last executing test programs: 3m9.469516418s ago: executing program 1 (id=99): mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r0, &(0x7f0000000440)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) linkat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000480)) 3m9.456668439s ago: executing program 1 (id=100): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) 3m9.242262973s ago: executing program 1 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m9.171684434s ago: executing program 1 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2145499, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m9.104478445s ago: executing program 1 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x1000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000600)) 3m8.960265488s ago: executing program 1 (id=105): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) 3m8.960102238s ago: executing program 32 (id=105): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) 2m12.414778316s ago: executing program 2 (id=1129): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)={0x1, 0x0, [{0x3, 0x1, 0x1, 0x0, @adapter={0x7fbfffffffffe, 0xfffffffffffffffe, 0x6, 0x2, 0x7}}]}) 2m12.369647888s ago: executing program 2 (id=1130): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x380) 2m12.320563479s ago: executing program 2 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc02366b97d3de60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001cac80493e131ccc00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x4, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x80000006, 0x5, 0x6, 0x101, 0xc000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x164) 2m12.302235739s ago: executing program 2 (id=1132): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) 2m12.26544173s ago: executing program 2 (id=1133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa8a, 0x5}) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x16) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184880) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2882, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x7}, 0x20000855) r8 = dup(r5) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3daf983bc53e22039126650533a1a68eefe41b17e40f3065786e42467b7c682aa8ca19a3e9ba9b48475345907095f5856b4d6ca4f37e7bbb20ffe881f2cefdd7f5fafe4fcb51bfc0748ff414f0384bae3dd000da49b779bf23e79c004197baafaf89e5850c17200a3243ce2755c49f4450", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="d2a48084290212bdf9ff3d0000e98b5f00", @ANYRESHEX=r10, @ANYBLOB=',k']) recvmmsg(0xffffffffffffffff, 0x0, 0x16, 0x60, 0x0) memfd_secret(0x0) 2m12.133449892s ago: executing program 2 (id=1139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x6}, {0xd, 0xfb, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m12.119503193s ago: executing program 33 (id=1139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x6}, {0xd, 0xfb, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.977001823s ago: executing program 4 (id=1709): syz_usb_disconnect(0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x110) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x31) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x40, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x969, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xf9, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x10, 0x5, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x8, 0xab}}}}}]}}]}}, 0x0) geteuid() chroot(&(0x7f00000009c0)='./file0\x00') syz_usb_disconnect(r1) r2 = syz_usb_connect$cdc_ncm(0x3, 0x73, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x8, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "358d728d61"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1c00, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0x8001, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x5df, 0x7, 0x2, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x2, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x21, 0x95, {0x95, 0x23, "93005ceabf217fad123d9a8d0ea8f38603a5b506f862f49f2e333c04ae58bfd849beadf0c2e0f8da6c1f535eb4cc8d21c4258f0830c6870f0c646687dd6350b07503ef1e98b51000d0fe8d9e1cf9de05ff3b854175664f3f3e3fc6321484c6a6e38765b777bf8f650e51755361fd6a519406dd31679aa684bc11f044fe7caf486e19d70c5af938700f6f5ac80dcfb7d2d28799"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0xe, 0x41, "1deaab8ca8a1a649960183334d55e560c5ce5384056361af14ca942e319cd631644aa6c44a34547d0e4b84a5bf6abba8787fc47177e566b9b88c9b20a4ae37d138"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x2, 0x3, 0x7f, 0x4, 0x10, 0x6, 0x6, 0x4, 0x360, 0x7fff}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000e40)={0x20, 0x83, 0x2}, 0x0, &(0x7f0000000ec0)={0x20, 0x89, 0x2, 0x1}}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000fc0)='./file0\x00', 0x20000, 0x4) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0xfffffffffffffffc, &(0x7f0000001c80)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x250, 0x0, 0x3, 0xc, 0x40, 0x7}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001d80)={0x14, 0x0, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x44, 0x0, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000001ec0)={0x20, 0x80, 0x1c, {0x200, 0x956, 0x1, 0x2, 0x2, 0xd8, 0x163, 0xe2, 0x9, 0x2, 0x8a0, 0x5}}, &(0x7f0000001f00)={0x20, 0x85, 0x4, 0xa97}, &(0x7f0000001f40)={0x20, 0x83, 0x2, 0x1}, 0x0, &(0x7f0000001fc0)={0x20, 0x89, 0x2, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r5) syz_usb_ep_write(r2, 0x81, 0xe1, &(0x7f00000020c0)="f114cbc65fc2da9d692dec52fc3ef856f4ab8e3d697dbe6e2204e32de46031896a9a25474b0fc1044eed92ec2376002f59db78149acdfb7b4fa3725784a09e73e27cb87b648541b2da6f3cef0af581a7c55038bb9901a63001ce4eacda2728722bdde81817fb24fb9d985c7ec64c301903aecf0aab75a96cfe6c3e7600fefcfd0113bab5b457a0673eca15e63f817863f249fcb5d577d8dae1efcc6f56bcc6f80a4676482f7de71a4bed33f40ed067add885618f86b062e4fea7ba1d30aa64b0b1c188c44f3e88d89fed5c92bb2519273858061512738e1444668f1c31276704e6") ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002a80)={r4, 0x9, 0x1}) 1m32.304481206s ago: executing program 3 (id=1722): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x40049409, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x28, 0x3, 0x0, {0x10, @ether_spec={@local, @remote, 0x1ff}, {0x0, @random="cc80348623a4", 0x0, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x28}, @mcast1, 0x4e22, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) 1m32.304275086s ago: executing program 3 (id=1723): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2601a1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xdc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m32.304026106s ago: executing program 3 (id=1724): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa8a, 0x5}) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x16) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184880) r6 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2882, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="021300030d000000ff0e0000fedbdf250100090000000000030006000000000002004e2300008c000000000000006ea771eff680496e963d1e0ea6d94e460000010016004e2300000600090020010000c3529bf5b721fdbfae37fd0b768749727799157520500a7ab89d6572aae15831f054514600000000781bd215ddac5087890600c1c9d4d9fac9614a0cba7dc4aa49bd20d1ae2695353b61204377c89493a9ebe157cf8ba51a7d3d40257b33c118c45e461ed242504e07ff42e4665fd9c37eb4815ce0b52d30547c22a21d891b91666c5398df69c64d80fb1ea1350eb3b2542ca4146ff3af977a1d9eea306e132dca5d0e220307d27014ea350698b9710f36bbcd4c7bb45d4ce8ff7202ccdbd7c6c6ab46ad993810df2a"], 0x68}, 0x1, 0x7}, 0x20000855) r7 = dup(r5) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3daf983bc53e22039126650533a1a68eefe41b17e40f3065786e42467b7c682aa8ca19a3e9ba9b48475345907095f5856b4d6ca4f37e7bbb20ffe881f2cefdd7f5fafe4fcb51bfc0748ff414f0384bae3dd000da49b779bf23e79c004197baafaf89e5850c17200a3243ce2755c49f4450", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="d2a48084290212bdf9ff3d0000e98b5f00", @ANYRESHEX=r9, @ANYBLOB=',k']) recvmmsg(0xffffffffffffffff, 0x0, 0x16, 0x60, 0x0) memfd_secret(0x0) 1m32.247156477s ago: executing program 3 (id=1726): fchdir(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000180)="4f2ef2e1dd05fe80000000008e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d9b96b0b0000b81c900000ba000000000f3065470f01c4410f79d226450f01cb", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.008647442s ago: executing program 3 (id=1728): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) request_key(0x0, 0x0, &(0x7f0000000200)='syz', 0xfffffffffffffff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) open(0x0, 0x48141, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) epoll_create1(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmmsg$inet(r3, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {&(0x7f0000000340)="f5e02557260895c30c783c24f15b58ec572c71197a19263563bc57bc1d16aad04fbeecafae3dcb272f3e25b7e62885da52b369b0a4ea22b59eea0ac709230c06201e50988bc207177345bbe8df77a5e3285fa8f19782dd86b99d641e30edf537e08a606d4b83c757404f827a018efcd0dfa33b0882a27a1a5ef853b6be2e49c2", 0x80}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="ae1fc89a59f8cdf752c0e39bac93c82787f5", 0x12}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x80) 1m31.976462332s ago: executing program 4 (id=1729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x6, 0x7, 0x9, 0x7, 0x8, 0x4, 0x0, 0xf4, 0xff, 0x0, 0x36, 0xfffffffffffffffc}, {0x31, 0x4, 0x7, 0x9, 0x6, 0xb, 0x4, 0x6, 0x9, 0x4, 0xe3, 0x10, 0xfffffffffffffff9}, {0x1, 0x8, 0x5a, 0x0, 0x2, 0x3, 0xaf, 0x7, 0xff, 0x6, 0x2, 0x5, 0xe}], 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.975909873s ago: executing program 3 (id=1730): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x4, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0x9, 0x9, 0x6, 0x0, 0x0, 0x6, 0x10, 0xa, 0x9, 0x7f, 0x9f, '\x00', 0x6b}) 1m31.920424883s ago: executing program 4 (id=1731): socket(0x28, 0x5, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff008}, {0x6}]}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x800) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 1m29.293040204s ago: executing program 5 (id=1737): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="effdffff5a001f001007f4110800040002", 0x11) 1m28.911636102s ago: executing program 4 (id=1738): syz_usb_disconnect(0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x110) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x31) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x40, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x969, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xf9, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x10, 0x5, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x8, 0xab}}}}}]}}]}}, 0x0) geteuid() chroot(&(0x7f00000009c0)='./file0\x00') syz_usb_disconnect(r1) r2 = syz_usb_connect$cdc_ncm(0x3, 0x73, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x8, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "358d728d61"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1c00, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0x8001, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x5df, 0x7, 0x2, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x2, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x21, 0x95, {0x95, 0x23, "93005ceabf217fad123d9a8d0ea8f38603a5b506f862f49f2e333c04ae58bfd849beadf0c2e0f8da6c1f535eb4cc8d21c4258f0830c6870f0c646687dd6350b07503ef1e98b51000d0fe8d9e1cf9de05ff3b854175664f3f3e3fc6321484c6a6e38765b777bf8f650e51755361fd6a519406dd31679aa684bc11f044fe7caf486e19d70c5af938700f6f5ac80dcfb7d2d28799"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0xe, 0x41, "1deaab8ca8a1a649960183334d55e560c5ce5384056361af14ca942e319cd631644aa6c44a34547d0e4b84a5bf6abba8787fc47177e566b9b88c9b20a4ae37d138"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x2, 0x3, 0x7f, 0x4, 0x10, 0x6, 0x6, 0x4, 0x360, 0x7fff}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000e40)={0x20, 0x83, 0x2}, 0x0, &(0x7f0000000ec0)={0x20, 0x89, 0x2, 0x1}}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000fc0)='./file0\x00', 0x20000, 0x4) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0xfffffffffffffffc, &(0x7f0000001c80)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x250, 0x0, 0x3, 0xc, 0x40, 0x7}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001d80)={0x14, 0x0, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x44, 0x0, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000001ec0)={0x20, 0x80, 0x1c, {0x200, 0x956, 0x1, 0x2, 0x2, 0xd8, 0x163, 0xe2, 0x9, 0x2, 0x8a0, 0x5}}, &(0x7f0000001f00)={0x20, 0x85, 0x4, 0xa97}, &(0x7f0000001f40)={0x20, 0x83, 0x2, 0x1}, 0x0, &(0x7f0000001fc0)={0x20, 0x89, 0x2, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r5) syz_usb_ep_write(r2, 0x81, 0xe1, &(0x7f00000020c0)="f114cbc65fc2da9d692dec52fc3ef856f4ab8e3d697dbe6e2204e32de46031896a9a25474b0fc1044eed92ec2376002f59db78149acdfb7b4fa3725784a09e73e27cb87b648541b2da6f3cef0af581a7c55038bb9901a63001ce4eacda2728722bdde81817fb24fb9d985c7ec64c301903aecf0aab75a96cfe6c3e7600fefcfd0113bab5b457a0673eca15e63f817863f249fcb5d577d8dae1efcc6f56bcc6f80a4676482f7de71a4bed33f40ed067add885618f86b062e4fea7ba1d30aa64b0b1c188c44f3e88d89fed5c92bb2519273858061512738e1444668f1c31276704e6") ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002a80)={r4, 0x9, 0x1}) 1m27.078464398s ago: executing program 5 (id=1740): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000780)="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", 0xfc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x7800, 0x40, 0x2, 0x0, {{0x18, 0x4, 0x1, 0x2d, 0x60, 0x67, 0x0, 0xd, 0x2f, 0x0, @empty, @remote, {[@noop, @noop, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x34, 0xc9, 0x1, 0x0, [{@multicast1, 0x2}, {@multicast2, 0xce3}, {@empty, 0xffff}, {@loopback, 0x8000}, {@local, 0xf}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffe5}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x34, [@empty, @multicast1]}]}}}}}) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000480)="fdc97c0d1b2eebf6de8bbf834bcaa70e3384e96ed00d602c1d6fdf657ccc6357453017f8e62715911c954068f4cf45fc95eb9b80e143ef26b34c6a7385d6bdec006df192019dcfb5b2bdeb1e1081bb304cd024bc80c003bb8a75ac239f5d1caa8ff63c599493a8bd2957", 0x6a}, {&(0x7f0000000140)="d8dbd8d620f36a410a5f0b0770b70688e132de709ede152f48c813bc202ecd1255ebc277719e517f2f5205fc78f138", 0x2f}, {&(0x7f0000000500)="ab632ebb21", 0x5}, {&(0x7f0000000540)="888cd594f8d1d84e59c00ae8af3c90d29e62e0c2b8a5ba440c945ad2b88abda655c65937bd2371cd246bd449eee9f442", 0x30}], 0x4, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x557d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa12}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @multicast2}}}], 0x80}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x8081}, 0xc000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x401, 0x7, 0x10001, 0x7, 0x28000}, 0x14) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001400e04000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104206558"], 0xfdef) 1m25.597386126s ago: executing program 4 (id=1741): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000080) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001540), &(0x7f0000001300)=0x60, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000015c0)=0x6, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)="1fe314f7bc0a6a6fcd057e92f98f51ef291b015636f66fe2a42db9c06a390d07e152c86193da40038f52dccbeccd2d1f745ab9c2d74acafdf9fd362f2fadddcdcee8c539af02a4bd5f1414b3e67f8b2aad97f7eae10070626554130e52df04b1131f44c0da4aefa9f27b10668337f772885179ee15dda016e719bed86af3d41bdcb0d421f248b918f04c819f18e8320c029f", 0x92}], 0x1}}, {{&(0x7f00000013c0)={0xa, 0x4e20, 0xfff, @private0, 0xc50}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="4ed489934797feef54cca18c488f302630ff4632", 0x14}, {&(0x7f00000001c0)="7814f9da8eec43f4f776d4bd4cde04e22efa2e46ff2023ab7d2f1ad4aed7363acb614443f136e7958d02a43662d7b06e592aa38cbb82f380098f9ef21ad78c367d88352abe6b1b1621604396f8369c9d9e32a531bf4c9a7b7aedbc31897dea98c59c8ddb08028732dd9767e66aa7a036876242ef44e520829f20ee337ba5d6e4e487d33801045185ee840446cdc4c5b9c1778a5000a74f6dc6d7403a24493dfb6b3c", 0xa2}, {&(0x7f0000000280)="9dee41c862ab01ae62308f0715c42c0e480133b305bfa6b9a4c6c2d2e0ad7c2d2bfdab7d0c1e", 0x26}, {&(0x7f00000002c0)="8e25e5d6e2cbba554a9e987b1cd46006e5b9ff8a4aea55cb81229505bdeb46c44b0aa45481ba79f0107f0f21dd3d23ab379017221dd7f2d0ec2807b2da017200d8fbf21f52c1d6848a7e7c2d76e1c3daa6bb6f4b09fa522364d6ed78e3c80caaeca38ea5920e5f2c1ce4c06e28200c00ff2e7b0af3701a4669b2820c1202d0fcf9bd1a92c3d901ecdcb8361cc6080d9a1b0cfe058b5cc870be4cced9e2e15991fb363dc5c9496467dabc37e5f190716ed185e39ebb1010b94e80d7e1c61c38a720c57792a221f731fb4cea895dfc534073bb55098d6b3248db70d993e601061f95873261406c50d987b57cb082e7abb511cd6e88297dd792d247fa274f1341bdc908f21465827efc0019c3923f4ebb17256ac979251a58b0576bf85bed733cbc65c38c5da1a0c9cc57a1784152e0a3c5c24de636172b5c5c94c67fe5e3ca95c9493835681aaec49e11b8da3123b6d8d0833824aac72d3dcd504ac02c2dbd0a7dd62a6b996da0acf599603d7dc7d820818e4210eca9cc53d2a3313295f8bc67a3feee8247ac7fb8a97690e382534464899f71d1146d52c645e1d42e0bda13e7117d4a072c4c8b7ceb1c3b7ce8ae90b88fccc7988109ba7f4bfc68bfdc1b536721dd2ab0862b7792043a580f75d4e1f4c5dd9e4dadbd608c12471cad2d1f5533efde12edfb3a4cb8cdc4555d96c4707ef0b85b23bf3d486ed70b654de496ed8f4bec982fb0776e62f7147267e85acab818a1ad90c64d6687cf82ee9dc7d80c1381d0e7e253c925c1a71d1e43399512bc79b8d0006691c73db80e200423430043d455c963ab6226735e9048cc3f8c9c6e5b8c1b19e2e447dac2498ec5f8433aaf67f6680f07768282886ce9c5dc008dc3ef37d5b5b684c26b2e172f66fa690e9d6c8c339692a723bd6451b25210d31c689f3416119f1f9e50a5d27d42be83c5453d84929123d543d750c45d01a4ec9ded8dcdec9511279faee1c109b45fb1ba3ba4335b6d2a9068e69c2fbdd6e7fc285367505835a3f745bdfcb7bd642178a5deed82f8311087be4d69cb7e3973362df04ffcdd18795703bc7619932f3f781e027926f520ed08a1b04993434a3e74085c60d1cf37ebc18828b178ec532e059371d9dd184032e84598821b6c77fac42b4d873c26f06fbffb6e9c18f7b2293a9b315201ea3240d2e1a1c56d8ad0860beeb554a1c3518c283ab846a58b6f1b52cd5a38647f2f7e656343dadb0c200447fe52d4d2bfe13421ce32daf46544b34f3d4a29b3c43356574e8fc3d09071b8db0dd35fb97369aebd0380522ad19736da68e6b1d86a7e2b4ee43c615eacaf66755c95c876a83c59501311279b84892e61f71bc4b8398602b1d4944842ff877c38d13cc9e6444717f7e33b89cd6252cfa364cc5256d2a0e123afee338c9a3fb766dd2e7d5f530c9f634e042e3df98913871d3e6d99030a6404d4eed8b2957bddd030aece41be7729a888edacb1521f6692dc2a398a81556262548d620987612710f9584f772ac6fd937558df9fc99a9750f81a2c9929212bbb77c833f2758e779ab88ce9ad24a96f8941b8ad2bbb6e67749a39a2edd174c9fb8b32ccb80d74cae50ae6fbe6f4467de5ec32c5c978d4f8115a7f22bcb413ab5ae37550f9379fdac50bb602fab32ac41e95069de3d4b3b4b91ee128291d1eccd43161109af61024d349c473ccf14c637228a686f023a4f2a024c38b3085b0b2dbd39c7d1161608abc25e652996def0ac51d03ac77a8f9f08ad53ec9fc7dd6ee3ab4478d3c1f7326ec0b0301686772bf807355c0b1cf58c37cab1ab20ff177e2e23a9ec88b3e9d76b075ab0c5a2e143203b3b6b0e166f42d980bd5e129aee907928e241d6a883a1c8fe5437a91c0254ca71f50441f6ea9dacceee7db47a93b4dbce0de235ed83dd0c440481609b1a3792e77eee2c621b406959c32b2dfce12b211398b4cf176f9e370d0fa0a7124bc3551233caab80c3c795e57e3c41426272ec27d6f4e32417399245ee2bc49ac23d2a7c9808e48ab61d976f75eb7ec2cf4fda6c05b7428b45bbfa26f7383ec7aa947078c77079b0a1163f12d8128f2fc6fb1c6b60281931028ebf1f2f9954a12bad1800dad90e35514b0c7064f9916ccc3475954e1d33ce861d5fe5e35f83c662b94f2ba06725ed4554e8ed2bddc6be792c0a3bcd5b36d6035ce1f1274915b4c4ac8f6f4623a4c156dff6dcc396345e031c60698fbf8af68e22cffd4d5bc2570c5e0eacd18f17fbd58de805b38994d32a248fc9652ddde5f2510b7fa6c462f54489f9bc00e1b1ce8ebc4ee03ade21a1316a74e1d50a17742ff8537436a737156f7ba3afee63c9f10dc8bbf9a0a858cc7861e89df8546311a334c73b6a65beeda23baa31a5d0e17ccd8c3923e8a7be66bd8df4a6ffc7203d622fb9202e00cdc969c7e3f5f6e862f971cd05adc1160546043a4d2395930140fd5f76dd828681c3979549ef87bccfa680939467115b5495dbd14b5f65ea6c88230dabc7e09494d4191e2dd5ff2c4a8f09d1af3e0865e155b3300c554cba0686ff82897534689cdb74a05e94943c5d71152d6f2e39da5160bfe259b9372739bad9f2a25541fd3d035ebf6e40a4473a1a9596d023d9ed23afc5fff95325a5411f3e344ea845ca001bff122bc525703ad3723a2bcd2ad7c37a6372bd93a889a5aba5e9c3a990f08112f45195a04ce31076c6f97900d2494225a5d8a485f1c50c5da2c6b7102159b46b1142e3dda23a5b4dbf5003b5a91ee052a27df9b823ebbe6549c9d03da55942d89e506573952c394b8ddb898c5b5bfdaee48adb7caac5ffc297a8ca055e78285109595c80ee4123c5089334e519c3c8e44683bd20d47ae0d6e012d98282d5f626d3065de3584a6522a5ca6d11a36f575423f37a238d41a7904b04089676372d9bfa23a8c3d5b66ab7ad2ea56197b38853d6910bbebcbd6d5fffc43c9eb78e8b7d1dd7f33492455c9b05d673074ee36a0947c444bc5de815b027e58cb3735db38669051ba9ba5b92967417217a760c788938094df9105c463e20543b4306308c8816f2d203c74d5afc8b9cc6873fc55e942f64cb255fd7e9aea986f6b65ca4a05e83b485861519c0d1db8adc7a99c62cee9fa11c48fb70204d9ebadfba8a1c1424ec9c3a0aa9d5aa4d1198ba1b1bd70a743303423a7daca05933d14fb03392616d2a883ac9d074b6fd9b43926aada734a0c2f1f744e55162d709dfdeaf5ad8b16b1fe0c562f1b5e7ae631946c23a313cb3a4c7ad4dba7887d7525efa9b226138b11c07e9710be03b195d40a1c9ac7b8d31d647574e66d6f76807140c27e819872fe92070937b7c63fdf3943b4dfa1c24675e5927691f0ecd8f98a19e539bd3c7732775aa43d8a8671f91d723851954a366c6656a5853c0d292190d9c55d302d7fd29869de2256ddd5b5b9f82652d57a13c7a70bc092af10824ff2de218747cd8ad438da56f6c99e27f4579bac0a37044664e7d07bb2b6638ff162a231234a9d22bf0cb7631b936439287ca77fa824d8677a7aa3fe2844f715026d5324b1bace9fed5d8b39f2d9e236752ace2120975b81735cf1e3c8eecc259c44263c3b4621255e3a6cf998f309f12270d9577ce3b2b63e919a8e94eb01b31784356fc2b7d19db141a3b3279e3b405a2dbdb45e710101d4be7749436fbb2c2b21745f031d4cc869b22c8458f8a9c000b3c0915fba0fdcda3a641450e5c535410dd16be23f042f76dac4c7fa38421635a05b341b2f337eb76a1a927857038a2239a6d99bc46e09d9a7f39301ece788fb0be6f24096b66be8e35455aaf92cddd2f983e49e3b8d4bf147da54e4e879c0e0b623530fbee862071983a0347824a1a64c22d2e2e5706bd6b6a26b206cdfcbd063794a91ebd231a254eb4868e0f6473f6b31d7e3b1ed5ad7a79ae073fdf4bfcecfd6c72106a31095390fe1367074cccfe59633ec6b9c43bcbcb4533464fceade4a0ccfd89e140a206ffefcb19af8e3dccf6c82f83d2600800231452bef8fd3cda225e72c325f14cee5644b8ef1a4cf7e6e29c1ed8587d3aa576b15508fdf94e164471f3a766859f788277ad96e251a5efd9db53fead1c1dbe690932faf5fab67d579f50ff50a3e7cf1af9f6f83b5b73c244a0d5a2fbb443f35012a517c08985e2c5541a154988b6d4e1cd900706367f93bce6574d908b5fdefec8b0d71380c1616ae62866082033183bd6c44d1c0724af99b5d104c361ad961bec12abbea1ebe198574672d1bdcd12c5c27a82d95005baa28d77bbf6aa5ca0c330e9f46b6ac01389184ad5dc4b501e2682d90838043b1adf05e0fee917749709006aad59868246a91a06bf1b1012b8c37670a98f3ed4c817b301a76c0d417d7d21a8f16d4205f844f15a7d1a5a07b23005a892304924120c6d6a1fad24c71591e5724702719f94c904a584907fb309c3a33041db57cd907a183665b9cc6936481c06de260488a38551999f1a010537574257e3162772f9d443cace093bc7f20a5d73dabc30fe5fad8a87f5c308f03b77f449a0ca934b9d38b585eee1c013e9ad374d2aa31631bbacd2d2084b5e3ef61043d71d2a67919e88190a18a90f9def54bb8a487e7f513a62eb78c43caed84f3f436182e460c5764f32139d636f584c5c05d138fb5910c429c696e312a53881e61dd08cc2389a6841c30bf3aa9b6fcdc364d15094460f9d500001cf7509891cd11c57ecf763eb5473c7485db5c88b8cdf857d4e963c450c6cb0d1beca7632802203bfb865e148b905b32c6942b7c48150473587ee2d36118e8e7dc450a6886803a55c7993df7ff8f807cb5f58cc3b7e5f06f98000893c6e5d779217b66bc369260335a66c63c17f7ba4d56c0f2201284bba0150d052f195584706f0bf561a1e46b33c8e17a427d0ebbc52e072fdbe66ecdd0d47aa08a9901f3c6cfc64714896614ace3f8c48f61b8700c17f14590c980f434ecd07e0d4f93dd9186acc80cea8e94ba3b593e24195db488e647880a23851e45b321c6a538aca69475d162a444a09fc1ce76f7afccdaa7114276e6284375aa6f4e41d83a9f54e7a291413eda39b9487b1ed67c8e5a9532114c52112afa4f8e3b8068ed34583abca4a1a1b82eb415f5a08569eabe6e789e47cd8692716f5b11bf82b1335f4c1d1409908a4a2d5eb14294f7d8c194815276f7d66ebd54d81686e52a5f0161619030eb6d66f7b850ee4dfa078ced55154215f1efe1507d9309adf0492e8625c0660c611ffb606d4413de45c31a9f4650e02b266a415766bbc03b90a4f0fb738e0e59140e3503607821a2d1ee89f77a913a845a226b8ddb790b26828f43404fc8b6d209feb80299063ea573664f47aeaa93cf8a711968482d9065d165ff68231ef20634e517d78bc1a2cab8525c558078c405058392d3a03f1715716bffda126a9a07c795f75ad68947b21b42f5baf12320e4882c223a1ccf8472ec0206cb8f35884dbe551740951def86a76ac67544994b5bf67bd8963cf3757208303bfaf6010be10c79f7d91a90d1391a8ba53ad9e4694ed4443940460995fe589d3b39ba6a825393ee27074e21e9db05b4a09eb7a89e05b5c6caeeaf86484621e36a503e1be14f31de97447880b345a876a74212b61c99d2f64b78a983488737c3a6ed015e38c8086b75a9dde7f6150329e1e7fa030e8a0e099bf9ba4568903ad2f61dbe5f69b3a6d68928c46dd93e81e855805747820428caf1d8151dc1debb816b7e61042f043f95677a0a2c99c42db3e041e632dab8353b14f3befa8e739f33f3e6ef816c8bd5cccba6", 0x1000}], 0x4, &(0x7f0000001400)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x31c, 0x2, 0x7}}}], 0x18}}], 0x2, 0x24005c01) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x40008d4) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) sendto$inet6(r1, &(0x7f0000001440)="59a9078f30cb252a5d4078d65ac6dd7e0f843b6f54d5309e7628ca82f46edb3f632b42488b34faf875005449a9936397c6c04b3200755aa3882607bccd1aca88af6f7a41be53e323242b5f1d28fc06a2d520b2cf412f566e80edcd35ca6829681daf54d0f48beec66a3f756cdf9c6061282b6d782906c7ad4159a61f682ed6533da98057f29de4a6d7bc748e62fcf1e2ee346fad9d548b23849e3d5cb60f35a5acaf6449d8f31ef64bde69e206e6f487951eb0e573f74564629a7ebcf2f304a240593a5562d971", 0xc7, 0x80, &(0x7f00000012c0)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) 1m21.879271848s ago: executing program 5 (id=1742): socket(0x28, 0x5, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x800) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m17.941842995s ago: executing program 4 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r7}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffeffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff65}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r8, 0x0, 0x0) 1m10.241594525s ago: executing program 34 (id=1730): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x4, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0x9, 0x9, 0x6, 0x0, 0x0, 0x6, 0x10, 0xa, 0x9, 0x7f, 0x9f, '\x00', 0x6b}) 1m7.009229737s ago: executing program 5 (id=1747): ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x238000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf"]) mount$bind(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x8b101a, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 1m1.499121365s ago: executing program 35 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r7}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffeffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff65}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r8, 0x0, 0x0) 56.781139326s ago: executing program 0 (id=1749): syz_usb_disconnect(0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x110) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x31) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x40, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x969, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xf9, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x10, 0x5, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x8, 0xab}}}}}]}}]}}, 0x0) geteuid() chroot(&(0x7f00000009c0)='./file0\x00') syz_usb_disconnect(r1) r2 = syz_usb_connect$cdc_ncm(0x3, 0x73, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x8, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "358d728d61"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1c00, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0x8001, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x5df, 0x7, 0x2, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x2, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x21, 0x95, {0x95, 0x23, "93005ceabf217fad123d9a8d0ea8f38603a5b506f862f49f2e333c04ae58bfd849beadf0c2e0f8da6c1f535eb4cc8d21c4258f0830c6870f0c646687dd6350b07503ef1e98b51000d0fe8d9e1cf9de05ff3b854175664f3f3e3fc6321484c6a6e38765b777bf8f650e51755361fd6a519406dd31679aa684bc11f044fe7caf486e19d70c5af938700f6f5ac80dcfb7d2d28799"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0xe, 0x41, "1deaab8ca8a1a649960183334d55e560c5ce5384056361af14ca942e319cd631644aa6c44a34547d0e4b84a5bf6abba8787fc47177e566b9b88c9b20a4ae37d138"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x2, 0x3, 0x7f, 0x4, 0x10, 0x6, 0x6, 0x4, 0x360, 0x7fff}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000e40)={0x20, 0x83, 0x2}, 0x0, &(0x7f0000000ec0)={0x20, 0x89, 0x2, 0x1}}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000fc0)='./file0\x00', 0x20000, 0x4) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0xfffffffffffffffc, &(0x7f0000001c80)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x250, 0x0, 0x3, 0xc, 0x40, 0x7}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001d80)={0x14, 0x0, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x44, 0x0, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000001ec0)={0x20, 0x80, 0x1c, {0x200, 0x956, 0x1, 0x2, 0x2, 0xd8, 0x163, 0xe2, 0x9, 0x2, 0x8a0, 0x5}}, &(0x7f0000001f00)={0x20, 0x85, 0x4, 0xa97}, &(0x7f0000001f40)={0x20, 0x83, 0x2, 0x1}, 0x0, &(0x7f0000001fc0)={0x20, 0x89, 0x2, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r5) syz_usb_ep_write(r2, 0x81, 0xe1, &(0x7f00000020c0)="f114cbc65fc2da9d692dec52fc3ef856f4ab8e3d697dbe6e2204e32de46031896a9a25474b0fc1044eed92ec2376002f59db78149acdfb7b4fa3725784a09e73e27cb87b648541b2da6f3cef0af581a7c55038bb9901a63001ce4eacda2728722bdde81817fb24fb9d985c7ec64c301903aecf0aab75a96cfe6c3e7600fefcfd0113bab5b457a0673eca15e63f817863f249fcb5d577d8dae1efcc6f56bcc6f80a4676482f7de71a4bed33f40ed067add885618f86b062e4fea7ba1d30aa64b0b1c188c44f3e88d89fed5c92bb2519273858061512738e1444668f1c31276704e6") ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002a80)={r4, 0x9, 0x1}) 50.270152741s ago: executing program 5 (id=1750): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "1100"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000802"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0x60000600) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/167, 0xa7}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000001300)=""/108, 0x6c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x2000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040), 0x8) ioctl$int_in(r5, 0x5421, &(0x7f0000002640)=0x9) listen(r5, 0x1) accept4(r5, 0x0, 0x0, 0x80800) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) 49.27879944s ago: executing program 0 (id=1751): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = socket(0x28, 0x5, 0xb) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r9 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r9, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000640)={0x11, 0x1, 0x4}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', r1, 0x2f, 0x5, 0x5, 0x1, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x40, 0x8000, 0x1511, 0x2}}) 40.032652409s ago: executing program 5 (id=1752): r0 = syz_clone(0x2180b000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r3, 0x0) ptrace(0x10, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048801}, 0x4000081) ioctl$KVM_RUN(r6, 0xae80, 0x0) 39.901258451s ago: executing program 0 (id=1753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) keyctl$clear(0x7, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x48}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000311ffc)=0x1, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xa0, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x3}, @acquire, @free_buffer={0x40086303, r5}, @acquire_done={0x40106309, 0x3}, @exit_looper, @acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x7, 0x1, 0xb}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x1000}, @acquire, @enter_looper], 0x0, 0x0, 0x0}) 35.891333818s ago: executing program 0 (id=1754): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file1\x00', 0x149442, 0x0) ftruncate(r2, 0x200002) r3 = open(&(0x7f0000000140)='./file0\x00', 0x8800, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r4, r3, 0x0, 0x80001d00c0d0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)={0x318, 0xe, 0x9, 0x0, 0x0, "", [@typed={0x8, 0x137, 0x0, 0x0, @pid}, @nested={0x2ff, 0x8e, 0x0, 0x1, [@typed={0x4, 0xb}, @typed={0x6b, 0xe4, 0x0, 0x0, @binary="3328aa5d32949eca1c2d2257c07353a694b17469e771aded9ac6ed1daaee3644bd85155a887f5573af5c10b0c1897e12a216f417fa2bced5d8130fdee515c191c403f1fbf02cde9f5cc1a866a4f930bdab8fc42829a194415220b4e0d16aa88a1128935032d339"}, @typed={0xf5, 0x49, 0x0, 0x0, @binary="a43eeff0ccb51713d83272ec2186546bbd255e5057aac09d52a25c34ec3e13100cfc08da93448e87e806a9036e26ad9d707b925dcff1c770b7eb79f82d6aabd449f971acc6b51b52c237460a45c8aab36613564359009907fe5503514de1f146678efc9a027414920c2a90ac8ff3ed35d2afa0e3a24cc5805724eb9cc25e0a2ea10dfb7dbd1cd8612f5fd8b0150e9af3eee1025e975aea3ec085d71196c8e3aa6c98144b8567af75b899b889c884cd04bbebcf57fc5051d28153080d80829d3e9f04419bd6ecaa69a6963d1044f741017d106a2f4766f41f4990026b4dc2c4ece6f11b65ae532be59093ba681a8425894e"}, @generic="bb9cd04759943c32112dd9c566fdadfe9dec1d4d018a8e287ce88a0fe258791597778fc32ab8197bc03e1e8a9a8cb0516e8a8265b2165dcc8a2e8f2e398a3fdeb2c90293e4f28f8d0ec75a13acfe361b650a0b3b8e86b36380dcc65d27e6994912e9ea8b0476e9b6edbdf4ee33e32f8f503dd17e29c4b5bbb2afb07e44902c1c4f7aa6718e285a0a2c605b45531014ab6a06bc367437f0d721ecec2e373c5c23bd68de7dd05352e6e46327d4dd69163f9335bdf431b0d6947f4ad3462531ae37fb41", @typed={0x8, 0x98, 0x0, 0x0, @pid}, @generic="a05a56c795afc6fed84e954554b01a241bd595898cf73594f820f78085bb3793d0abec58e33a4f198fed0dfbfb4c2a4fcf926daad21504deaa96ba91834d75c20e5dbf276b30f0187ea522a7b760e8f56758faad3920872ea9146bed1cbde75b3417f568bb3f1141db85f52cc2d080593f20af1c728da40d85e0bfe2005804d2c9d6a63aba6a8b9f0da508bfccb629dcfeac21455cd7ad8bcb5574121b4446dda3cce2f399056b68d7c5c8aeb78b12881fb4045523aadfb4d5f87aa8f2b81445d884625680b464dee3"]}]}, 0x318}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x7ff}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d4, &(0x7f0000000500)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000606010200000000000000000a0000080900020073797a30000000000900020073797a32000000000900020073797a3200000000090002006bcd4fa7e5c6124970b56dd25702be73797a3200000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x805) 23.785271621s ago: executing program 36 (id=1752): r0 = syz_clone(0x2180b000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r3, 0x0) ptrace(0x10, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048801}, 0x4000081) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21.111825863s ago: executing program 0 (id=1756): socket(0x28, 0x5, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x800) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17.429676614s ago: executing program 0 (id=1757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 37 (id=1757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): scuous mode [ 57.939861][ T1403] bridge0: port 3(macsec0) entered disabled state [ 57.968535][ T1403] veth1_macvtap: entered promiscuous mode [ 57.974494][ T1403] veth1_macvtap: entered allmulticast mode [ 57.982851][ T330] bridge0: port 3(macsec0) entered blocking state [ 57.989366][ T330] bridge0: port 3(macsec0) entered forwarding state [ 58.063465][ T1409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1409 comm=syz.2.405 [ 58.091945][ T36] audit: type=1400 audit(1758285486.463:261): avc: denied { bind } for pid=1410 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.131154][ T36] audit: type=1400 audit(1758285486.463:262): avc: denied { name_bind } for pid=1410 comm="syz.2.406" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 58.152792][ T1417] veth1_macvtap: left allmulticast mode [ 58.158620][ T1417] veth1_macvtap: left promiscuous mode [ 58.166752][ T1417] bridge0: port 3(macsec0) entered disabled state [ 58.173792][ T36] audit: type=1400 audit(1758285486.463:263): avc: denied { node_bind } for pid=1410 comm="syz.2.406" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 58.186108][ T1417] veth1_macvtap: entered promiscuous mode [ 58.203015][ T1417] veth1_macvtap: entered allmulticast mode [ 58.209728][ T1417] bridge0: port 3(macsec0) entered blocking state [ 58.216216][ T1417] bridge0: port 3(macsec0) entered forwarding state [ 58.514657][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 58.665790][ T9] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 58.674248][ T9] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 58.684720][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 58.693690][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.704719][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.714636][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.724861][ T1429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1429 comm=syz.3.415 [ 58.727470][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 58.749648][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.764827][ T9] usb 3-1: config 0 descriptor?? [ 59.064622][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 59.132855][ T36] audit: type=1400 audit(1758285487.503:264): avc: denied { getopt } for pid=1443 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.176042][ T9] lg-g15 0003:046D:C225.0003: collection stack underflow [ 59.183372][ T9] lg-g15 0003:046D:C225.0003: item 0 4 0 12 parsing failed [ 59.190929][ T9] lg-g15 0003:046D:C225.0003: probe with driver lg-g15 failed with error -22 [ 59.235987][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.245844][ T10] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 59.255025][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.263709][ T10] usb 4-1: config 0 descriptor?? [ 59.380302][ T45] usb 3-1: USB disconnect, device number 7 [ 59.672428][ T10] greenasia 0003:0E8F:0012.0004: item fetching failed at offset 5/7 [ 59.680702][ T10] greenasia 0003:0E8F:0012.0004: parse failed [ 59.687032][ T10] greenasia 0003:0E8F:0012.0004: probe with driver greenasia failed with error -22 [ 59.874208][ T10] usb 4-1: USB disconnect, device number 4 [ 60.081957][ T1478] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 60.089833][ T1478] netlink: 3649 bytes leftover after parsing attributes in process `syz.2.438'. [ 60.126480][ T1480] netlink: 'syz.2.439': attribute type 4 has an invalid length. [ 60.141050][ T1480] netlink: 'syz.2.439': attribute type 4 has an invalid length. [ 60.206576][ T1498] netlink: 124 bytes leftover after parsing attributes in process `syz.4.448'. [ 60.414649][ T305] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.565883][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.576979][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.587262][ T305] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 60.599438][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.608406][ T305] usb 3-1: config 0 descriptor?? [ 60.914661][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 61.016750][ T305] samsung 0003:0419:0600.0005: ignoring exceeding usage max [ 61.024893][ T305] samsung 0003:0419:0600.0005: unknown main item tag 0x3 [ 61.032335][ T305] samsung 0003:0419:0600.0005: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 61.075714][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.085526][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 61.094548][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.103160][ T9] usb 4-1: config 0 descriptor?? [ 61.219200][ T305] usb 3-1: USB disconnect, device number 8 [ 61.511333][ T9] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 61.575399][ T1542] futex_wake_op: syz.0.467 tries to shift op by 144; fix this program [ 61.823196][ T36] audit: type=1400 audit(1758285490.193:265): avc: denied { read } for pid=1574 comm="syz.2.483" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.847286][ T36] audit: type=1400 audit(1758285490.193:266): avc: denied { open } for pid=1574 comm="syz.2.483" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.886855][ T1583] capability: warning: `syz.4.487' uses deprecated v2 capabilities in a way that may be insecure [ 61.910433][ T9] lenovo 0003:17EF:6047.0006: Failed to switch middle button: -71 [ 61.919035][ T36] audit: type=1400 audit(1758285490.283:267): avc: denied { name_bind } for pid=1584 comm="syz.4.488" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 61.941097][ T9] lenovo 0003:17EF:6047.0006: Fn-lock setting failed: -71 [ 61.948880][ T9] lenovo 0003:17EF:6047.0006: Sensitivity setting failed: -71 [ 61.957600][ T9] usb 4-1: USB disconnect, device number 5 [ 62.304638][ T443] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 62.456353][ T443] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.465008][ T443] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 62.472671][ T443] usb 3-1: can't read configurations, error -71 [ 62.612508][ T1612] capability: warning: `syz.0.501' uses 32-bit capabilities (legacy support in use) [ 62.662207][ T36] audit: type=1400 audit(1758285491.034:268): avc: denied { ioctl } for pid=1619 comm="syz.0.505" path="socket:[9669]" dev="sockfs" ino=9669 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.814636][ T305] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 62.966416][ T305] usb 4-1: Using ep0 maxpacket: 8 [ 62.973239][ T305] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 62.981683][ T305] usb 4-1: config 0 has no interface number 0 [ 62.989485][ T305] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 62.999074][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.007449][ T305] usb 4-1: Product: syz [ 63.011734][ T305] usb 4-1: Manufacturer: syz [ 63.017449][ T305] usb 4-1: SerialNumber: syz [ 63.023357][ T305] usb 4-1: config 0 descriptor?? [ 63.234493][ T305] usb 4-1: USB disconnect, device number 6 [ 63.314663][ T443] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.475871][ T443] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 63.487058][ T443] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.493753][ T443] usb 3-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 63.502785][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.511275][ T443] usb 3-1: config 0 descriptor?? [ 63.922461][ T443] wacom 0003:056A:030E.0007: ignoring exceeding usage max [ 63.931361][ T1672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1672 comm=syz.4.530 [ 63.932542][ T443] wacom 0003:056A:030E.0007: Unknown device_type for 'HID 056a:030e'. Assuming pen. [ 63.959144][ T443] wacom 0003:056A:030E.0007: hidraw0: USB HID v0.01 Device [HID 056a:030e] on usb-dummy_hcd.2-1/input0 [ 63.976672][ T443] input: Wacom Intuos S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:030E.0007/input/input4 [ 63.989289][ T36] audit: type=1400 audit(1758285492.364:269): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=491 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.011512][ T332] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 64.011539][ T36] audit: type=1400 audit(1758285492.364:270): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=491 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.044799][ T36] audit: type=1400 audit(1758285492.424:271): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=491 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.124991][ T305] usb 3-1: USB disconnect, device number 10 [ 64.164654][ T332] usb 4-1: Using ep0 maxpacket: 8 [ 64.170709][ T332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 64.177428][ T332] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 64.186646][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.195613][ T332] usb 4-1: config 0 descriptor?? [ 64.363051][ T36] audit: type=1400 audit(1758285492.734:272): avc: denied { accept } for pid=1676 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 64.606114][ T332] uclogic 0003:28BD:0042.0008: interface is invalid, ignoring [ 64.818681][ T332] usb 4-1: USB disconnect, device number 7 [ 65.035717][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 65.134623][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 65.284637][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 65.290953][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.302139][ T45] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 65.313505][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.322713][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.333899][ T45] usb 3-1: Product: syz [ 65.338431][ T45] usb 3-1: Manufacturer: syz [ 65.343407][ T45] usb 3-1: SerialNumber: syz [ 65.556491][ T1695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.597275][ T443] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 65.756925][ T443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 65.775235][ T443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.785098][ T443] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 65.794154][ T443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.802970][ T443] usb 4-1: config 0 descriptor?? [ 65.985531][ T45] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 65.994142][ T45] cdc_ncm 3-1:1.0: bind() failure [ 66.005151][ T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 66.016513][ T45] cdc_ncm 3-1:1.1: bind() failure [ 66.027558][ T45] usb 3-1: USB disconnect, device number 11 [ 66.231292][ T443] aureal 0003:0755:2626.0009: item fetching failed at offset 5/7 [ 66.246995][ T443] aureal 0003:0755:2626.0009: probe with driver aureal failed with error -22 [ 66.448004][ T443] usb 4-1: USB disconnect, device number 8 [ 66.529687][ T1768] overlayfs: failed to clone upperpath [ 66.536105][ T1768] overlayfs: failed to clone upperpath [ 67.099436][ T1801] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.125544][ T1801] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.237418][ T36] audit: type=1400 audit(1758285495.604:273): avc: denied { create } for pid=1812 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.274087][ T36] audit: type=1400 audit(1758285495.634:274): avc: denied { setopt } for pid=1812 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.767583][ T36] audit: type=1400 audit(1758285496.144:275): avc: denied { read } for pid=1841 comm="syz.2.606" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.824633][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 67.974636][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 67.981161][ T45] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 67.991953][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 68.000337][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.009839][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.018078][ T45] usb 4-1: Product: syz [ 68.022424][ T45] usb 4-1: Manufacturer: syz [ 68.027315][ T45] usb 4-1: SerialNumber: syz [ 68.033379][ T1833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.054634][ T443] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 68.204626][ T443] usb 3-1: Using ep0 maxpacket: 8 [ 68.210724][ T443] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 68.219227][ T443] usb 3-1: config 179 has no interface number 0 [ 68.225556][ T443] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 68.236611][ T443] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 68.245245][ T45] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 68.247849][ T443] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.258481][ T45] usb 4-1: USB disconnect, device number 9 [ 68.269263][ T443] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 68.284637][ T443] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 68.297880][ T443] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 68.306933][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.315730][ T1850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 68.684690][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 68.759278][ T443] usb 3-1: USB disconnect, device number 12 [ 68.759331][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 68.766028][ T36] audit: type=1400 audit(1758285497.144:276): avc: denied { connect } for pid=1865 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.773556][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 68.834640][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 68.840880][ T45] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 68.852959][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 68.861307][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.871086][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.879488][ T45] usb 4-1: Product: syz [ 68.883839][ T45] usb 4-1: Manufacturer: syz [ 68.888598][ T45] usb 4-1: SerialNumber: syz [ 68.894122][ T1833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.302744][ T1833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.319776][ T1889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 69.337290][ T1891] 9pnet_fd: p9_fd_create_tcp (1891): problem connecting socket to 127.0.0.1 [ 69.356042][ T36] audit: type=1400 audit(1758285497.734:277): avc: denied { bind } for pid=1892 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.375861][ T36] audit: type=1400 audit(1758285497.754:278): avc: denied { listen } for pid=1892 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.712355][ T45] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 69.729288][ T36] audit: type=1400 audit(1758285498.104:279): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 69.750358][ T36] audit: type=1400 audit(1758285498.104:280): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.771772][ T36] audit: type=1400 audit(1758285498.104:281): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.785470][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 69.801012][ T36] audit: type=1400 audit(1758285498.104:282): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.937182][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 14! [ 69.945701][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ab! [ 69.954654][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 9a! [ 69.963945][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification db! [ 69.973248][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 7c! [ 69.974643][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 69.981997][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 50! [ 69.987290][ T9] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 69.994485][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification dd! [ 70.004632][ T9] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.012056][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ae! [ 70.021249][ T9] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.030012][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 13! [ 70.038307][ T9] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 70.046973][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 49! [ 70.058308][ T9] usb 3-1: config 7 interface 0 has no altsetting 0 [ 70.067400][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 46! [ 70.080402][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 85! [ 70.081710][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 70.089306][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification c1! [ 70.099561][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.105268][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 58! [ 70.321782][ T424] usb 4-1: USB disconnect, device number 10 [ 70.340721][ T424] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 70.367354][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 70.531521][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.000A/input/input7 [ 70.553201][ T9] kye 0003:0458:5010.000A: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 70.724156][ T424] usb 3-1: USB disconnect, device number 13 [ 71.084638][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 71.235709][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.255840][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.274505][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.277836][ T2023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.284372][ T2023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 71.294719][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.321042][ T2027] incfs: iterate_incfs_dir / -22 [ 71.326057][ T2027] incfs: iterate_incfs_dir / -22 [ 71.335459][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.345114][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.355410][ T45] usb 4-1: config 0 descriptor?? [ 71.682580][ T2044] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 71.755431][ T2050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 71.755459][ T2050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:345 [ 71.768705][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.796968][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.804411][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.813545][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.821342][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.829341][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.837181][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.845189][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.852677][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.860219][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.877988][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.885530][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.893388][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.901098][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.908597][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 71.916720][ T45] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 71.932341][ T45] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 72.035203][ T45] usb 4-1: USB disconnect, device number 11 [ 72.096736][ T2066] overlayfs: failed to clone upperpath [ 72.174020][ T2076] 9pnet_fd: Insufficient options for proto=fd [ 72.357358][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 72.357374][ T36] audit: type=1400 audit(1758285500.724:294): avc: denied { write } for pid=2099 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.578915][ T36] audit: type=1400 audit(2000000000.020:295): avc: denied { connect } for pid=2142 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.932774][ T2162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 73.234333][ T2188] kvm: kvm [2187]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 73.686744][ T36] audit: type=1400 audit(2000000001.124:296): avc: denied { watch watch_reads } for pid=2214 comm="syz.4.757" path="/223/file0" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.789437][ T36] audit: type=1400 audit(2000000001.224:297): avc: denied { mount } for pid=2230 comm="syz.4.765" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.334525][ T2288] overlayfs: failed to clone upperpath [ 74.407886][ T36] audit: type=1400 audit(2000000001.844:298): avc: denied { setopt } for pid=2305 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.774645][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 74.924675][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 74.930950][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.941982][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 74.953330][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.962441][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.970494][ T9] usb 3-1: Product: syz [ 74.974675][ T9] usb 3-1: Manufacturer: syz [ 74.979268][ T9] usb 3-1: SerialNumber: syz [ 75.190449][ T2322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.314752][ T2381] 9pnet_fd: Insufficient options for proto=fd [ 75.329566][ T2383] overlayfs: failed to clone upperpath [ 75.374887][ T2387] overlayfs: failed to clone upperpath [ 75.402472][ T2391] tipc: Enabling of bearer rejected, failed to enable media [ 75.804762][ T2322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.014972][ T9] cdc_ncm 3-1:1.0: failed to get mac address [ 76.126923][ T2427] overlayfs: failed to clone upperpath [ 76.224671][ T9] cdc_ncm 3-1:1.0: bind() failure [ 76.230864][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 76.244629][ T9] cdc_ncm 3-1:1.1: bind() failure [ 76.277064][ T2436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2436 comm=syz.4.862 [ 76.416887][ T9] usb 3-1: USB disconnect, device number 14 [ 76.922449][ T2457] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2457 comm=syz.0.872 [ 77.252570][ T36] audit: type=1400 audit(2000000004.688:299): avc: denied { create } for pid=2492 comm="syz.2.890" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.419398][ T36] audit: type=1400 audit(2000000004.858:300): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.495683][ T36] audit: type=1400 audit(2000000004.936:301): avc: denied { create } for pid=2509 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 78.102453][ T2541] tipc: Enabling of bearer rejected, failed to enable media [ 78.195254][ T2553] overlayfs: failed to clone upperpath [ 78.414610][ T36] audit: type=1400 audit(2000000005.853:302): avc: denied { append } for pid=2569 comm="syz.2.924" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.084634][ T332] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 79.124622][ T443] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 79.235759][ T332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.246260][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.263250][ T332] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.272481][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 79.278030][ T443] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 79.289597][ T332] usb 3-1: SerialNumber: syz [ 79.294765][ T443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.315310][ T443] usb 4-1: Product: syz [ 79.319563][ T443] usb 4-1: Manufacturer: syz [ 79.324245][ T443] usb 4-1: SerialNumber: syz [ 79.333035][ T443] usb 4-1: config 0 descriptor?? [ 79.498695][ T332] usb 3-1: 0:2 : does not exist [ 79.509337][ T332] usb 3-1: USB disconnect, device number 15 [ 79.521928][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.745487][ T443] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 79.764887][ T443] asix 4-1:0.0: probe with driver asix failed with error -32 [ 79.777066][ T443] usb 4-1: USB disconnect, device number 12 [ 79.798339][ T2606] netlink: 44 bytes leftover after parsing attributes in process `syz.4.938'. [ 80.065884][ T36] audit: type=1400 audit(2000000007.513:303): avc: denied { mount } for pid=2617 comm="syz.0.944" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.066906][ T2618] overlayfs: failed to clone upperpath [ 80.120795][ T2624] overlayfs: failed to clone upperpath [ 80.289008][ T36] audit: type=1400 audit(2000000007.733:304): avc: denied { mount } for pid=2629 comm="syz.0.948" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 80.920661][ T2649] netlink: 'syz.0.954': attribute type 4 has an invalid length. [ 80.993226][ T2653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 81.034846][ T2659] tipc: Failed to remove unknown binding: 66,1,1/0:2944286270/2944286272 [ 82.174614][ T36] audit: type=1400 audit(2000000009.613:305): avc: denied { watch } for pid=2692 comm="syz.3.974" path="/158/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 83.004647][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 83.153484][ T36] audit: type=1400 audit(2000000010.593:306): avc: denied { write } for pid=2734 comm="syz.2.992" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.177802][ T45] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 83.187638][ T45] usb 4-1: config 0 has no interface number 1 [ 83.193759][ T45] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 83.207939][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.221750][ T45] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 83.235421][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.243958][ T45] usb 4-1: SerialNumber: syz [ 83.249782][ T45] usb 4-1: config 0 descriptor?? [ 83.256529][ T45] usb 4-1: Found UVC 0.00 device (0002:0000) [ 83.263443][ T45] usb 4-1: No valid video chain found. [ 83.469211][ T10] usb 4-1: USB disconnect, device number 13 [ 83.480919][ T2761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 84.148902][ T36] audit: type=1400 audit(2000000011.593:307): avc: denied { read } for pid=2772 comm="syz.2.1007" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.190392][ T36] audit: type=1400 audit(2000000011.593:308): avc: denied { open } for pid=2772 comm="syz.2.1007" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.382995][ T36] audit: type=1400 audit(2000000011.823:309): avc: denied { relabelfrom } for pid=2792 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.407182][ T36] audit: type=1400 audit(2000000011.823:310): avc: denied { relabelto } for pid=2792 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.464623][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 84.484869][ T2800] incfs: mount failed -22 [ 84.489900][ T2800] incfs_lookup_dentry err:-13 [ 84.614609][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 84.620774][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.629455][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.638116][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.647111][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.656772][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.666427][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.679434][ T332] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 84.687030][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.696166][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.705835][ T45] usb 4-1: config 0 descriptor?? [ 84.855649][ T332] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 84.863902][ T332] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 84.874060][ T332] usb 3-1: config 8 has no interface number 0 [ 84.880188][ T332] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 84.890029][ T332] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 84.904343][ T332] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 84.913481][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.921711][ T332] usb 3-1: Product: syz [ 84.925997][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.937850][ T332] usb 3-1: Manufacturer: syz [ 84.942485][ T332] usb 3-1: SerialNumber: syz [ 84.947133][ T45] usb 4-1: USB disconnect, device number 14 [ 84.953665][ T45] usblp0: removed [ 85.162073][ T332] usb 3-1: USB disconnect, device number 16 [ 85.414624][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 85.564625][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 85.570944][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.579354][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.587984][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.596960][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.606635][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.616288][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.629288][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.638416][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.646900][ T45] usb 4-1: config 0 descriptor?? [ 85.853426][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 85.974645][ T443] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 86.061258][ T36] audit: type=1400 audit(2000000013.503:311): avc: denied { ioctl } for pid=2778 comm="syz.3.1010" path="/dev/usb/lp0" dev="devtmpfs" ino=542 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 86.061932][ T10] usb 4-1: USB disconnect, device number 15 [ 86.094495][ T10] usblp0: removed [ 86.125717][ T443] usb 3-1: config 1 interface 0 altsetting 119 endpoint 0x82 is Bulk; changing to Interrupt [ 86.136121][ T443] usb 3-1: config 1 interface 0 altsetting 119 endpoint 0x3 is Bulk; changing to Interrupt [ 86.146159][ T443] usb 3-1: config 1 interface 0 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.159326][ T443] usb 3-1: config 1 interface 0 has no altsetting 0 [ 86.167760][ T443] usb 3-1: string descriptor 0 read error: -22 [ 86.173925][ T443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.183125][ T443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.192131][ T2831] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.199390][ T2831] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.208903][ T443] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 86.327597][ T2841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 86.410690][ T45] usb 3-1: USB disconnect, device number 17 [ 86.938795][ T36] audit: type=1400 audit(2000000014.383:312): avc: denied { read } for pid=2854 comm="syz.2.1046" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.963559][ T36] audit: type=1400 audit(2000000014.403:313): avc: denied { open } for pid=2854 comm="syz.2.1046" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.005621][ T36] audit: type=1400 audit(2000000014.453:314): avc: denied { ioctl } for pid=2856 comm="syz.0.1047" path="socket:[15758]" dev="sockfs" ino=15758 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.040631][ T36] audit: type=1400 audit(2000000014.483:315): avc: denied { ioctl } for pid=2854 comm="syz.2.1046" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.204827][ T2866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2866 comm=syz.4.1051 [ 88.084618][ T508] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 88.236690][ T508] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.253156][ T508] usb 3-1: config 0 has no interface number 0 [ 88.266978][ T508] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.284426][ T508] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.295510][ T508] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 88.304764][ T508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.318110][ T508] usb 3-1: config 0 descriptor?? [ 88.737840][ T508] prodikeys 0003:041E:2801.000C: item fetching failed at offset 5/7 [ 88.751829][ T508] prodikeys 0003:041E:2801.000C: hid parse failed [ 88.758821][ T508] prodikeys 0003:041E:2801.000C: probe with driver prodikeys failed with error -22 [ 88.946291][ T508] usb 3-1: USB disconnect, device number 18 [ 89.462143][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 89.462159][ T36] audit: type=1400 audit(2000000016.903:317): avc: denied { ioctl } for pid=2958 comm="syz.2.1091" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.464651][ T2959] input: syz0 as /devices/virtual/input/input8 [ 89.794618][ T508] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 89.946843][ T508] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 89.955989][ T508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.964469][ T508] usb 3-1: Product: syz [ 89.968696][ T508] usb 3-1: Manufacturer: syz [ 89.973275][ T508] usb 3-1: SerialNumber: syz [ 89.978364][ T508] usb 3-1: config 0 descriptor?? [ 90.586732][ T508] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 90.596776][ T508] asix 3-1:0.0: probe with driver asix failed with error -71 [ 90.604897][ T508] usb 3-1: USB disconnect, device number 19 [ 90.830986][ T3010] overlayfs: failed to clone lowerpath [ 91.105772][ T3028] rust_binder: Error while translating object. [ 91.105805][ T3028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 91.112080][ T3028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:495 [ 91.121565][ T3028] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 91.130686][ T3028] rust_binder: Read failure Err(EFAULT) in pid:495 [ 91.281143][ T36] audit: type=1400 audit(2000000018.723:318): avc: denied { mounton } for pid=3043 comm="syz.2.1132" path="/218/file0" dev="ramfs" ino=16298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 91.313144][ T36] audit: type=1400 audit(2000000018.753:319): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.619215][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.633559][ T3057] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.649046][ T3057] bridge_slave_0: entered allmulticast mode [ 91.659446][ T3057] bridge_slave_0: entered promiscuous mode [ 91.675521][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.682644][ T3057] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.694675][ T3057] bridge_slave_1: entered allmulticast mode [ 91.711244][ T3057] bridge_slave_1: entered promiscuous mode [ 91.821304][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.828423][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.835826][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.842955][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.872061][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.882647][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.889742][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.946578][ T3057] veth0_vlan: entered promiscuous mode [ 91.965742][ T3057] veth1_macvtap: entered promiscuous mode [ 91.994061][ T36] audit: type=1400 audit(2000000019.433:320): avc: denied { mounton } for pid=3057 comm="syz-executor" path="/root/syzkaller.rw8XQd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.360290][ T3109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3109 comm=syz.5.1158 [ 92.415579][ T3114] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1161'. [ 92.488135][ T36] audit: type=1400 audit(2000000019.913:321): avc: denied { bind } for pid=3116 comm="syz.5.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.586729][ T3125] input: syz0 as /devices/virtual/input/input9 [ 92.640010][ T3131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3131 comm=syz.0.1169 [ 92.936575][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.945487][ T60] Bluetooth: hci1: Frame reassembly failed (-84) [ 92.952653][ T36] audit: type=1400 audit(2000000020.393:322): avc: denied { connect } for pid=3162 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.440536][ T3200] overlayfs: failed to clone upperpath [ 94.096168][ T3243] incfs: mount failed -22 [ 94.316541][ T3260] overlayfs: failed to clone upperpath [ 94.356344][ T3262] overlayfs: failed to clone upperpath [ 94.830464][ T3289] incfs: mount failed -22 [ 94.984643][ T3165] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 94.984654][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.984706][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 95.319119][ T36] audit: type=1400 audit(2000000278.759:323): avc: denied { map } for pid=3301 comm="syz.5.1242" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.897962][ T3357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3357 comm=syz.0.1265 [ 96.061703][ T3375] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3375 comm=syz.0.1274 [ 96.082335][ T3377] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1275'. [ 96.094623][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.185251][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 96.245709][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.256646][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.266387][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.279302][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.288338][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.296731][ T45] usb 6-1: config 0 descriptor?? [ 96.335775][ T10] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 96.343955][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.355482][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.366363][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.377506][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.390404][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.399521][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.408590][ T10] usb 4-1: config 0 descriptor?? [ 96.413865][ T3361] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 96.508813][ T3383] netlink: 'syz.4.1278': attribute type 4 has an invalid length. [ 96.518025][ T3383] netlink: 'syz.4.1278': attribute type 4 has an invalid length. [ 96.652060][ T3391] bridge0: port 3(veth0_to_bridge) entered blocking state [ 96.659363][ T3391] bridge0: port 3(veth0_to_bridge) entered disabled state [ 96.666758][ T3391] veth0_to_bridge: entered allmulticast mode [ 96.673616][ T3391] veth0_to_bridge: entered promiscuous mode [ 96.679945][ T3391] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.692562][ T3391] bridge0: port 3(veth0_to_bridge) entered blocking state [ 96.699730][ T3391] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 96.706003][ T45] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 96.727337][ T45] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 96.742658][ T3397] overlayfs: failed to clone upperpath [ 96.746552][ T45] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 96.802268][ T36] audit: type=1400 audit(2000000280.239:324): avc: denied { map } for pid=3399 comm="syz.4.1286" path="socket:[18583]" dev="sockfs" ino=18583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.839168][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 96.855677][ T10] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 96.874760][ T10] plantronics 0003:047F:FFFF.000E: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 96.978192][ T3407] overlayfs: failed to clone upperpath [ 97.045945][ T10] usb 4-1: USB disconnect, device number 16 [ 98.495464][ T3452] overlayfs: failed to clone upperpath [ 98.664874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.677059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.689558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.701607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.713661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.725705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.737922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.749994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.762040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.774087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.814615][ T3471] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1314'. [ 98.864867][ T508] usb 6-1: USB disconnect, device number 2 [ 99.264715][ T508] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.337594][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 99.438369][ T508] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.464000][ T508] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.493425][ T508] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 99.504589][ T508] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.527460][ T508] usb 6-1: config 0 descriptor?? [ 99.939966][ T508] hid-led 0003:27B8:01ED.000F: unknown main item tag 0xd [ 100.141171][ T508] hid-led 0003:27B8:01ED.000F: probe with driver hid-led failed with error -71 [ 100.175856][ T508] usb 6-1: USB disconnect, device number 3 [ 100.334654][ T305] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 100.507985][ T305] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 100.517230][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.534600][ T305] usb 4-1: Product: syz [ 100.540488][ T3516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3516 comm=syz.0.1333 [ 100.553229][ T305] usb 4-1: Manufacturer: syz [ 100.563250][ T305] usb 4-1: SerialNumber: syz [ 100.574126][ T305] usb 4-1: config 0 descriptor?? [ 100.592429][ T305] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 100.799734][ T332] usb 4-1: USB disconnect, device number 17 [ 100.944611][ T305] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 101.152537][ T305] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 101.160765][ T305] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.191766][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.224592][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.259058][ T305] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.284594][ T305] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.313862][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.343986][ T305] usb 6-1: config 0 descriptor?? [ 101.357377][ T3520] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 101.624862][ T508] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 101.773188][ T305] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 101.792882][ T305] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 101.817004][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.829073][ T305] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 101.851573][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.873431][ T508] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.894768][ T508] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.903960][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.913668][ T508] usb 4-1: config 0 descriptor?? [ 102.087817][ T305] usb 6-1: USB disconnect, device number 4 [ 102.322903][ T508] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 102.351638][ T508] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 102.596022][ T508] usb 4-1: USB disconnect, device number 18 [ 103.364603][ T305] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 103.514635][ T305] usb 4-1: Using ep0 maxpacket: 8 [ 103.526064][ T305] usb 4-1: config 8 has an invalid interface number: 112 but max is 0 [ 103.534395][ T305] usb 4-1: config 8 has an invalid interface number: 112 but max is 0 [ 103.543235][ T305] usb 4-1: config 8 has no interface number 0 [ 103.549862][ T305] usb 4-1: config 8 interface 112 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 103.561098][ T305] usb 4-1: config 8 interface 112 altsetting 15 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 103.572456][ T305] usb 4-1: config 8 interface 112 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 103.586137][ T305] usb 4-1: config 8 interface 112 altsetting 22 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 103.604896][ T305] usb 4-1: config 8 interface 112 altsetting 22 has 3 endpoint descriptors, different from the interface descriptor's value: 21 [ 103.643254][ T305] usb 4-1: config 8 interface 112 has no altsetting 0 [ 103.653514][ T305] usb 4-1: config 8 interface 112 has no altsetting 1 [ 103.655515][ T36] audit: type=1400 audit(2000000287.099:325): avc: denied { ioctl } for pid=3566 comm="syz.5.1355" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.663602][ T305] usb 4-1: string descriptor 0 read error: -22 [ 103.683398][ C0] net_ratelimit: 109361 callbacks suppressed [ 103.683419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.683511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.690042][ T305] usb 4-1: Dual-Role OTG device on HNP port [ 103.695696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.708369][ T305] usb 4-1: New USB device found, idVendor=1d2a, idProduct=0801, bcdDevice=72.c7 [ 103.719620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.751894][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.758529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.778530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.790599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.802655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.814760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.826808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.005091][ T305] asix 4-1:8.112 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.022287][ T305] asix 4-1:8.112: probe with driver asix failed with error -71 [ 104.046623][ T305] usb 4-1: USB disconnect, device number 19 [ 104.401665][ T3592] overlayfs: failed to clone lowerpath [ 104.524603][ T36] audit: type=1400 audit(2000000287.959:326): avc: denied { load_policy } for pid=3597 comm="syz.5.1368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 104.546324][ T3598] SELinux: failed to load policy [ 104.814635][ T508] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 104.965764][ T508] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.976939][ T508] usb 6-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 104.987048][ T508] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.998851][ T508] usb 6-1: config 0 descriptor?? [ 105.006880][ T305] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 105.164600][ T305] usb 4-1: Using ep0 maxpacket: 8 [ 105.176692][ T305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.195578][ T305] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 105.203726][ T305] usb 4-1: config 0 has no interface number 0 [ 105.224602][ T305] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 105.254602][ T305] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 105.270906][ T305] usb 4-1: config 0 interface 88 has no altsetting 0 [ 105.279504][ T305] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 105.289137][ T305] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 105.305945][ T305] usb 4-1: Product: syz [ 105.310259][ T305] usb 4-1: Manufacturer: syz [ 105.315347][ T305] usb 4-1: SerialNumber: syz [ 105.331498][ T305] usb 4-1: config 0 descriptor?? [ 105.425714][ T508] wacom 0003:056A:002A.0012: unknown main item tag 0x0 [ 105.432981][ T508] wacom 0003:056A:002A.0012: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 105.481032][ T508] wacom 0003:056A:002A.0012: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.5-1/input0 [ 105.535085][ T508] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:002A.0012/input/input12 [ 105.554093][ T305] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input15 [ 105.594769][ T305] usb 4-1: USB disconnect, device number 20 [ 105.613773][ T339] udevd[339]: Error opening device "/dev/input/event3": No such file or directory [ 105.623486][ T339] udevd[339]: Unable to EVIOCGABS device "/dev/input/event3" [ 105.643003][ T339] udevd[339]: Unable to EVIOCGABS device "/dev/input/event3" [ 105.661604][ T508] usb 6-1: USB disconnect, device number 5 [ 106.511747][ T36] audit: type=1400 audit(2000000289.949:327): avc: denied { getattr } for pid=3669 comm="syz.5.1399" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.535957][ T3670] overlayfs: statfs failed on './file0' [ 106.832985][ T3681] tipc: Enabling of bearer rejected, failed to enable media [ 108.684596][ C0] net_ratelimit: 177981 callbacks suppressed [ 108.684609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.702632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.714684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.726709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.738936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.750946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.763008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.775165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.787188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.799179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.146954][ T36] audit: type=1400 audit(2000000292.589:328): avc: denied { create } for pid=3709 comm="syz.5.1416" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 109.326306][ T3720] overlayfs: failed to clone upperpath [ 109.367998][ T3724] overlayfs: failed to clone upperpath [ 110.124574][ C0] sched: DL replenish lagged too much [ 110.386450][ T36] audit: type=1400 audit(2000000293.829:329): avc: denied { setattr } for pid=3747 comm="syz.3.1435" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 110.844528][ T3778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1444'. [ 110.904406][ T3782] incfs: mount failed -22 [ 113.694581][ C0] net_ratelimit: 105097 callbacks suppressed [ 113.694604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.712731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.724945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.737002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.749065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.761199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.773238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.785387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.797493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.809629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.098420][ T36] audit: type=1326 audit(2000000297.539:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24fb8ec29 code=0x7fc00000 [ 114.764613][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 114.935947][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 114.950445][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.964596][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.992719][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.014177][ T45] usb 4-1: config 0 descriptor?? [ 115.047102][ T45] hub 4-1:0.0: bad descriptor, ignoring hub [ 115.060404][ T45] hub 4-1:0.0: probe with driver hub failed with error -5 [ 115.079202][ T45] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 115.265959][ T36] audit: type=1326 audit(2000000298.709:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.1476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69ea78ec29 code=0x0 [ 115.505021][ T3877] FAULT_INJECTION: forcing a failure. [ 115.505021][ T3877] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.530032][ T3877] CPU: 1 UID: 0 PID: 3877 Comm: syz.5.1479 Not tainted syzkaller #0 33840401dc9524e2de0309c027e288ea06768364 [ 115.530068][ T3877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.530089][ T3877] Call Trace: [ 115.530096][ T3877] [ 115.530104][ T3877] __dump_stack+0x21/0x30 [ 115.530137][ T3877] dump_stack_lvl+0x10c/0x190 [ 115.530164][ T3877] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.530192][ T3877] dump_stack+0x19/0x20 [ 115.530218][ T3877] should_fail_ex+0x3d9/0x530 [ 115.530240][ T3877] should_fail+0xf/0x20 [ 115.530259][ T3877] should_fail_usercopy+0x1e/0x30 [ 115.530281][ T3877] _copy_from_user+0x22/0xb0 [ 115.530307][ T3877] get_user_ifreq+0x71/0x180 [ 115.530335][ T3877] sock_ioctl+0x6fb/0x7b0 [ 115.530362][ T3877] ? __cfi_sock_ioctl+0x10/0x10 [ 115.530391][ T3877] ? bpf_lsm_file_ioctl+0xd/0x20 [ 115.530418][ T3877] ? security_file_ioctl+0x34/0xd0 [ 115.530442][ T3877] ? __cfi_sock_ioctl+0x10/0x10 [ 115.530468][ T3877] __se_sys_ioctl+0x135/0x1b0 [ 115.530492][ T3877] __x64_sys_ioctl+0x7f/0xa0 [ 115.530515][ T3877] x64_sys_call+0x1878/0x2ee0 [ 115.530543][ T3877] do_syscall_64+0x58/0xf0 [ 115.530564][ T3877] ? clear_bhb_loop+0x50/0xa0 [ 115.530593][ T3877] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.530621][ T3877] RIP: 0033:0x7fc24fb8ec29 [ 115.530647][ T3877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.530665][ T3877] RSP: 002b:00007fc250a32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.530689][ T3877] RAX: ffffffffffffffda RBX: 00007fc24fdd5fa0 RCX: 00007fc24fb8ec29 [ 115.530705][ T3877] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000003 [ 115.530719][ T3877] RBP: 00007fc250a32090 R08: 0000000000000000 R09: 0000000000000000 [ 115.530733][ T3877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.530746][ T3877] R13: 00007fc24fdd6038 R14: 00007fc24fdd5fa0 R15: 00007ffc07346c58 [ 115.530764][ T3877] [ 117.604321][ T3963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1515'. [ 117.620593][ T3963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3963 comm=syz.0.1515 [ 117.661904][ T3963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1515'. [ 117.733794][ T36] audit: type=1400 audit(2000000301.169:332): avc: denied { create } for pid=3971 comm="syz.5.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.841779][ T36] audit: type=1400 audit(2000000301.279:333): avc: denied { remount } for pid=3970 comm="syz.0.1519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.977218][ T3985] rust_binder: Write failure EINVAL in pid:172 [ 117.977984][ T3985] rust_binder: Write failure EINVAL in pid:172 [ 118.062901][ T3997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1528'. [ 118.132228][ T3992] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 118.302692][ T4007] FAULT_INJECTION: forcing a failure. [ 118.302692][ T4007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.315989][ T4007] CPU: 1 UID: 0 PID: 4007 Comm: syz.5.1531 Not tainted syzkaller #0 33840401dc9524e2de0309c027e288ea06768364 [ 118.316029][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.316051][ T4007] Call Trace: [ 118.316060][ T4007] [ 118.316069][ T4007] __dump_stack+0x21/0x30 [ 118.316103][ T4007] dump_stack_lvl+0x10c/0x190 [ 118.316130][ T4007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.316166][ T4007] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 118.316194][ T4007] dump_stack+0x19/0x20 [ 118.316220][ T4007] should_fail_ex+0x3d9/0x530 [ 118.316242][ T4007] should_fail+0xf/0x20 [ 118.316262][ T4007] should_fail_usercopy+0x1e/0x30 [ 118.316285][ T4007] _copy_from_user+0x22/0xb0 [ 118.316311][ T4007] vti6_siocdevprivate+0x1fa/0xa10 [ 118.316339][ T4007] ? __cfi_vti6_siocdevprivate+0x10/0x10 [ 118.316369][ T4007] ? full_name_hash+0xa1/0xf0 [ 118.316393][ T4007] dev_ifsioc+0xb02/0xe60 [ 118.316416][ T4007] ? dev_ioctl+0x1030/0x1030 [ 118.316437][ T4007] ? dev_get_by_name_rcu+0xe9/0x140 [ 118.316461][ T4007] dev_ioctl+0xa9b/0x1030 [ 118.316483][ T4007] sock_ioctl+0x737/0x7b0 [ 118.316511][ T4007] ? __cfi_sock_ioctl+0x10/0x10 [ 118.316540][ T4007] ? bpf_lsm_file_ioctl+0xd/0x20 [ 118.316568][ T4007] ? security_file_ioctl+0x34/0xd0 [ 118.316592][ T4007] ? __cfi_sock_ioctl+0x10/0x10 [ 118.316618][ T4007] __se_sys_ioctl+0x135/0x1b0 [ 118.316642][ T4007] __x64_sys_ioctl+0x7f/0xa0 [ 118.316666][ T4007] x64_sys_call+0x1878/0x2ee0 [ 118.316695][ T4007] do_syscall_64+0x58/0xf0 [ 118.316717][ T4007] ? clear_bhb_loop+0x50/0xa0 [ 118.316745][ T4007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.316774][ T4007] RIP: 0033:0x7fc24fb8ec29 [ 118.316792][ T4007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.316810][ T4007] RSP: 002b:00007fc250a32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.316833][ T4007] RAX: ffffffffffffffda RBX: 00007fc24fdd5fa0 RCX: 00007fc24fb8ec29 [ 118.316850][ T4007] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000003 [ 118.316864][ T4007] RBP: 00007fc250a32090 R08: 0000000000000000 R09: 0000000000000000 [ 118.316878][ T4007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.316891][ T4007] R13: 00007fc24fdd6038 R14: 00007fc24fdd5fa0 R15: 00007ffc07346c58 [ 118.316909][ T4007] [ 118.694190][ T4019] overlayfs: failed to clone upperpath [ 118.704605][ C0] net_ratelimit: 95678 callbacks suppressed [ 118.704625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.722625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.734847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.746972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.758965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.771022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.782986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.794948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.807055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.819033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.839467][ T4024] fuse: Bad value for 'fd' [ 119.274273][ T36] audit: type=1400 audit(2000000302.709:334): avc: denied { sqpoll } for pid=4042 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.357848][ T4046] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.380872][ T4046] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 119.400285][ T4046] overlayfs: missing 'lowerdir' [ 119.415171][ T4047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1543'. [ 119.946111][ T36] audit: type=1400 audit(2000000303.389:335): avc: denied { write } for pid=4056 comm="syz.4.1547" name="file2" dev="tmpfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.038972][ T36] audit: type=1400 audit(2000000303.409:336): avc: denied { open } for pid=4056 comm="syz.4.1547" path="/457/file2" dev="tmpfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.126047][ T36] audit: type=1400 audit(2000000303.409:337): avc: denied { ioctl } for pid=4056 comm="syz.4.1547" path="/457/file2" dev="tmpfs" ino=2440 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.421772][ T4072] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 120.421803][ T4072] rust_binder: Error while translating object. [ 120.450400][ T4072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.462431][ T4072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589 [ 120.617948][ T4081] Invalid ELF header magic: != ELF [ 120.632492][ T36] audit: type=1400 audit(2000000304.059:338): avc: denied { module_load } for pid=4080 comm="syz.3.1555" path="/bus" dev="ramfs" ino=22711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 121.445861][ T36] audit: type=1400 audit(2000000304.889:339): avc: denied { map } for pid=4098 comm="syz.5.1562" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.540935][ T4105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 121.540968][ T4105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:210 [ 121.565294][ T4106] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1564'. [ 122.262826][ T4135] overlayfs: failed to clone upperpath [ 122.362095][ T36] audit: type=1400 audit(2000000305.799:340): avc: denied { getopt } for pid=4142 comm="syz.4.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.731150][ T4161] rust_binder: Read failure Err(EFAULT) in pid:613 [ 122.821112][ T36] audit: type=1400 audit(2000000306.259:341): avc: denied { nlmsg_read } for pid=4168 comm="syz.5.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.146424][ T4184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.146462][ T4184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:623 [ 123.714636][ C0] net_ratelimit: 96522 callbacks suppressed [ 123.714663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.741870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.754089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.766182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.778334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.790372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.802435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.814543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.826617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.838666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.895475][ T36] audit: type=1400 audit(2000000307.339:342): avc: denied { getopt } for pid=4215 comm="syz.5.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.126926][ T36] audit: type=1400 audit(2000000307.569:343): avc: denied { mounton } for pid=4233 comm="syz.3.1613" path="/proc/633/cgroup" dev="proc" ino=23465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 124.237379][ T36] audit: type=1400 audit(2000000307.659:344): avc: denied { read } for pid=4238 comm="syz.3.1615" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.328081][ T4246] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1616'. [ 124.366827][ T36] audit: type=1400 audit(2000000307.809:345): avc: denied { getopt } for pid=4240 comm="syz.4.1616" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.068616][ T36] audit: type=1400 audit(2000000308.509:346): avc: denied { map } for pid=4263 comm="syz.4.1624" path="socket:[23612]" dev="sockfs" ino=23612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.112270][ T4268] overlayfs: failed to clone upperpath [ 125.118363][ T36] audit: type=1400 audit(2000000308.529:347): avc: denied { accept } for pid=4263 comm="syz.4.1624" path="socket:[23612]" dev="sockfs" ino=23612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.164595][ T305] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.244576][ T4278] netlink: 'syz.4.1629': attribute type 4 has an invalid length. [ 125.324160][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 125.339107][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.354694][ T305] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.393661][ T305] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.404580][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.423801][ T305] usb 6-1: config 0 descriptor?? [ 125.647705][ T4292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.670481][ T4292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.691885][ T36] audit: type=1400 audit(2000000309.129:348): avc: denied { read } for pid=4291 comm="syz.3.1634" path="socket:[23744]" dev="sockfs" ino=23744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.720816][ T4292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.739534][ T4292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.762340][ T36] audit: type=1400 audit(2000000309.199:349): avc: denied { ioctl } for pid=4291 comm="syz.3.1634" path="socket:[23744]" dev="sockfs" ino=23744 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.840829][ T305] HID 045e:07da: Invalid code 65791 type 1 [ 125.865770][ T305] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0013/input/input17 [ 125.898089][ T305] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 126.203017][ T36] audit: type=1400 audit(2000000309.639:350): avc: denied { lock } for pid=4294 comm="syz.0.1635" path="socket:[23756]" dev="sockfs" ino=23756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 126.293769][ T36] audit: type=1400 audit(2000000309.639:351): avc: denied { setopt } for pid=4294 comm="syz.0.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.653470][ T508] usb 6-1: USB disconnect, device number 6 [ 126.778232][ T4336] netlink: 'syz.0.1652': attribute type 16 has an invalid length. [ 126.791534][ T4336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1652'. [ 126.803019][ T36] audit: type=1400 audit(2000000310.239:352): avc: denied { mount } for pid=4335 comm="syz.0.1652" name="/" dev="configfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 126.852587][ T36] audit: type=1400 audit(2000000310.269:353): avc: denied { search } for pid=4335 comm="syz.0.1652" name="/" dev="configfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.881061][ T36] audit: type=1400 audit(2000000310.269:354): avc: denied { read } for pid=4335 comm="syz.0.1652" name="/" dev="configfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.904009][ T36] audit: type=1400 audit(2000000310.269:355): avc: denied { open } for pid=4335 comm="syz.0.1652" path="/" dev="configfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.246456][ T4353] €: renamed from syztnl1 [ 127.284891][ T4357] overlayfs: failed to clone lowerpath [ 127.439615][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.496390][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.524860][ T4373] 9pnet_fd: Insufficient options for proto=fd [ 127.727261][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.756995][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.241242][ T4408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1682'. [ 128.724585][ C0] net_ratelimit: 103439 callbacks suppressed [ 128.724610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.742730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.754759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.766840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.778939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.790972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.803044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.815149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.827171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.839311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.914040][ T45] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 128.957525][ T45] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.625164][ T4442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2322 sclass=netlink_route_socket pid=4442 comm=syz.0.1694 [ 129.863681][ T4451] rust_binder: 661: no such ref 0 [ 130.497234][ T36] audit: type=1326 audit(2000000313.929:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.4.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ea78ec29 code=0x7fc00000 [ 130.889313][ T36] audit: type=1400 audit(2000000314.329:357): avc: denied { setcheckreqprot } for pid=4497 comm="syz.3.1715" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 130.913717][ T4498] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 130.935734][ T4500] rust_binder: 286: no such ref 0 [ 130.943776][ T36] audit: type=1400 audit(2000000314.349:358): avc: denied { write } for pid=4497 comm="syz.3.1715" name="/" dev="configfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.058437][ T36] audit: type=1400 audit(2000000314.499:359): avc: denied { accept } for pid=4506 comm="syz.5.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.185465][ T4512] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 131.185497][ T4512] rust_binder: Error while translating object. [ 131.199542][ T4512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.205985][ T4512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:678 [ 131.627060][ T305] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 131.796781][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 131.812444][ T305] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.840259][ T305] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.868463][ T305] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.882856][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.907486][ T305] usb 6-1: Product: syz [ 131.918437][ T305] usb 6-1: Manufacturer: syz [ 131.931382][ T305] usb 6-1: SerialNumber: syz [ 132.245555][ T305] usb 6-1: 0:2 : does not exist [ 132.431303][ T305] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 132.539244][ T305] usb 6-1: USB disconnect, device number 7 [ 132.882392][ T4544] udevd[4544]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.734604][ C0] net_ratelimit: 119704 callbacks suppressed [ 133.734626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.734684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.740792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.752763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.764687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.776733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.788663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.800536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.812511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.824405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.186077][ T4554] overlayfs: conflicting options: userxattr,verity=require [ 138.638927][ T4557] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1740'. [ 138.744582][ C0] net_ratelimit: 157487 callbacks suppressed [ 138.744606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.744632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.750693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.762718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.774613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.786495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.798458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.810403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.822372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.834346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.627917][ T4561] netlink: 'syz.4.1741': attribute type 16 has an invalid length. [ 143.754569][ C0] net_ratelimit: 159631 callbacks suppressed [ 143.754591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.754655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.760651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.772756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.784769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.796673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.808681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.820546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.832410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.844422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.984894][ T4561] netlink: 16494 bytes leftover after parsing attributes in process `syz.4.1741'. [ 148.764590][ C0] net_ratelimit: 147171 callbacks suppressed [ 148.764613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.764651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.770667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.782717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.794721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.806483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.818459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.830315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.842285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.854365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.774623][ C1] net_ratelimit: 114398 callbacks suppressed [ 153.774645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.774707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.780707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.792887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.804804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.816646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.828656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.840738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.852487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.864470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.994886][ T64] usb 4-1: USB disconnect, device number 21 [ 158.784557][ C1] net_ratelimit: 114131 callbacks suppressed [ 158.784580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.784590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.784669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 158.790673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.802666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.814552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.826503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.838506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.850592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.862366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.794567][ C0] net_ratelimit: 124359 callbacks suppressed [ 163.794601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 163.794636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.800668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.812701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.824578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.836560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.848609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.860415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.872400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.884295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.804580][ C0] net_ratelimit: 127124 callbacks suppressed [ 168.804604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.804642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.810678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 168.822620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.834483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.846437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.858424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.870433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.882462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.894393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.814567][ C0] net_ratelimit: 131782 callbacks suppressed [ 173.814589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.814607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.820749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.832578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.844597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.856633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.868476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.880513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.892517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.904304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.767415][ T64] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 178.824601][ C0] net_ratelimit: 130028 callbacks suppressed [ 178.824627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.824681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.830706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 178.842588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.854673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.866651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.878518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.890570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.902443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.914259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.834607][ C1] net_ratelimit: 131566 callbacks suppressed [ 183.834629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.834657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.840691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.852699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 183.864640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.876483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.888459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.900394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.912369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.924415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.844548][ C0] net_ratelimit: 130531 callbacks suppressed [ 188.844572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.844642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.850621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.862660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.874690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.886495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.898574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.910461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.922302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.934346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.854593][ C0] net_ratelimit: 110872 callbacks suppressed [ 193.854616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.854829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.860677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.872683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.884837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.896782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.908651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.920529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.932474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.944447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.864545][ C1] net_ratelimit: 98822 callbacks suppressed [ 198.864569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.864628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.870597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.882563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.894556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.906611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.918448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.930364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.942276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.954124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.209137][ T12] macsec0: left allmulticast mode [ 203.239838][ T12] veth1_macvtap: left allmulticast mode [ 203.286717][ T12] macsec0: left promiscuous mode [ 203.305795][ T12] bridge0: port 3(macsec0) entered disabled state [ 203.414860][ T12] bridge_slave_1: left allmulticast mode [ 203.434950][ T12] bridge_slave_1: left promiscuous mode [ 203.472560][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.748029][ T12] bridge_slave_0: left allmulticast mode [ 203.765266][ T12] bridge_slave_0: left promiscuous mode [ 203.874545][ C0] net_ratelimit: 118285 callbacks suppressed [ 203.874567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.874572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.874649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.880617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.892670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.904586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.916473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.928376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 203.940363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.952231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.068308][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.884541][ C0] net_ratelimit: 128720 callbacks suppressed [ 208.884565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.884590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.890627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.902655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.914654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.926429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.938400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 208.950257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.962753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.974744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.894542][ C0] net_ratelimit: 127153 callbacks suppressed [ 213.894565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.894627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.900615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.912637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.924677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.936494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.948475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.960360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.972212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.984240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.904533][ C0] net_ratelimit: 129226 callbacks suppressed [ 218.904556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.904595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.910637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 218.922586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.934437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.946442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.958466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.970445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.982488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.994404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.914531][ C1] net_ratelimit: 127558 callbacks suppressed [ 223.914555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.914571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.920622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.932624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.944543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.956378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.968450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.981756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.992142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.004131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 228.924563][ C0] net_ratelimit: 131067 callbacks suppressed [ 228.924587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.924660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.930664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 228.942544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.954553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.966530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.978375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.990365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.002395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.014187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.934567][ C0] net_ratelimit: 128590 callbacks suppressed [ 233.934592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.934606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.934683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.940726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.953049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.965014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 233.976985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.988854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.000807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.012783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.944536][ C1] net_ratelimit: 126560 callbacks suppressed [ 238.944560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.944610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.950669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.962579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.974427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.986387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.998380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.010310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.022144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.034030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 243.954521][ C0] net_ratelimit: 126163 callbacks suppressed [ 243.954544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.954552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.954660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.960774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.972627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.984562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 243.996558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.008378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.020277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.032209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.964523][ C1] net_ratelimit: 126556 callbacks suppressed [ 248.964547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.964606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.970632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.982593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.994612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.006628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.018433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.030420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 249.042304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.054172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.974574][ C1] net_ratelimit: 129308 callbacks suppressed [ 253.974599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.974631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.980678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.992618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.004736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.016718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.028603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.040603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.052503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.064348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.984516][ C0] net_ratelimit: 130229 callbacks suppressed [ 258.984541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.984548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.984633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.990679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.002521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.014526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.026481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.038436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.050346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.062362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.994520][ C1] net_ratelimit: 121306 callbacks suppressed [ 263.994545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.994560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.994677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.000635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.012625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.024516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.036376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.048372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.060456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.072236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.635818][ T37] INFO: task syz.3.1730:4532 blocked for more than 122 seconds. [ 267.643554][ T37] Not tainted syzkaller #0 [ 267.650415][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.689829][ T37] task:syz.3.1730 state:D stack:0 pid:4532 tgid:4532 ppid:292 flags:0x00004004 [ 267.700077][ T37] Call Trace: [ 267.703372][ T37] [ 267.706352][ T37] __schedule+0x1322/0x1df0 [ 267.710881][ T37] ? __sched_text_start+0x10/0x10 [ 267.715947][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 267.721334][ T37] ? rcu_barrier_entrain+0x350/0x4d0 [ 267.726681][ T37] schedule+0xc6/0x240 [ 267.730772][ T37] schedule_timeout+0xb2/0x3a0 [ 267.735563][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 267.740952][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 267.746592][ T37] ? generic_exec_single+0x20a/0x500 [ 267.751909][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 267.757579][ T37] wait_for_common+0x359/0x630 [ 267.762369][ T37] ? wait_for_completion+0x40/0x40 [ 267.767688][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 267.774216][ T37] wait_for_completion+0x1c/0x40 [ 267.779200][ T37] rcu_barrier+0x415/0x530 [ 267.783642][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 267.789062][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 267.793857][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 267.799011][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 267.804685][ T37] ? __kasan_check_write+0x18/0x20 [ 267.809823][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 267.815500][ T37] kvm_put_kvm+0xb04/0x12c0 [ 267.820028][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 267.825175][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 267.830833][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 267.836174][ T37] kvm_vm_release+0x47/0x70 [ 267.840707][ T37] __fput+0x1fb/0xa00 [ 267.844730][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 267.850293][ T37] ____fput+0x20/0x30 [ 267.854292][ T37] task_work_run+0x1e3/0x250 [ 267.858916][ T37] ? __cfi_task_work_run+0x10/0x10 [ 267.864060][ T37] ? __kasan_check_read+0x15/0x20 [ 267.869178][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 267.875282][ T37] resume_user_mode_work+0x36/0x50 [ 267.880409][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 267.885914][ T37] do_syscall_64+0x64/0xf0 [ 267.890430][ T37] ? clear_bhb_loop+0x50/0xa0 [ 267.895188][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 267.901115][ T37] RIP: 0033:0x7ff71e78ec29 [ 267.905588][ T37] RSP: 002b:00007fff429c64f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 267.914051][ T37] RAX: 0000000000000000 RBX: 00007ff71e9d7da0 RCX: 00007ff71e78ec29 [ 267.922074][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 267.930118][ T37] RBP: 00007ff71e9d7da0 R08: 000000000000c150 R09: 0000000c429c67ef [ 267.938226][ T37] R10: 00007ff71e9d7cb0 R11: 0000000000000246 R12: 0000000000020548 [ 267.946367][ T37] R13: 00007ff71e9d6090 R14: ffffffffffffffff R15: 00007fff429c6610 [ 267.954370][ T37] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 268.060124][ T36] audit: type=1400 audit(2000000451.179:360): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1596]" dev="pipefs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 268.218609][ T37] NMI backtrace for cpu 0 [ 268.218631][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 33840401dc9524e2de0309c027e288ea06768364 [ 268.218661][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.218673][ T37] Call Trace: [ 268.218679][ T37] [ 268.218688][ T37] __dump_stack+0x21/0x30 [ 268.218721][ T37] dump_stack_lvl+0x10c/0x190 [ 268.218747][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 268.218774][ T37] dump_stack+0x19/0x20 [ 268.218800][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 268.218821][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 268.218847][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 268.218867][ T37] ? sched_show_task+0x379/0x560 [ 268.218893][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 268.218916][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.218942][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.218967][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 268.218989][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 268.219015][ T37] watchdog+0xd8f/0xed0 [ 268.219043][ T37] ? __cfi_watchdog+0x10/0x10 [ 268.219069][ T37] ? __kasan_check_read+0x15/0x20 [ 268.219098][ T37] ? __kthread_parkme+0x138/0x180 [ 268.219117][ T37] ? schedule+0xc6/0x240 [ 268.219139][ T37] kthread+0x2c7/0x370 [ 268.219158][ T37] ? __cfi_watchdog+0x10/0x10 [ 268.219184][ T37] ? __cfi_kthread+0x10/0x10 [ 268.219205][ T37] ret_from_fork+0x67/0xa0 [ 268.219232][ T37] ? __cfi_kthread+0x10/0x10 [ 268.219253][ T37] ret_from_fork_asm+0x1a/0x30 [ 268.219283][ T37] [ 268.219291][ T37] Sending NMI from CPU 0 to CPUs 1: [ 268.414414][ C1] NMI backtrace for cpu 1 [ 268.414432][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 33840401dc9524e2de0309c027e288ea06768364 [ 268.414455][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.414464][ C1] RIP: 0010:stack_trace_consume_entry+0xea/0x2a0 [ 268.414501][ C1] Code: 67 00 4c 8b 55 d0 4d 89 f1 4c 8b 45 c8 4c 89 e2 4c 89 ff 48 8b 75 c0 4c 8b 37 45 8d 7a 01 0f b6 04 13 84 c0 0f 85 4a 01 00 00 <45> 89 38 4f 8d 3c d6 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 1e 4c 89 [ 268.414517][ C1] RSP: 0018:ffffc90000230350 EFLAGS: 00000246 [ 268.414536][ C1] RAX: 0000000000000000 RBX: 1ffff9200004608e RCX: 0000000000230300 [ 268.414551][ C1] RDX: dffffc0000000000 RSI: ffffffff814ff124 RDI: ffffc90000230460 [ 268.414567][ C1] RBP: ffffc90000230398 R08: ffffc90000230470 R09: ffffc90000230468 [ 268.414582][ C1] R10: 000000000000000d R11: ffffffff81744550 R12: ffffc9000023046c [ 268.414597][ C1] R13: 1ffff9200004608d R14: ffffc90000230520 R15: 000000000000000e [ 268.414619][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 268.414637][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.414652][ C1] CR2: 00007fec51d07d60 CR3: 000000012e48c000 CR4: 00000000003526b0 [ 268.414672][ C1] DR0: 0000000000000000 DR1: 00000000fec00049 DR2: 0000000000000000 [ 268.414684][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 268.414697][ C1] Call Trace: [ 268.414702][ C1] [ 268.414710][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 268.414742][ C1] ? __kernel_text_address+0x11/0x40 [ 268.414766][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 268.414800][ C1] arch_stack_walk+0x12d/0x170 [ 268.414819][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 268.414848][ C1] stack_trace_save+0x9d/0xe0 [ 268.414869][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 268.414894][ C1] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 268.414913][ C1] ? ref_tracker_alloc+0x153/0x540 [ 268.414936][ C1] ref_tracker_alloc+0x18f/0x540 [ 268.414958][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 268.414979][ C1] ? dst_init+0xcf/0x420 [ 268.415002][ C1] ? dst_alloc+0x163/0x250 [ 268.415026][ C1] ? ip_route_input_rcu+0x184a/0x2520 [ 268.415048][ C1] ? ip_route_input_noref+0xbf/0x130 [ 268.415070][ C1] ? arp_process+0x89d/0x1740 [ 268.415097][ C1] ? NF_HOOK+0x157/0x1b0 [ 268.415121][ C1] ? arp_rcv+0x2f8/0x490 [ 268.415147][ C1] ? process_backlog+0x556/0xae0 [ 268.415167][ C1] ? __napi_poll+0xd3/0x610 [ 268.415185][ C1] ? net_rx_action+0x584/0xce0 [ 268.415205][ C1] ? handle_softirqs+0x1ab/0x630 [ 268.415232][ C1] ? __do_softirq+0xf/0x16 [ 268.415254][ C1] ? do_softirq+0xa6/0x100 [ 268.415282][ C1] dst_init+0xcf/0x420 [ 268.415306][ C1] dst_alloc+0x163/0x250 [ 268.415329][ C1] ip_route_input_rcu+0x184a/0x2520 [ 268.415353][ C1] ? ip_route_input_noref+0x130/0x130 [ 268.415376][ C1] ? __asan_memcpy+0x5a/0x80 [ 268.415405][ C1] ? arpt_do_table+0x1b6c/0x1d50 [ 268.415432][ C1] ip_route_input_noref+0xbf/0x130 [ 268.415455][ C1] ? __cfi_ip_route_input_noref+0x10/0x10 [ 268.415480][ C1] ? __asan_memcpy+0x5a/0x80 [ 268.415508][ C1] arp_process+0x89d/0x1740 [ 268.415536][ C1] ? __cfi_arp_process+0x10/0x10 [ 268.415564][ C1] ? __cfi_arp_process+0x10/0x10 [ 268.415591][ C1] NF_HOOK+0x157/0x1b0 [ 268.415623][ C1] ? __cfi_arp_process+0x10/0x10 [ 268.415650][ C1] ? arp_xmit+0x1f0/0x1f0 [ 268.415676][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 268.415696][ C1] ? __cfi_arp_process+0x10/0x10 [ 268.415725][ C1] arp_rcv+0x2f8/0x490 [ 268.415752][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 268.415779][ C1] process_backlog+0x556/0xae0 [ 268.415803][ C1] __napi_poll+0xd3/0x610 [ 268.415822][ C1] net_rx_action+0x584/0xce0 [ 268.415845][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 268.415865][ C1] ? sched_clock+0x44/0x60 [ 268.415890][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 268.415915][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 268.415938][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 268.415964][ C1] handle_softirqs+0x1ab/0x630 [ 268.415994][ C1] __do_softirq+0xf/0x16 [ 268.416014][ C1] do_softirq+0xa6/0x100 [ 268.416041][ C1] [ 268.416048][ C1] [ 268.416055][ C1] ? __cfi_do_softirq+0x10/0x10 [ 268.416082][ C1] ? dst_destroy+0x37d/0x460 [ 268.416107][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 268.416132][ C1] __local_bh_enable_ip+0x74/0x80 [ 268.416159][ C1] rcu_do_batch+0x5c6/0xd20 [ 268.416188][ C1] ? rcu_core+0xd20/0xd20 [ 268.416212][ C1] ? __kasan_check_write+0x18/0x20 [ 268.416239][ C1] ? _raw_spin_lock+0x8c/0x120 [ 268.416259][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 268.416286][ C1] ? __kasan_check_read+0x15/0x20 [ 268.416313][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 268.416340][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 268.416368][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 268.416392][ C1] ? __kasan_check_write+0x18/0x20 [ 268.416414][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 268.416430][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 268.416446][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 268.416462][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 268.416478][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 268.416494][ C1] ? __kasan_check_read+0x15/0x20 [ 268.416515][ C1] ? __kthread_parkme+0x138/0x180 [ 268.416530][ C1] ? schedule+0xc6/0x240 [ 268.416547][ C1] kthread+0x2c7/0x370 [ 268.416562][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 268.416584][ C1] ? __cfi_kthread+0x10/0x10 [ 268.416606][ C1] ret_from_fork+0x67/0xa0 [ 268.416626][ C1] ? __cfi_kthread+0x10/0x10 [ 268.416641][ C1] ret_from_fork_asm+0x1a/0x30 [ 268.416664][ C1] [ 269.004515][ C0] net_ratelimit: 107574 callbacks suppressed [ 269.004539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.004547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.004624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.010833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.022610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.034618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 269.046587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.058472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.070455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.082436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.014557][ C1] net_ratelimit: 118248 callbacks suppressed [ 274.014587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.014703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.020659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.032659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:b0:d5:6e:2d:0e, vlan:0) [ 274.044594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.056556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.068547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.080399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.092376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.104463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)