USB disconnect, device number 6 [ 125.305404][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 125.468186][ T81] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 125.491999][ T81] usb 3-1: USB disconnect, device number 12 [ 125.502128][ T81] usblp0: removed [ 126.012655][ T81] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 126.069834][ T5822] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 126.259428][ T81] usb 3-1: Using ep0 maxpacket: 32 [ 126.275508][ T81] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 126.309458][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 126.321787][ T5822] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 126.673794][ T81] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 126.759639][ T81] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 126.766707][ T5822] usb 5-1: config 0 has no interface number 0 [ 126.779747][ T5822] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.791027][ T5822] usb 5-1: config 0 interface 85 has no altsetting 0 [ 126.800820][ T5822] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 126.810250][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.818645][ T5822] usb 5-1: Product: syz [ 126.823317][ T5822] usb 5-1: Manufacturer: syz [ 126.828065][ T5822] usb 5-1: SerialNumber: syz [ 126.882935][ T6590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.194'. [ 127.521310][ T5901] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 129.261585][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.734286][ T5822] usb 5-1: config 0 descriptor?? [ 130.583931][ T5822] usb 5-1: can't set config #0, error -71 [ 130.689530][ T5901] usb 4-1: device descriptor read/64, error -71 [ 130.775118][ T5822] usb 5-1: USB disconnect, device number 14 [ 131.018474][ T81] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.028313][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 131.041358][ T81] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 131.049453][ T5901] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 131.050522][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.099866][ T81] usb 3-1: config 0 descriptor?? [ 131.106205][ T81] usb 3-1: can't set config #0, error -71 [ 131.114949][ T81] usb 3-1: USB disconnect, device number 13 [ 131.289618][ T5901] usb 4-1: device descriptor read/64, error -71 [ 131.310163][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 131.338986][ T30] audit: type=1400 audit(1743953567.372:377): avc: denied { nlmsg_read } for pid=6605 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.562791][ T5901] usb usb4-port1: attempt power cycle [ 131.577906][ T30] audit: type=1400 audit(1743953567.502:378): avc: denied { write } for pid=6611 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.714448][ T6614] 9pnet_fd: Insufficient options for proto=fd [ 131.746754][ T6614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=6614 comm=syz.1.200 [ 131.770383][ T81] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 131.980289][ T81] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.058512][ T81] usb 3-1: not running at top speed; connect to a high speed hub [ 132.130531][ T81] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 132.147120][ T81] usb 3-1: config 1 interface 0 has no altsetting 0 [ 132.155674][ T81] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.173728][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.187447][ T6618] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 132.194386][ T81] usb 3-1: Product: syz [ 132.210423][ T81] usb 3-1: Manufacturer: syz [ 132.219623][ T81] usb 3-1: SerialNumber: syz [ 132.241159][ T6604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.242501][ T6619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.342288][ T6618] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.414665][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.425492][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.492685][ T81] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 132.634185][ T30] audit: type=1400 audit(1743953568.552:379): avc: denied { ioctl } for pid=6624 comm="syz.4.206" path="socket:[11489]" dev="sockfs" ino=11489 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.180185][ T81] usb 3-1: USB disconnect, device number 14 [ 133.569877][ T6635] kernel read not supported for file /eth0 (pid: 6635 comm: syz.1.208) [ 133.626957][ T81] usblp0: removed [ 133.639278][ T30] audit: type=1800 audit(1743953569.682:380): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.208" name="eth0" dev="mqueue" ino=10859 res=0 errno=0 [ 133.755335][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 133.764643][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 133.774193][ T30] audit: type=1400 audit(1743953569.802:381): avc: denied { map } for pid=6639 comm="syz.0.209" path="pipe:[11503]" dev="pipefs" ino=11503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 133.797560][ T6618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.813434][ T6640] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 133.865457][ T6640] netlink: 10 bytes leftover after parsing attributes in process `syz.0.209'. [ 134.053583][ T30] audit: type=1400 audit(1743953570.092:382): avc: denied { write } for pid=6642 comm="syz.1.211" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.333484][ T6643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.210'. [ 134.342323][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 134.353015][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/u9:3 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 134.353041][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.353053][ T5826] Workqueue: hci4 hci_rx_work [ 134.353075][ T5826] Call Trace: [ 134.353081][ T5826] [ 134.353087][ T5826] dump_stack_lvl+0x16c/0x1f0 [ 134.353114][ T5826] sysfs_warn_dup+0x7f/0xa0 [ 134.353132][ T5826] sysfs_create_dir_ns+0x24b/0x2b0 [ 134.353150][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 134.353166][ T5826] ? find_held_lock+0x2b/0x80 [ 134.353194][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 134.353217][ T5826] kobject_add_internal+0x2c4/0x9b0 [ 134.353247][ T5826] kobject_add+0x16e/0x240 [ 134.353271][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 134.353298][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 134.353318][ T5826] ? kobject_put+0xab/0x5a0 [ 134.353350][ T5826] device_add+0x288/0x1a70 [ 134.353375][ T5826] ? __pfx_dev_set_name+0x10/0x10 [ 134.353395][ T5826] ? __pfx_device_add+0x10/0x10 [ 134.353413][ T5826] ? mgmt_send_event_skb+0x2fb/0x460 [ 134.353439][ T5826] hci_conn_add_sysfs+0x17e/0x230 [ 134.353462][ T5826] le_conn_complete_evt+0x1075/0x1d70 [ 134.353500][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 134.353529][ T5826] ? hci_event_packet+0x43c/0x1190 [ 134.353553][ T5826] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 134.353572][ T5826] ? skb_pull_data+0x166/0x210 [ 134.353595][ T5826] hci_le_meta_evt+0x2f3/0x5e0 [ 134.353614][ T5826] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 134.353636][ T5826] hci_event_packet+0x669/0x1190 [ 134.353655][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 134.353675][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 134.353695][ T5826] ? kcov_remote_start+0x3c9/0x6d0 [ 134.353713][ T5826] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.353741][ T5826] hci_rx_work+0x2c5/0x16b0 [ 134.353761][ T5826] ? rcu_is_watching+0x12/0xc0 [ 134.353785][ T5826] process_one_work+0x9cc/0x1b70 [ 134.353815][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 134.353844][ T5826] ? assign_work+0x1a0/0x250 [ 134.353865][ T5826] worker_thread+0x6c8/0xf10 [ 134.353897][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 134.353917][ T5826] kthread+0x3c2/0x780 [ 134.353936][ T5826] ? __pfx_kthread+0x10/0x10 [ 134.353951][ T5826] ? __pfx_kthread+0x10/0x10 [ 134.353968][ T5826] ? __pfx_kthread+0x10/0x10 [ 134.353985][ T5826] ? __pfx_kthread+0x10/0x10 [ 134.354001][ T5826] ? rcu_is_watching+0x12/0xc0 [ 134.354023][ T5826] ? __pfx_kthread+0x10/0x10 [ 134.354041][ T5826] ret_from_fork+0x45/0x80 [ 134.354058][ T5826] ? __pfx_kthread+0x10/0x10 [ 134.354076][ T5826] ret_from_fork_asm+0x1a/0x30 [ 134.354115][ T5826] [ 134.354138][ T5826] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.625992][ T5826] Bluetooth: hci4: failed to register connection device [ 134.683821][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.830916][ T30] audit: type=1400 audit(1743953570.882:383): avc: denied { ioctl } for pid=6654 comm="syz.3.214" path="socket:[11068]" dev="sockfs" ino=11068 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.500755][ T5901] usb 2-1: device descriptor read/64, error -71 [ 135.739447][ T5901] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.939996][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 135.951259][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 136.791195][ T5901] usb 2-1: device descriptor read/64, error -71 [ 136.970246][ T5901] usb usb2-port1: attempt power cycle [ 137.016130][ T30] audit: type=1400 audit(1743953573.062:384): avc: denied { read } for pid=6678 comm="syz.3.219" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.080344][ T30] audit: type=1400 audit(1743953573.092:385): avc: denied { open } for pid=6678 comm="syz.3.219" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.909861][ T81] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.008741][ T6694] xt_hashlimit: size too large, truncated to 1048576 [ 138.069385][ T81] usb 4-1: Using ep0 maxpacket: 16 [ 138.078877][ T81] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 138.101156][ T81] usb 4-1: config 1 interface 0 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.142784][ T81] usb 4-1: config 1 interface 0 has no altsetting 0 [ 138.155868][ T6696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6696 comm=syz.0.225 [ 138.169609][ T30] audit: type=1400 audit(1743953574.212:386): avc: denied { read } for pid=6693 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 138.280458][ T81] usb 4-1: Dual-Role OTG device on HNP port [ 138.286914][ T81] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.298523][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.319055][ T81] usb 4-1: Product: syz [ 138.379758][ T6700] sctp: [Deprecated]: syz.2.226 (pid 6700) Use of int in maxseg socket option. [ 138.379758][ T6700] Use struct sctp_assoc_value instead [ 138.657953][ T30] audit: type=1400 audit(1743953574.452:387): avc: denied { map } for pid=6695 comm="syz.2.226" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.709237][ T30] audit: type=1400 audit(1743953574.452:388): avc: denied { execute } for pid=6695 comm="syz.2.226" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.710088][ T81] usb 4-1: Manufacturer: syz [ 138.767547][ T81] usb 4-1: SerialNumber: syz [ 139.047523][ T81] cdc_ether 4-1:1.0: skipping garbage [ 139.073647][ T30] audit: type=1400 audit(1743953575.092:389): avc: denied { ioctl } for pid=6678 comm="syz.3.219" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.076800][ T81] cdc_ether 4-1:1.0: skipping garbage [ 139.148408][ T81] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 139.162680][ T81] usb 4-1: USB disconnect, device number 10 [ 139.379598][ T1202] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 139.871102][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.899959][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.945810][ T1202] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 139.955557][ T1202] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 139.963781][ T1202] usb 2-1: Manufacturer: syz [ 139.971266][ T1202] usb 2-1: config 0 descriptor?? [ 140.503484][ T6711] TCP: out of memory -- consider tuning tcp_mem [ 140.936779][ T1202] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 140.964571][ T1202] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 140.973279][ T1202] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 140.981020][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 140.994661][ T1202] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 141.012221][ T1202] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 141.101614][ T30] audit: type=1400 audit(1743953577.152:390): avc: denied { setopt } for pid=6719 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.126815][ T1202] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 141.893284][ T6736] No source specified [ 142.150582][ T30] audit: type=1400 audit(1743953578.192:391): avc: denied { read } for pid=6722 comm="syz.0.234" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.230331][ T30] audit: type=1400 audit(1743953578.192:392): avc: denied { open } for pid=6722 comm="syz.0.234" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.302275][ T5822] usb 2-1: USB disconnect, device number 11 [ 142.335154][ T30] audit: type=1400 audit(1743953578.192:393): avc: denied { ioctl } for pid=6722 comm="syz.0.234" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.337353][ T6741] trusted_key: encrypted_key: insufficient parameters specified [ 142.638549][ T30] audit: type=1400 audit(1743953578.682:394): avc: denied { connect } for pid=6740 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.793205][ T30] audit: type=1400 audit(1743953578.682:395): avc: denied { listen } for pid=6740 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.828404][ T30] audit: type=1400 audit(1743953578.682:396): avc: denied { accept } for pid=6740 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.909616][ T5913] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.059393][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 143.165548][ T5913] usb 4-1: config 0 has no interfaces? [ 143.173194][ T5913] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.197486][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.247098][ T5913] usb 4-1: config 0 descriptor?? [ 143.285145][ T30] audit: type=1400 audit(1743953579.332:397): avc: denied { mount } for pid=6755 comm="syz.0.241" name="/" dev="autofs" ino=12310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 143.501404][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.527190][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.630968][ T30] audit: type=1400 audit(1743953579.642:398): avc: denied { mounton } for pid=6755 comm="syz.0.241" path="/47/file1/file0" dev="autofs" ino=12317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 143.894702][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.052791][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.060650][ T5822] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.114308][ T5902] usb 4-1: USB disconnect, device number 11 [ 144.251304][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.275179][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.315542][ T5822] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 144.339702][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.389660][ T5822] usb 1-1: config 0 descriptor?? [ 144.649616][ T5902] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 144.821937][ T6768] TCP: out of memory -- consider tuning tcp_mem [ 144.851010][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 144.930292][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.059168][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 145.078619][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 145.104500][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.160102][ T5902] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 145.196859][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.239381][ T5902] usb 4-1: Product: syz [ 145.247680][ T5902] usb 4-1: Manufacturer: syz [ 145.257675][ T5902] usb 4-1: SerialNumber: syz [ 145.306760][ T30] audit: type=1400 audit(1743953581.352:399): avc: denied { create } for pid=6773 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.340460][ T5902] usb 4-1: config 0 descriptor?? [ 145.818024][ T5902] usb 4-1: can't set config #0, error -71 [ 146.140320][ T5902] usb 4-1: USB disconnect, device number 12 [ 146.412910][ T30] audit: type=1400 audit(1743953582.382:400): avc: denied { read } for pid=6789 comm="syz.4.251" name="file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.501615][ T5822] usbhid 1-1:0.0: can't add hid device: -71 [ 146.564669][ T5822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 146.610122][ T81] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 146.617684][ T5822] usb 1-1: USB disconnect, device number 6 [ 146.637392][ T6213] udevd[6213]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 146.680569][ T6797] 9pnet_fd: Insufficient options for proto=fd [ 146.716722][ T6799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.254'. [ 146.813530][ T81] usb 3-1: Using ep0 maxpacket: 8 [ 146.816043][ T6801] process 'syz.1.255' launched './file1' with NULL argv: empty string added [ 146.854844][ T81] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.115247][ T81] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.171862][ T81] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.269684][ T81] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.309613][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.317710][ T81] usb 3-1: Product: syz [ 147.330408][ T81] usb 3-1: Manufacturer: syz [ 147.342222][ T81] usb 3-1: SerialNumber: syz [ 147.499245][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.257'. [ 147.545673][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.257'. [ 147.574192][ T81] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 147.609415][ T81] cdc_ncm 3-1:1.0: bind() failure [ 147.648980][ T81] usb 3-1: USB disconnect, device number 15 [ 148.533429][ T6803] TCP: out of memory -- consider tuning tcp_mem [ 149.374778][ T6826] syz.3.262: attempt to access beyond end of device [ 149.374778][ T6826] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 149.388208][ T6826] MINIX-fs: unable to read superblock [ 150.147738][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 150.147748][ T30] audit: type=1400 audit(1743953586.192:407): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.211783][ T30] audit: type=1400 audit(1743953586.232:408): avc: denied { read } for pid=5490 comm="dhcpcd" name="n100" dev="tmpfs" ino=2892 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.233437][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.245941][ T30] audit: type=1400 audit(1743953586.232:409): avc: denied { open } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2892 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.268887][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.277188][ T30] audit: type=1400 audit(1743953586.232:410): avc: denied { getattr } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2892 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.300429][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.369400][ T5902] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 150.377050][ T5822] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 150.458530][ T30] audit: type=1400 audit(1743953586.502:411): avc: denied { read } for pid=6837 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.523718][ T30] audit: type=1400 audit(1743953586.502:412): avc: denied { open } for pid=6837 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.529386][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 150.548652][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.561863][ T5822] usb 4-1: not running at top speed; connect to a high speed hub [ 150.570619][ T30] audit: type=1400 audit(1743953586.532:413): avc: denied { getattr } for pid=6837 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.571056][ T5822] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 150.609430][ T30] audit: type=1326 audit(1743953586.552:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5738d169 code=0x7ffc0000 [ 150.632627][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.639684][ T5822] usb 4-1: config 95 has no interface number 0 [ 150.646340][ T5822] usb 4-1: config 95 interface 1 has no altsetting 0 [ 150.653391][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.661112][ T30] audit: type=1326 audit(1743953586.552:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5738d169 code=0x7ffc0000 [ 150.662935][ T5902] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 150.684321][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.684638][ T30] audit: type=1326 audit(1743953586.552:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fba5738d169 code=0x7ffc0000 [ 150.763722][ T5822] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 150.777735][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.787898][ T5902] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.806931][ T5822] usb 4-1: Product: syz [ 150.813293][ T5822] usb 4-1: Manufacturer: syz [ 150.818026][ T5822] usb 4-1: SerialNumber: syz [ 150.823259][ T5902] usb 5-1: config 1 interface 0 has no altsetting 0 [ 150.836203][ T5902] usb 5-1: string descriptor 0 read error: -22 [ 150.849619][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 150.861369][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.882556][ T6831] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 151.111333][ T5902] usb 5-1: USB disconnect, device number 15 [ 151.829498][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 152.038204][ T24] usb 2-1: device descriptor read/64, error -71 [ 152.568928][ T5822] usb 4-1: USB disconnect, device number 13 [ 152.599433][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 152.716060][ T6903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.277'. [ 152.726553][ T6903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.277'. [ 153.729944][ T5822] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 153.825126][ T24] usb 2-1: device descriptor read/64, error -71 [ 154.389773][ T24] usb usb2-port1: attempt power cycle [ 154.449517][ T5822] usb 4-1: device descriptor read/64, error -71 [ 154.699534][ T5822] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 154.827235][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 154.836303][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 154.846030][ T6919] netlink: 38 bytes leftover after parsing attributes in process `syz.1.281'. [ 154.885953][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 154.912515][ T5822] usb 4-1: device descriptor read/64, error -71 [ 154.951674][ T6925] Bluetooth: MGMT ver 1.23 [ 155.033803][ T5822] usb usb4-port1: attempt power cycle [ 155.151301][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 155.151339][ T30] audit: type=1400 audit(1743953591.202:497): avc: denied { read write } for pid=6932 comm="syz.4.283" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.436796][ T30] audit: type=1400 audit(1743953591.212:498): avc: denied { setopt } for pid=6929 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.471195][ T5822] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 155.482811][ T6937] ubi31: attaching mtd0 [ 155.496540][ T6937] ubi31: scanning is finished [ 155.505049][ T30] audit: type=1400 audit(1743953591.432:499): avc: denied { open } for pid=6932 comm="syz.4.283" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.510345][ T5822] usb 4-1: device descriptor read/8, error -71 [ 155.528923][ T6937] ubi31: empty MTD device detected [ 155.629525][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 155.751482][ T30] audit: type=1400 audit(1743953591.662:500): avc: denied { execmem } for pid=6942 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 155.771449][ T30] audit: type=1400 audit(1743953591.692:501): avc: denied { create } for pid=6941 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.795311][ T30] audit: type=1400 audit(1743953591.692:502): avc: denied { create } for pid=6941 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.873006][ T30] audit: type=1400 audit(1743953591.712:503): avc: denied { ioctl } for pid=6941 comm="syz.2.285" path="socket:[12806]" dev="sockfs" ino=12806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.889403][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 155.930146][ T6937] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 155.973346][ T6937] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 156.017339][ T30] audit: type=1400 audit(1743953591.772:504): avc: denied { read append } for pid=6941 comm="syz.2.285" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 156.036434][ T6937] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 156.048788][ T6937] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 156.057097][ T6937] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 156.064379][ T6937] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 156.064494][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.080932][ T6937] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3487473356 [ 156.091438][ T10] usb 5-1: config 0 has no interface number 0 [ 156.097622][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.108745][ T30] audit: type=1400 audit(1743953591.772:505): avc: denied { open } for pid=6941 comm="syz.2.285" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 156.135426][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 156.147482][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.158626][ T6937] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 156.168503][ T6949] ubi31: background thread "ubi_bgt31d" started, PID 6949 [ 156.169264][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 156.186222][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.208522][ T30] audit: type=1400 audit(1743953591.792:506): avc: denied { map } for pid=6941 comm="syz.2.285" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 156.267662][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 156.291871][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.445617][ T6956] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 156.711237][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.275997][ T10] usb 5-1: config 0 descriptor?? [ 157.322614][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 158.181214][ T6933] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 158.222549][ T10] usb 5-1: USB disconnect, device number 16 [ 158.246683][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 159.628380][ T7004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.296'. [ 159.637907][ T7004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.296'. [ 161.029725][ T7007] ubi: mtd0 is already attached to ubi31 [ 161.121996][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 161.122012][ T30] audit: type=1400 audit(1743953597.172:543): avc: denied { getopt } for pid=6995 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.154377][ T7010] dlm: plock device version mismatch: kernel (1.2.0), user (1803188595.1701604449.114) [ 161.183363][ T5901] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 161.229454][ T30] audit: type=1400 audit(1743953597.222:544): avc: denied { create } for pid=7009 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.272069][ T30] audit: type=1400 audit(1743953597.222:545): avc: denied { ioctl } for pid=7009 comm="syz.2.300" path="socket:[12154]" dev="sockfs" ino=12154 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.309102][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 161.343058][ T30] audit: type=1400 audit(1743953597.392:546): avc: denied { read write } for pid=7011 comm="syz.2.301" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.366126][ T5901] usb 5-1: device descriptor read/64, error -71 [ 161.372558][ T30] audit: type=1400 audit(1743953597.392:547): avc: denied { open } for pid=7011 comm="syz.2.301" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.396071][ T30] audit: type=1400 audit(1743953597.392:548): avc: denied { ioctl } for pid=7011 comm="syz.2.301" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.651146][ T5901] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 162.229518][ T30] audit: type=1400 audit(1743953597.752:549): avc: denied { create } for pid=7015 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.369865][ T30] audit: type=1400 audit(1743953597.762:550): avc: denied { read } for pid=7015 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.395037][ T30] audit: type=1400 audit(1743953597.842:551): avc: denied { write } for pid=7015 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.519406][ T5901] usb 5-1: device descriptor read/64, error -71 [ 162.551105][ T30] audit: type=1400 audit(1743953598.592:552): avc: denied { mount } for pid=7025 comm="syz.2.304" name="/" dev="autofs" ino=13000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 162.595858][ T7026] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 162.642895][ T7028] netlink: 'syz.1.305': attribute type 2 has an invalid length. [ 162.651494][ T5901] usb usb5-port1: attempt power cycle [ 162.671560][ T7028] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 162.689637][ T7028] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 162.720757][ T7028] : renamed from dummy0 (while UP) [ 162.934750][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.949243][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.409867][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.423508][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.440888][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.459577][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 163.487718][ T3563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.572937][ T3563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.623735][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 163.633782][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.644659][ T10] usb 2-1: Product: syz [ 163.648923][ T10] usb 2-1: Manufacturer: syz [ 163.654064][ T3563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.654274][ T10] usb 2-1: SerialNumber: syz [ 163.669425][ T5901] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 163.680331][ T10] usb 2-1: config 0 descriptor?? [ 163.690030][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 163.698626][ T5901] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 163.716203][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.724396][ T5901] usb 5-1: Product: syz [ 163.728725][ T5901] usb 5-1: Manufacturer: syz [ 163.739503][ T3563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.741970][ T5901] usb 5-1: SerialNumber: syz [ 163.760218][ T5901] usb 5-1: config 0 descriptor?? [ 163.768452][ T5901] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 163.784679][ T5901] dvb-usb: bulk message failed: -22 (2/0) [ 163.788157][ T7035] chnl_net:caif_netlink_parms(): no params data found [ 163.796262][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.807842][ T5901] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 163.817140][ T5901] usb 5-1: media controller created [ 163.842378][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.925531][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.944457][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.968054][ T7035] bridge_slave_0: entered allmulticast mode [ 163.976371][ T7035] bridge_slave_0: entered promiscuous mode [ 163.985024][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.009424][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.040708][ T7035] bridge_slave_1: entered allmulticast mode [ 164.068783][ T7035] bridge_slave_1: entered promiscuous mode [ 164.226882][ T7035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.287984][ T7035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.414539][ T7035] team0: Port device team_slave_0 added [ 164.470844][ T7035] team0: Port device team_slave_1 added [ 164.873989][ T10] usb 2-1: non-Atmel transceiver xxxx80c7 [ 165.009172][ T3563] bond0 (unregistering): Released all slaves [ 165.028656][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 165.048493][ T10] usb 2-1: Please update to version 0.2 or newer [ 165.055933][ T10] usb 2-1: atusb_probe: initialization failed, error = -19 [ 165.095143][ T10] usb 2-1: USB disconnect, device number 15 [ 165.148881][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.205852][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.262289][ T7035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.531347][ T5826] Bluetooth: hci5: command tx timeout [ 165.552007][ T7066] FAULT_INJECTION: forcing a failure. [ 165.552007][ T7066] name failslab, interval 1, probability 0, space 0, times 0 [ 165.564850][ T7066] CPU: 0 UID: 0 PID: 7066 Comm: syz.2.312 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 165.564874][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.564885][ T7066] Call Trace: [ 165.564892][ T7066] [ 165.564900][ T7066] dump_stack_lvl+0x16c/0x1f0 [ 165.564931][ T7066] should_fail_ex+0x512/0x640 [ 165.564949][ T7066] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 165.564969][ T7066] should_failslab+0xc2/0x120 [ 165.564989][ T7066] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 165.565007][ T7066] ? io_submit_one+0x122/0x1da0 [ 165.565028][ T7066] io_submit_one+0x122/0x1da0 [ 165.565046][ T7066] ? irqentry_exit+0x3b/0x90 [ 165.565068][ T7066] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.565093][ T7066] ? __pfx_io_submit_one+0x10/0x10 [ 165.565117][ T7066] ? __might_fault+0xe3/0x190 [ 165.565135][ T7066] ? __might_fault+0x13b/0x190 [ 165.565162][ T7066] ? __x64_sys_io_submit+0x1a9/0x350 [ 165.565178][ T7066] __x64_sys_io_submit+0x1a9/0x350 [ 165.565197][ T7066] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 165.565213][ T7066] ? fput+0x70/0xf0 [ 165.565242][ T7066] do_syscall_64+0xcd/0x260 [ 165.565266][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.565283][ T7066] RIP: 0033:0x7fca1c78d169 [ 165.565298][ T7066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.565314][ T7066] RSP: 002b:00007fca1d5a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 165.565330][ T7066] RAX: ffffffffffffffda RBX: 00007fca1c9a6160 RCX: 00007fca1c78d169 [ 165.565342][ T7066] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 00007fca1d583000 [ 165.565352][ T7066] RBP: 00007fca1d5a4090 R08: 0000000000000000 R09: 0000000000000000 [ 165.565362][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.565372][ T7066] R13: 0000000000000000 R14: 00007fca1c9a6160 R15: 00007ffdef86b968 [ 165.565393][ T7066] [ 166.048802][ T5901] cxusb: set interface failed [ 166.058758][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 166.115968][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.132754][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.165679][ T7035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.233259][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 166.236747][ T30] audit: type=1400 audit(1743953602.272:565): avc: denied { shutdown } for pid=7069 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.305823][ T5901] DVB: Unable to find symbol mt352_attach() [ 166.326547][ T30] audit: type=1400 audit(1743953602.272:566): avc: denied { getopt } for pid=7069 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.363051][ T30] audit: type=1400 audit(1743953602.272:567): avc: denied { connect } for pid=7069 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.417994][ T5901] dvb-usb: bulk message failed: -22 (5/0) [ 166.429767][ T30] audit: type=1400 audit(1743953602.272:568): avc: denied { name_connect } for pid=7069 comm="syz.4.314" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 166.501701][ T30] audit: type=1400 audit(1743953602.282:569): avc: denied { watch watch_reads } for pid=7069 comm="syz.4.314" path="/proc/227/net" dev="proc" ino=13493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 166.511977][ T5901] zl10353_read_register: readreg error (reg=127, ret==-121) [ 167.100399][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 167.392158][ T5901] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 167.611437][ T5826] Bluetooth: hci5: command tx timeout [ 167.949464][ T10] usb 2-1: device descriptor read/64, error -71 [ 168.289263][ T7035] hsr_slave_0: entered promiscuous mode [ 168.316416][ T7035] hsr_slave_1: entered promiscuous mode [ 168.411594][ T7035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.419187][ T7035] Cannot create hsr debugfs directory [ 168.446588][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.315'. [ 168.489540][ T5901] rc_core: IR keymap rc-dvico-mce not found [ 168.495481][ T5901] Registered IR keymap rc-empty [ 168.539529][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.315'. [ 168.558665][ T5901] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 168.569593][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 168.644782][ T5901] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8 [ 168.684496][ T5901] dvb-usb: schedule remote query interval to 100 msecs. [ 168.689432][ T30] audit: type=1400 audit(1743953604.732:570): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=2850 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.700951][ T5901] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 168.847888][ T3563] hsr_slave_0: left promiscuous mode [ 168.848029][ T5822] dvb-usb: bulk message failed: -22 (1/0) [ 168.860185][ T10] usb 2-1: device descriptor read/64, error -71 [ 168.885727][ T5901] usb 5-1: USB disconnect, device number 19 [ 169.358192][ T30] audit: type=1400 audit(1743953604.732:571): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2850 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.359422][ T10] usb usb2-port1: attempt power cycle [ 169.382875][ T30] audit: type=1400 audit(1743953604.732:572): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2850 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.387619][ T3563] hsr_slave_1: left promiscuous mode [ 169.448890][ T30] audit: type=1400 audit(1743953604.792:573): avc: denied { setopt } for pid=7101 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.496249][ T5901] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 169.507569][ T30] audit: type=1400 audit(1743953605.002:574): avc: denied { write } for pid=7101 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.545108][ T3563] veth1_macvtap: left promiscuous mode [ 169.614025][ T3563] veth0_macvtap: left promiscuous mode [ 169.622748][ T3563] veth1_vlan: left promiscuous mode [ 169.694524][ T5826] Bluetooth: hci5: command tx timeout [ 169.778306][ T7112] mmap: syz.2.320 (7112) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 170.671902][ T3563] team0 (unregistering): Port device vlan0 removed [ 170.728695][ T7130] netlink: 104 bytes leftover after parsing attributes in process `syz.2.326'. [ 170.771439][ T5901] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 170.941423][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 170.961700][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 170.987633][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 171.010077][ T5901] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 171.024944][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.045890][ T5901] usb 5-1: Product: syz [ 171.051313][ T5901] usb 5-1: Manufacturer: syz [ 171.060754][ T5901] usb 5-1: SerialNumber: syz [ 171.076295][ T5901] usb 5-1: config 0 descriptor?? [ 171.083068][ T7122] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.090492][ T7122] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.103087][ T5901] usb 5-1: ucan: probing device on interface #0 [ 171.306344][ T7134] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 171.349432][ T7134] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 171.388405][ T7122] netlink: 84 bytes leftover after parsing attributes in process `syz.4.323'. [ 171.391722][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 171.391736][ T30] audit: type=1400 audit(1743953607.432:576): avc: denied { ioctl } for pid=7121 comm="syz.4.323" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 171.420626][ T7134] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 171.471189][ T30] audit: type=1400 audit(1743953607.452:577): avc: denied { firmware_load } for pid=7131 comm="syz.2.327" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 171.505984][ T7141] bridge0: port 3(veth0_to_bridge) entered blocking state [ 171.510527][ T30] audit: type=1400 audit(1743953607.492:578): avc: denied { write } for pid=7137 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 171.518443][ T7141] bridge0: port 3(veth0_to_bridge) entered disabled state [ 171.533615][ T30] audit: type=1400 audit(1743953607.522:579): avc: denied { create } for pid=7139 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 171.562298][ T30] audit: type=1400 audit(1743953607.542:580): avc: denied { sqpoll } for pid=7139 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.592728][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 171.604054][ T30] audit: type=1400 audit(1743953607.642:581): avc: denied { write } for pid=7139 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 172.669194][ T30] audit: type=1400 audit(1743953607.722:582): avc: denied { read } for pid=7137 comm="syz.1.328" path="socket:[14348]" dev="sockfs" ino=14348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 172.682347][ T5826] Bluetooth: hci5: command tx timeout [ 172.694314][ T7141] veth0_to_bridge: entered allmulticast mode [ 172.699940][ T5901] usb 5-1: ucan: could not read protocol version, ret=-110 [ 172.771609][ T7141] veth0_to_bridge: entered promiscuous mode [ 172.949631][ T5901] usb 5-1: ucan: probe failed; try to update the device firmware [ 172.968626][ T7141] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.019805][ T7141] bridge0: port 3(veth0_to_bridge) entered blocking state [ 173.027091][ T7141] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 173.179198][ T30] audit: type=1400 audit(1743953609.222:583): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 174.323099][ T30] audit: type=1400 audit(1743953609.502:584): avc: denied { write } for pid=7152 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 174.342077][ T30] audit: type=1400 audit(1743953609.662:585): avc: denied { setopt } for pid=7152 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.541543][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 174.550099][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 174.630484][ T7035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.670216][ T7167] ceph: No mds server is up or the cluster is laggy [ 174.752552][ T7035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.781734][ T7035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.812363][ T7035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.827855][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.336'. [ 174.987802][ T7183] loop8: detected capacity change from 0 to 7 [ 175.047933][ T7183] Dev loop8: unable to read RDB block 7 [ 175.104023][ T7183] loop8: unable to read partition table [ 175.110611][ T7183] loop8: partition table beyond EOD, truncated [ 175.138224][ T7035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.185035][ T7183] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 175.185998][ T1202] usb 5-1: USB disconnect, device number 20 [ 175.426365][ T7035] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.964997][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.972172][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.002669][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.009796][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.068553][ T7035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.107957][ T7035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.822130][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.837723][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 176.852195][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:3 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 176.852213][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.852222][ T5826] Workqueue: hci2 hci_rx_work [ 176.852238][ T5826] Call Trace: [ 176.852242][ T5826] [ 176.852246][ T5826] dump_stack_lvl+0x16c/0x1f0 [ 176.852264][ T5826] sysfs_warn_dup+0x7f/0xa0 [ 176.852276][ T5826] sysfs_create_dir_ns+0x24b/0x2b0 [ 176.852287][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 176.852298][ T5826] ? find_held_lock+0x2b/0x80 [ 176.852316][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 176.852330][ T5826] kobject_add_internal+0x2c4/0x9b0 [ 176.852349][ T5826] kobject_add+0x16e/0x240 [ 176.852369][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 176.852385][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 176.852397][ T5826] ? kobject_put+0xab/0x5a0 [ 176.852416][ T5826] device_add+0x288/0x1a70 [ 176.852427][ T5826] ? __pfx_dev_set_name+0x10/0x10 [ 176.852439][ T5826] ? __pfx_device_add+0x10/0x10 [ 176.852450][ T5826] ? mgmt_send_event_skb+0x2fb/0x460 [ 176.852464][ T5826] hci_conn_add_sysfs+0x17e/0x230 [ 176.852477][ T5826] le_conn_complete_evt+0x1075/0x1d70 [ 176.852498][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 176.852515][ T5826] ? hci_event_packet+0x43c/0x1190 [ 176.852529][ T5826] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 176.852540][ T5826] ? skb_pull_data+0x166/0x210 [ 176.852555][ T5826] hci_le_meta_evt+0x2f3/0x5e0 [ 176.852567][ T5826] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 176.852580][ T5826] hci_event_packet+0x669/0x1190 [ 176.852590][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 176.852602][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 176.852614][ T5826] ? kcov_remote_start+0x3c9/0x6d0 [ 176.852625][ T5826] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.852649][ T5826] hci_rx_work+0x2c5/0x16b0 [ 176.852662][ T5826] ? rcu_is_watching+0x12/0xc0 [ 176.852680][ T5826] process_one_work+0x9cc/0x1b70 [ 176.852698][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 176.852717][ T5826] ? assign_work+0x1a0/0x250 [ 176.852730][ T5826] worker_thread+0x6c8/0xf10 [ 176.852749][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 176.852762][ T5826] kthread+0x3c2/0x780 [ 176.852775][ T5826] ? __pfx_kthread+0x10/0x10 [ 176.852786][ T5826] ? __pfx_kthread+0x10/0x10 [ 176.852796][ T5826] ? __pfx_kthread+0x10/0x10 [ 176.852806][ T5826] ? __pfx_kthread+0x10/0x10 [ 176.852816][ T5826] ? rcu_is_watching+0x12/0xc0 [ 176.852829][ T5826] ? __pfx_kthread+0x10/0x10 [ 176.852840][ T5826] ret_from_fork+0x45/0x80 [ 176.852851][ T5826] ? __pfx_kthread+0x10/0x10 [ 176.852861][ T5826] ret_from_fork_asm+0x1a/0x30 [ 176.852884][ T5826] [ 176.852898][ T5826] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.124413][ T5822] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 177.132142][ T5826] Bluetooth: hci2: failed to register connection device [ 177.285348][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 177.285365][ T30] audit: type=1400 audit(1743953613.332:600): avc: denied { sys_module } for pid=7035 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 177.312926][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 177.328812][ T5822] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.339782][ T5822] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.364010][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 177.396859][ T5822] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 177.406464][ T5822] usb 5-1: Product: syz [ 177.410830][ T5822] usb 5-1: Manufacturer: syz [ 177.422567][ T5822] hub 5-1:4.0: USB hub found [ 177.536249][ T7035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.629407][ T5822] hub 5-1:4.0: 2 ports detected [ 177.926831][ T7035] veth0_vlan: entered promiscuous mode [ 177.992644][ T7035] veth1_vlan: entered promiscuous mode [ 178.086413][ T7035] veth0_macvtap: entered promiscuous mode [ 178.893354][ T5822] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 178.969483][ T5822] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 179.001922][ T7035] veth1_macvtap: entered promiscuous mode [ 179.114313][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.155075][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.175915][ T30] audit: type=1400 audit(1743953615.222:601): avc: denied { mounton } for pid=7246 comm="syz.1.347" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 179.216300][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.249462][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.272486][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.294576][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.329568][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.343627][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.401907][ T7035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.430038][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.459829][ T7196] syz.4.340 (7196): drop_caches: 2 [ 179.464988][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.533877][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.579452][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.589262][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.649435][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.659268][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.659579][ T1202] usb 5-1: USB disconnect, device number 21 [ 179.725161][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.748806][ T7258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.790175][ T7035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.797497][ T30] audit: type=1400 audit(1743953615.842:602): avc: denied { append } for pid=7252 comm="syz.1.349" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.863604][ T7035] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.885017][ T7035] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.901646][ T7035] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.089388][ T7268] sctp: [Deprecated]: syz.4.351 (pid 7268) Use of int in maxseg socket option. [ 180.089388][ T7268] Use struct sctp_assoc_value instead [ 180.093415][ T7035] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.174630][ T7271] pim6reg9: entered allmulticast mode [ 181.069340][ T30] audit: type=1400 audit(1743953616.672:603): avc: denied { create } for pid=7270 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 181.088640][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.431123][ T7275] block device autoloading is deprecated and will be removed. [ 181.438901][ T7275] syz.2.350: attempt to access beyond end of device [ 181.438901][ T7275] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 181.462710][ T30] audit: type=1400 audit(1743953617.442:604): avc: denied { ioctl } for pid=7270 comm="syz.2.350" path="socket:[14926]" dev="sockfs" ino=14926 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 182.341343][ T30] audit: type=1400 audit(1743953617.622:605): avc: denied { read } for pid=7277 comm="syz.4.352" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.512560][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.526833][ T30] audit: type=1400 audit(1743953617.622:606): avc: denied { open } for pid=7277 comm="syz.4.352" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.556585][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.988132][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.006635][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.019013][ T30] audit: type=1400 audit(1743953619.052:607): avc: denied { create } for pid=7290 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 183.061078][ T5902] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 183.116343][ T30] audit: type=1400 audit(1743953619.122:608): avc: denied { mounton } for pid=7035 comm="syz-executor" path="/root/syzkaller.I35PrN/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 183.176153][ T30] audit: type=1400 audit(1743953619.122:609): avc: denied { mount } for pid=7035 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.230067][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 183.249386][ T5902] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.306792][ T30] audit: type=1400 audit(1743953619.132:610): avc: denied { mount } for pid=7035 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 183.777574][ T30] audit: type=1400 audit(1743953619.142:611): avc: denied { mounton } for pid=7035 comm="syz-executor" path="/root/syzkaller.I35PrN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 183.808305][ T30] audit: type=1400 audit(1743953619.142:612): avc: denied { mounton } for pid=7035 comm="syz-executor" path="/root/syzkaller.I35PrN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 183.816303][ T5902] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.835978][ T81] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 183.853489][ T30] audit: type=1400 audit(1743953619.162:613): avc: denied { mounton } for pid=7035 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 183.905091][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.914536][ T30] audit: type=1400 audit(1743953619.162:614): avc: denied { mount } for pid=7035 comm="syz-executor" name="/" dev="gadgetfs" ino=6572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 183.954750][ T5902] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 183.977181][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.007998][ T5902] usb 3-1: config 0 descriptor?? [ 184.013789][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 184.061266][ T7309] Cannot find del_set index 0 as target [ 184.071546][ T81] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 184.121834][ T81] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 184.149004][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.171579][ T81] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 184.179395][ T1202] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 184.329199][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 184.339162][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 184.349568][ T1202] usb 4-1: Invalid ep0 maxpacket: 64 [ 184.351212][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.363962][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.372299][ T10] usb 2-1: Product: syz [ 184.376499][ T10] usb 2-1: Manufacturer: syz [ 184.429999][ T7324] sctp: [Deprecated]: syz.5.361 (pid 7324) Use of int in maxseg socket option. [ 184.429999][ T7324] Use struct sctp_assoc_value instead [ 184.539958][ T1202] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 184.789500][ T1202] usb 4-1: Invalid ep0 maxpacket: 64 [ 184.801019][ T10] usb 2-1: SerialNumber: syz [ 184.813605][ T5902] saitek 0003:06A3:0621.0005: unknown main item tag 0x2 [ 184.816775][ T1202] usb usb4-port1: attempt power cycle [ 184.820648][ T5902] saitek 0003:06A3:0621.0005: unbalanced collection at end of report description [ 184.821303][ T5902] saitek 0003:06A3:0621.0005: parse failed [ 184.842670][ T5902] saitek 0003:06A3:0621.0005: probe with driver saitek failed with error -22 [ 185.067273][ T10] cdc_ncm 2-1:1.0: bind() failure [ 185.082675][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 185.099478][ T10] cdc_ncm 2-1:1.1: bind() failure [ 185.109153][ T10] usb 2-1: USB disconnect, device number 19 [ 185.189551][ T1202] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 185.220575][ T81] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 185.237368][ T1202] usb 4-1: Invalid ep0 maxpacket: 64 [ 185.286791][ T81] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 185.304609][ T81] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 185.548065][ T10] usb 5-1: USB disconnect, device number 22 [ 185.769470][ T1202] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 185.798256][ T1202] usb 4-1: Invalid ep0 maxpacket: 64 [ 185.804200][ T1202] usb usb4-port1: unable to enumerate USB device [ 185.851703][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 185.858401][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 185.865481][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 185.866204][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 186.276096][ T1202] usb 3-1: USB disconnect, device number 16 [ 188.043651][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 188.043667][ T30] audit: type=1400 audit(1743953624.092:626): avc: denied { write } for pid=7394 comm="syz.1.370" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 188.637190][ T30] audit: type=1400 audit(1743953624.282:627): avc: denied { ioctl } for pid=7386 comm="syz.2.368" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.679951][ T7395] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.370' resets device [ 188.762138][ T30] audit: type=1400 audit(1743953624.802:628): avc: denied { setopt } for pid=7399 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.020861][ T7408] sctp: [Deprecated]: syz.1.372 (pid 7408) Use of int in maxseg socket option. [ 189.020861][ T7408] Use struct sctp_assoc_value instead [ 190.349129][ T7429] overlayfs: missing 'lowerdir' [ 191.469473][ T30] audit: type=1400 audit(1743953627.462:629): avc: denied { shutdown } for pid=7420 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.819410][ T30] audit: type=1400 audit(1743953627.862:630): avc: denied { bind } for pid=7439 comm="syz.5.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 191.857430][ T7441] dccp_close: ABORT with 36 bytes unread [ 191.890824][ T30] audit: type=1400 audit(1743953627.862:631): avc: denied { name_bind } for pid=7439 comm="syz.5.380" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 191.926017][ T30] audit: type=1400 audit(1743953627.862:632): avc: denied { node_bind } for pid=7439 comm="syz.5.380" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 191.982935][ T30] audit: type=1400 audit(1743953627.872:633): avc: denied { listen } for pid=7439 comm="syz.5.380" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 192.010078][ T30] audit: type=1400 audit(1743953627.872:634): avc: denied { connect } for pid=7439 comm="syz.5.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 192.053280][ T30] audit: type=1400 audit(1743953627.872:635): avc: denied { name_connect } for pid=7439 comm="syz.5.380" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 192.784365][ T7455] SELinux: Context system_u:object_r:crack_exec_t:s0 is not valid (left unmapped). [ 192.825399][ T7455] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.936965][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.4.382'. [ 192.947226][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.4.382'. [ 193.073396][ T1202] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.239612][ T10] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 193.459531][ T10] usb 5-1: device descriptor read/64, error -71 [ 193.753168][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 193.753191][ T30] audit: type=1400 audit(1743953629.802:659): avc: denied { create } for pid=7465 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.785462][ T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 193.853380][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.858172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 193.873033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 193.885335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 193.897607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 193.909876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 193.922132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 193.934411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 193.946783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 193.959053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 195.192339][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.859479][ C0] net_ratelimit: 6696 callbacks suppressed [ 196.859499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.877670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.889979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.902312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.914718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.927430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.939752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.952070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.964371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 196.976674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 198.794130][ C1] sched: DL replenish lagged too much [ 201.869401][ C1] net_ratelimit: 19235 callbacks suppressed [ 201.869418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.879455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.888303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.899532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 201.912066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.923362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.935954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.947230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.959994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.971094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 204.112353][ T10] usb 5-1: device descriptor read/64, error -110 [ 206.879463][ C0] net_ratelimit: 18336 callbacks suppressed [ 206.879481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.879943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.885674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.898264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.909554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 206.922174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.933427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.946072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.957383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.969865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.289422][ T10] usb usb5-port1: attempt power cycle [ 209.667276][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 211.889606][ C0] net_ratelimit: 20834 callbacks suppressed [ 211.889624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.889874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.895772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 211.908589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.919668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.932917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.943667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.956169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.967418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 211.980062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.077382][ T10] usb 5-1: device descriptor read/8, error -110 [ 216.899410][ C0] net_ratelimit: 21304 callbacks suppressed [ 216.899430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 216.900025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.905539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.918798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.929541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.942132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.953296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 216.966005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.977171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.989931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.909378][ C0] net_ratelimit: 20446 callbacks suppressed [ 221.909397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 221.909534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.915509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.928167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.939504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.952000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.963242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 221.975862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.987113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.999869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.919532][ C0] net_ratelimit: 20638 callbacks suppressed [ 226.919550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 226.919833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.925691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.938421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.949667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.962238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.973417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 226.986104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.997278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.010007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.318961][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 227.778729][ T10] usb 5-1: device descriptor read/8, error -32 [ 231.929397][ C0] net_ratelimit: 21507 callbacks suppressed [ 231.929415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.930126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.935602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.948145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.959394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 231.972066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.983252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.996000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.007197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.019762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.939386][ C1] net_ratelimit: 22079 callbacks suppressed [ 236.939406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.939475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.946395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.957462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 236.970323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.981312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.994267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.005343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.018078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.029309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 241.949378][ C0] net_ratelimit: 22080 callbacks suppressed [ 241.949400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.949989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.955570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 241.968461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.979462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.992381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.003448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.016380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.027241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 242.040118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.959413][ C0] net_ratelimit: 22098 callbacks suppressed [ 246.959434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 246.960296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.965549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.978376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.989549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.002143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.013301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 247.026048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.037478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.049977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.969554][ C0] net_ratelimit: 22164 callbacks suppressed [ 251.969575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.969827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.975737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 251.989017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.999649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.012605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.023606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.036583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.047468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 252.060357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.166650][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.183324][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.979533][ C0] net_ratelimit: 22045 callbacks suppressed [ 256.979555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 256.979598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.985679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.998498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.009735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.022338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.033503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 257.046216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.057359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.070074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.989365][ C1] net_ratelimit: 22122 callbacks suppressed [ 261.989384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.989442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 261.996340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.007392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.020290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.031369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.044085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.055164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 262.068332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.079058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.999303][ C0] net_ratelimit: 21904 callbacks suppressed [ 266.999333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.999750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.005529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.018150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.029452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 267.042136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.053334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.066084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.077277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.090078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.009517][ C0] net_ratelimit: 21696 callbacks suppressed [ 272.009537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.009781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.015752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 272.028463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.039612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.052439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.063568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.076429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.087608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 272.100413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.019323][ C0] net_ratelimit: 21996 callbacks suppressed [ 277.019343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.020017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.025578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.038276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.049427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 277.062306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.073284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.086269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.097425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.110022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.029395][ C0] net_ratelimit: 22077 callbacks suppressed [ 282.029414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.029802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.035559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 282.048437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.059451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.072480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.083603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.096272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.107313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 282.120206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.039533][ C0] net_ratelimit: 22266 callbacks suppressed [ 287.039552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 287.040371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.045662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.058437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.069645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.082222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.093411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 287.106172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.117276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.130042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.443543][ T7351] Bluetooth: hci5: command 0x0406 tx timeout [ 292.049396][ C0] net_ratelimit: 22311 callbacks suppressed [ 292.049418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.049746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.055583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 292.068228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.079467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.092231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.103425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.115969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.127218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 292.139901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.059406][ C0] net_ratelimit: 22451 callbacks suppressed [ 297.059425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.059996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.065613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.078366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.089414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 297.102289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.113270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.126190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.137249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.149996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.069419][ C0] net_ratelimit: 21632 callbacks suppressed [ 302.069440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 302.069588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.075618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.088452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.099683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.112340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.123450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 302.136229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.147306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.160132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.079406][ C0] net_ratelimit: 21520 callbacks suppressed [ 307.079427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 307.079952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.085650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.098527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.109750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.122267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.133426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 307.146059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.157301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.169986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.699261][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 311.706249][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7460/1:b..l [ 311.714636][ C1] rcu: (detected by 1, t=10503 jiffies, g=16317, q=1614 ncpus=2) [ 311.722449][ C1] task:syz.4.382 state:R running task stack:27560 pid:7460 tgid:7458 ppid:5837 task_flags:0x40054c flags:0x00004006 [ 311.737036][ C1] Call Trace: [ 311.740336][ C1] [ 311.743269][ C1] __schedule+0x116f/0x5de0 [ 311.747785][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 311.752726][ C1] ? __pfx___schedule+0x10/0x10 [ 311.757591][ C1] ? mark_held_locks+0x49/0x80 [ 311.762363][ C1] preempt_schedule_irq+0x51/0x90 [ 311.767398][ C1] irqentry_exit+0x36/0x90 [ 311.771813][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.777792][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 311.782998][ C1] Code: b1 0e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 34 ee 0e 0f 82 74 02 00 00 8b 35 9a 63 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 b0 0e 12 0f 85 c7 02 00 00 48 83 c4 [ 311.802617][ C1] RSP: 0018:ffffc90003527310 EFLAGS: 00000206 [ 311.808696][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c1580 RCX: 000000005a0f5d31 [ 311.816675][ C1] RDX: 0000000000000000 RSI: ffffffff8dbc95df RDI: ffffffff8bf46580 [ 311.824650][ C1] RBP: 0000000000000002 R08: 4041169fe9a36e16 R09: 0000000000000000 [ 311.832622][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 311.840589][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.848575][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 311.853785][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 311.859953][ C1] unwind_next_frame+0xd1/0x20a0 [ 311.864891][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 311.870004][ C1] ? debug_object_activate+0x10b/0x4c0 [ 311.875476][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 311.880851][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 311.887007][ C1] arch_stack_walk+0x94/0x100 [ 311.891691][ C1] ? debug_object_activate+0x10b/0x4c0 [ 311.897158][ C1] stack_trace_save+0x8e/0xc0 [ 311.901834][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 311.907214][ C1] kasan_save_stack+0x33/0x60 [ 311.911892][ C1] ? kasan_save_stack+0x33/0x60 [ 311.916771][ C1] ? kasan_save_track+0x14/0x30 [ 311.921636][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 311.926662][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 311.932299][ C1] ? kmem_alloc_batch+0x49/0x170 [ 311.937247][ C1] ? debug_objects_fill_pool+0x228/0x500 [ 311.942885][ C1] ? debug_object_activate+0x10b/0x4c0 [ 311.948382][ C1] kasan_save_track+0x14/0x30 [ 311.953072][ C1] __kasan_slab_alloc+0x89/0x90 [ 311.957929][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 311.963386][ C1] ? kmem_alloc_batch+0x49/0x170 [ 311.968329][ C1] kmem_alloc_batch+0x49/0x170 [ 311.973099][ C1] debug_objects_fill_pool+0x228/0x500 [ 311.978562][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 311.984552][ C1] debug_object_activate+0x10b/0x4c0 [ 311.989844][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 311.995654][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 312.001473][ C1] ? __slab_free+0x49c/0x500 [ 312.006078][ C1] ? __pfx_rcu_free_slab+0x10/0x10 [ 312.011201][ C1] __call_rcu_common.constprop.0+0x2c/0x9f0 [ 312.017096][ C1] ? qlist_free_all+0x49/0x120 [ 312.021861][ C1] qlist_free_all+0x4e/0x120 [ 312.026449][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 312.031915][ C1] __kasan_slab_alloc+0x69/0x90 [ 312.036777][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 312.042236][ C1] ? __pfx_acct_collect+0x10/0x10 [ 312.047261][ C1] ? taskstats_exit+0x654/0xbe0 [ 312.052114][ C1] taskstats_exit+0x654/0xbe0 [ 312.056788][ C1] ? __pfx_taskstats_exit+0x10/0x10 [ 312.062000][ C1] do_exit+0x85f/0x2c30 [ 312.066161][ C1] ? __pfx___might_resched+0x10/0x10 [ 312.071538][ C1] ? __pfx_do_exit+0x10/0x10 [ 312.076124][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 312.081158][ C1] ? find_held_lock+0x2b/0x80 [ 312.085837][ C1] do_group_exit+0xd3/0x2a0 [ 312.089285][ C0] net_ratelimit: 21613 callbacks suppressed [ 312.089297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.090327][ C1] get_signal+0x2673/0x26d0 [ 312.096575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.108072][ C1] ? kmem_cache_free+0x2d4/0x4d0 [ 312.108104][ C1] ? __pfx_get_signal+0x10/0x10 [ 312.108131][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 312.112868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 312.124537][ C1] ? __fget_files+0x20e/0x3c0 [ 312.124558][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 312.129696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.134564][ C1] ? __pfx_do_writev+0x10/0x10 [ 312.140405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.152025][ C1] ? rcu_is_watching+0x12/0xc0 [ 312.152053][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 312.156930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 312.162834][ C1] do_syscall_64+0xda/0x260 [ 312.162864][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.174950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.179442][ C1] RIP: 0033:0x7fa43cb8d169 [ 312.179457][ C1] RSP: 002b:00007fa43d969038 EFLAGS: 00000246 [ 312.191734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.196146][ C1] ORIG_RAX: 0000000000000014 [ 312.202015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 312.213715][ C1] RAX: 000000000000a3d1 RBX: 00007fa43cda5fa0 RCX: 00007fa43cb8d169 [ 312.213727][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 312.213737][ C1] RBP: 00007fa43cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.218432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.224076][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.224089][ C1] R13: 0000000000000000 R14: 00007fa43cda5fa0 R15: 00007ffd8253a7d8 [ 312.224113][ C1] [ 317.099432][ C0] net_ratelimit: 20286 callbacks suppressed [ 317.099453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.099747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.105735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 317.118384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.129548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.142295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.153525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.166105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.177282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:f7:e5:ac:4f:24, vlan:0) [ 317.190023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)