last executing test programs: 26.857341059s ago: executing program 3 (id=3337): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x8, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 25.094555758s ago: executing program 1 (id=3341): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 24.516030344s ago: executing program 3 (id=3342): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 15.523106584s ago: executing program 1 (id=3344): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c461d8a0807070000000000000003003e0081000000bc000000000000004000000000000000bc00000000000000ff0700000b00380001000300080005000100000009000000000050000000000003000000000000000000000000000000010000000000008001000000000000000000000000000040b51186e512c8cbcdf2bb88872af645f0782a0cada22e56ebc9302745b33c293011001852177ff95bf073eb84953012b372eb6a043cac5689c397826f6f8ba637bc0583795118e27643a91abccca31627e55f068f7ce64e1bd9875c23df1cbbdd7b08c21ff2c5b18ec06c90aecb1c1601f02a21a5e600"/1261], 0x4ed) 15.516885462s ago: executing program 4 (id=3345): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000400)=[0x5, 0x8]) 15.164973422s ago: executing program 3 (id=3346): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1e) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b68090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$pptp(r0, &(0x7f0000000d80)={0x18, 0x2, {0x2, @remote}}, 0x1e) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 14.458237805s ago: executing program 3 (id=3347): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000780)="1ede55", 0x3, 0x4008041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) read$char_usb(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) 14.319319662s ago: executing program 0 (id=3348): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f00000005c0)={0x80001, 0x0, {[0x5, 0xfffffffffffffff7, 0x3, 0x800000000000000, 0x6, 0x4, 0x16, 0x5]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) chdir(&(0x7f00000000c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f0000001a80)='net/unix\x00') preadv(r3, &(0x7f0000003c00)=[{&(0x7f0000002ac0)=""/4111, 0x100f}], 0x1, 0x2, 0x77f83464) 14.244128607s ago: executing program 3 (id=3349): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/17, 0x11) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) 14.02790326s ago: executing program 0 (id=3350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x2, 0x60500) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r4, 0x1ad72f7) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) 11.976644931s ago: executing program 2 (id=3352): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x6c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004090) 11.8829409s ago: executing program 4 (id=3353): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x8, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.537085284s ago: executing program 0 (id=3354): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='scalable', 0x8) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce6", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="51e6", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001280)="ae2fea8fb3938a040c1af08cd22f90b03f8a4bbd15396c2da555d27ad9406afb51b60f39417d4b8a4ac6ba1565e330840da4b642961d8b9990f8d43ac2eb741a4ed5abbe1d180a02b74fffefe2f6677e3d79124216ed5d038e082556f3afad9f05d65a19850228e5e337f27e8d3784a72ea691132251002e049c55cc96b01d02621d8b7c57dd504b666c05087a601cc705315d0af1a8a44e0988d519c3a439a5b0bb241f2f5282534b6b822db676cc73000b91a8f836d368ce32ae369e5a4fa6cf69ab4808880b6d7d0156cea4b3051ff2b8f6a03cc4eab86ba6c1ff5befadf045654477fb45b8cee5e0b5b51097da7c299c79f77a84c35bea7494c627da27e6a1720a520cd2ace36dd7cfac67ab80803909cb7e7c0aecca8999f433243447965d8926ac8dfab24a0208db1f2bba61f90e70925881994f15dc3798da673ccf699051ab972ec92c7d181bee02e5753bb0ba873800379e15da095a3a21d958a9af0020cdace68972c6a06726c15e67da08f84dbb543f0e1890a66635ed251910fa741998422a8cb23a5616df595bcaf828d145228f2f8b7e21b23ef162de38dd872fd0cd390abbd8512bd5e583b6722ad585dbce47a13ae6f3a91e45f6190c6e7d3824ff8038b745e919f2a152ac285cffa9246cc4ed65904f6113ad17f538fa60d9235f32c59a3b8794859b3b8e38cb3e8c1d273201527a6bcc7086b27d5165944d715ca8294e5f564d0f85f26eeb8851703bd22203f7eab34794677e8eb8445c8d1adc044ef678b781d057c986bc840ccb2e20de21976b0997c69972fdc70e305cb5911f9c52fc75f9c1cfb34bd4c40e7ef868909b6e58d3caa54e0a6a9038eadfa517ec93c2a321f5fae60d506a08e83a4cdee2e552b6171c73e20002c9632bbf0786fcd18b996256617b9bd1559e1d9f2a5b2e5fb62542332b50a244cfe546fe7d0440a8398e3671b12ed35846b71b014213e42667be675a502cd83264112face0f4534aca20c92a9b9dd32e9eb49c23c93721d138e649866fbf3802c9", 0x2de}], 0x1}}], 0x3, 0xc0) 11.048900271s ago: executing program 1 (id=3355): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 9.748954217s ago: executing program 0 (id=3356): socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 9.732797635s ago: executing program 2 (id=3357): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1e) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$pptp(r0, &(0x7f0000000d80)={0x18, 0x2, {0x2, @remote}}, 0x1e) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 9.467576957s ago: executing program 3 (id=3358): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) read$msr(r0, &(0x7f0000019300)=""/102400, 0x19000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001640)=""/109, 0x6d}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {0x0}], 0x2, &(0x7f00000014c0)=""/45, 0x2d}}], 0x3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 9.074903508s ago: executing program 0 (id=3359): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) sendto$inet(r0, &(0x7f0000000780)="1ede55", 0x3, 0x4008041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) read$char_usb(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) 8.077227899s ago: executing program 2 (id=3360): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f00000005c0)={0x80001, 0x0, {[0x5, 0xfffffffffffffff7, 0x3, 0x800000000000000, 0x6, 0x4, 0x16, 0x5]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) chdir(&(0x7f00000000c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f0000001a80)='net/unix\x00') preadv(r3, &(0x7f0000003c00)=[{&(0x7f0000002ac0)=""/4111, 0x100f}], 0x1, 0x2, 0x77f83464) 7.66230197s ago: executing program 0 (id=3361): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0x2042, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r12, 0x4140aecd, &(0x7f0000000140)={{0xe566c797b7515b9, 0xffff1000, 0x10, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x40, 0xb}, {0xd000, 0x4000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0x4, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0xb, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000001c0)={0x1, 0x4}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) r13 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r13, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}], 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000018c0)={'#! ', './file1/../file0'}, 0x14) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x28020480) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000f411"]) 7.61999867s ago: executing program 4 (id=3362): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f00000005c0)={0x80001, 0x0, {[0x5, 0xfffffffffffffff7, 0x3, 0x800000000000000, 0x6, 0x4, 0x16, 0x5]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) chdir(&(0x7f00000000c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f0000001a80)='net/unix\x00') preadv(r3, &(0x7f0000003c00)=[{&(0x7f0000002ac0)=""/4111, 0x100f}], 0x1, 0x2, 0x77f83464) 7.581098365s ago: executing program 1 (id=3363): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000400)=[0x5, 0x8]) 7.487294904s ago: executing program 2 (id=3364): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000380)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) chdir(0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x66000080) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00'], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff0000000000", @ANYRES32, @ANYRES16=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r8, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) 6.867739734s ago: executing program 4 (id=3365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001d80)="cc54720d33eaf2589c177685942a5f781474a4e144f51c884c7333fce074d1c54e7d667f57571254b6b2cb040de84c87104a0a04efee07453feb11f6ddd1473254ce6d97cee8a1fd0f363ca3260849291d2b8d8683def6ab78ca908e440915b29e875ecc168beff78c89e4080d37b53ed47c8e79c5fb6c6452fcaf3c24416289d6f9eaefe4164fab7bd7ec1596f3f590cb79b42e88b2b6398530089c960ac36861cd389ef5faa703a43ea564799f9203d5a71c869feaa9cac074d81e970c1e55eec1db2f6456d4f9d0b62ed6b09bf15555f2f22e8aab9ba7a98ec2dcfca31d0992b4ae8dc1839721cfaa1d6f30e12f6a21a5c2f44d71628edd71a3abfdf0f5afb2eb0c25131b124c52d1e4334c05897759577217ef7f7c5b26b31adcf09ccddbc8021334b74cc03b46eaf0708851daf8e9a44c0ce65edbc7c96053a27e254c27a4f555bc64a312e197eb3525d231e9f2ef155e34c4c512067dbf5e53382798f4e3f390f97233ad37150f5ecf1d5108b3e5f3117cf003bf1f60cc8aa58f448039a662e349fbba454b390a3c11401d922a31ff28c7e01c18e4c6b875a4fd69f9639ab4fe5dcbb8942a7609152b0793b07e8409c7f21831844fcf932bd572541a878dd60283d699e665983852d74b58775ebd09c4d647ce75d6d52c1ba4303d162e91d1430bc6b5e2387783f98a0002a6a4548e8e9cf1f684519e73a44e739fc3e0a17c3129bb7089c450b2a1f19f670c01f9537f41eaaa358057783c49ee2d255bec11db09cfededd6b10926bb99c72fd067f334ee0cc195a9bcc06d3c8caf5ee52ccc4e358740d2b69db8e8f0cbb7e5b85ed9a5a90b2c423f2c7d2e4d26e58ab6476222911eb71eae1df345f37d989fad6888d5d4ee8fbcfaab480c3e44ef1657304c7369d4035876d22bd1978ddbcb9084b066d237020085374b0119e3884fe7f89e96f7b08219271a035b9cad4693178f273a813cc2640cf507975a351d464e05e2d6dd7e072910d8b49c380d2792ef041c4fc87e43fe396147757619ade24d58a8f9a8ec967af1adc242b29826cee1a846ffcbbd7dee676980208f95c36b07728c2c839798fa289043d81ded05a39987bd03d114653b4a3829d039fdbdbdfbc2d483e397bfa40537864fede5df827a4ede4066b46a95966574e5225fb7d1c2851581f671a4e26454d92f9d1ebc197f8aefc09ba7e9ceb0274064e6e0c16698a36bfeb8c51e79941110b17b53af5de40db97a12119a12446237d036904a7467af7cbc8d21aeca03e59cb9948f1ee7fffb7d5859c7afca21d726ce50bcda037085da6ccb7649e397716c70d44bcc7a3ffc56d35bbdc38897e7785794c3463b770b1f20acb5eafa791c53d7b5ac3dd02c42175fc6e03d2789dd62592b7c8d613851e7654b83c48e38449e58b693abd8134d8070d9c5047a40a923663f1c918a6896a7a3cb8452a765707fac28234541ef11397f44b51be8c9bcbb194a71088d306f8a40da6bfbcad3838b001c91741b7b0486abcab20d967932532b802afb0d144b92ea061b96a30d1a5effe525065c265013b273ecf6f581d8f828a33de29dbafcbb187c0c31ae1e62c931034eedc260eb22ace963fb9fd00d4e5a9fa8780b49f6e8c24900fe71c44d88f36afec01bdb5be46ac94eb65887c352d94643ed0414cc4ab3df9a9a6667d9c0169a07a29362492a8478f8b88910159fba97bad682c1a21fe8f112db72a68b2d6cd52c62f3a4ffe0f40f3b71e4a5c228921ba4c2940178b58034ca38b3fab5aefae607481de6e9b8ba9d4d8349c58345b83b3ee393d1b2e378205cde2c944404bf1386afa91990d028e08de85e9c6c08dae1456a9447d2e716fd4cde2cc17d58f4277103f7914dbf52bf1d69352c1af90119ca74c27323fd2f98602cfe443c7506c3a6f8ddb65a4b5ea78409fe0c8d3bee94a9900dceb37c974a0ce61f85c5b01516a9e07b2578ff8d2de2477be64733022ec00be985356e0644a90700d6575c3b3f7e2bf35a28364e76b49595d63833ab5221d082a0f1dddadc6d311bac61f3f0f7025d6d8e048de55bc9684a8ea83da6f75b6e3a36cd47e34a96724d9b21c61a0e4717ba8f7a1c32fa8c241fd4de5b63fc20a1caa320bc6d15be0675c9427bbc213a8cc2907ed10f47e4945a8a2084ffb7c10bb8a3c0568430e7311bba32f41a0407b9239028863f35e4e475130d9b98825ac127b439b17ddecb87617af043be861f1696d75e32aef73b74680a23d68470b4d33b4879b20ad583aba179cb73b095c5a2880ff493d7f49cdb6ca767a2b422543160735dfe16e2f92b6e6f8c396311daea801f0832c14c66f4afdb41defa861e3611ebafb9d9f828ad1bff72484f94a3dc86ee0be138b8513f81332a82dc653b8c3f3fec123c690d57a2b0343719d0587ef6d2b4a451c7d263b3f3a489962dd9a018694a1c09f18c7786ac57d940f4e41ece26597a31474535425ae97b65c3865361b0783d6532f8fde96d5dd1c562bc3b7c26878b85bccc168e381c1bc1000f3ea18eda32b0a9e14afc334a361e0659546e02cd44ce7de87141305aed8bd4da8a7ac5af10785111568b00407a70c5e54d6526942dc0b950af2d23a3825f6349b4170f8cde667830ee6e1db91ebd8cb9d2b9250134505858cd7125bf83afef7959733bf36db433d3c970b1ac26b63bd2fe4bf04486dea3ca58c8db78661ba97b6e3253061f300e2b93b52d3435056c8916c85eaa0179f7625dda36f874621a086550aaeb3b7999e44f83bda83045835d1942998a4bbac0730b6430eb23ccc260664da94f4cee5dadf1e878a3baa03f0e55c59169d74aec39085ecee059080100cea3049560beda4e460c9ab624bbe4ee7aad89e6c7b31ac88ed421a00823e7323fdc6e036267f2eee7c3ef2b0c13c45e7ccca51bc08d7a112bd8a571f12d7a74948b3c4ab18f64ef350c63f675fbd3ec9519f5e1e20a0476312b695ba4769166aff086e202437ebfc5796f9f5fa499f00b4596e09c264a0d8a798ea1b8d57e987275797c8564378a7387a319d988b7a89ce99bc132a3991848dc7e4d45a810fdf9b284a1c164aa2b2cd3b91f36ec3abf12469185b4166b82939dd903b8a6ba3fc55e4211b5d6fda304d7a5aaa80927bc9174453dc330167551f7ea605d529ab4be8d9f98a12db3ece27af06a4f34a6ade18555db119955525dcd2a579e40be762041744a43d072995507d01630eeabde86bcaee5ce181019d079361c938af7702eb99a9b2331c1716a3e0959b9d87b662812911254293a56a2da6879c239ed6476e517c225b11af298d8307eb2e6129843bae4b77bf8d49a3290f5de5c3882264d459132471403025f9e883a210633cde3d5781168bf0f954dfe958b6060b3d7919a20c8914507950abec4c5c0be2ed2077443be4a034da8cba4e290a5ae6241226299ac3983b4efa3481cf8bd0a8d5e632047b2627ab5595850763b7e9936efd621d270ec2d4759f1b156f8c0455f8cf8eb6076610d2fca142a9629599783812fcc67b2f2f703dfe503a41017982498ffafd1257745f80cb5bdf25785f8b015df348c740b1fc4e8088a015f5d0acad43f7fec76c43a33d0738b0044794af7102e30a8ea5e67fd609d8d22666216e811b2c844e556e4a4ccd59b2a2c257c39e2b3d161dd01b2d62c3f1a7e22190148422a074eef0c11eb225067b98a87b3e6e03b474f457655471aa6cc461a9a4026fcd3d62c58e661dc91d7813f905d083873a951d9da795baef7593d29a19e24be2fa437b6e0560b57336daf2fb5f33a32c25d43bef44daff283b52e9a578c789af75b18447bb73efae61a0da4c16f4f713d4fe90249f5e13a7ad2c8efd6df178941346c016f96363ad1d380530ecd3fded2027267e6da9997a352b84370b1113f206acb8d9a558b0f4bbb6350e9b928961e4a8451938a217024e06fdd2944c0b7c35b71b9408b77a25885e18eba06174a8f338190a14dc1dd38a71836a84ea1068885736e6b1a74dc4f5888ee7fb9fccba69e5160e6130ad18747c6057961cc291a6709ad7277560434f969711c63d87869839f5291c07fab402a217ee97832926c9dea2d1d5e866f1794dce9daa492b055b66e72508aa7d347d0e0dbf969d96f61853b642d03b4b150d2c2b6ecdb8b893515bbfadc9271fdf00c9d2de29b05d2767d42fb39ed22492413ab0df68f0e9fe73dec4a8b8fbb405a84a247c5c7a31c5412c7fb6b090577887967534f3793ef1bdc543593b49dcc4490974513cdfc11e5464531b2e9284263473449e91e135262820377c71d0a7bb394d85c0ef34786f93e9136b30e3f7ac97457ab5bc27aaf8ee52ee1a66dd2d1940adcd94fff65a4437b94f7f2af7d8cf1623d428f40d1223654ed2661621e54c252fc990518de95cb557077d72b0c1687443a1d8b7112e2094ff37db9923b3e0cbefbc8ce272dadb7e86f1517cbf34f1ecc2b65f7336f43c09d45d48b855be60da5b6434bf08ca3631dfb54c8352e74a8e3fa0c0075a2bb2233e71965e0dae1f06a50e4d0ee24ceb33c64aa07ed7d934e57c527b59681e60dbdcc87718f343ceff15ac5a837b60a73be6a4531ed6c4c18dbc433a5ce0016c6a6eba175c6b7fdd0c5a309f174f5c3935392348c9e0cd139f3c04d384e00bf6f2904397e61dbabf792e28cd562b90bad7bc67e2f0518f096c03999cb5d6485d5e341db2c9448ba4d91632d8b734cbce4fae79d77dda7a3a4145deba78ede38a6b5e27ad28c4720deaaa5aef3a080f18c02e2877bed726a0f26a2e5522daefce04fa70402f89c30f6f62264624b29d53d7a093409303594c4ee4db5cfe671bde138791163d8a92bf73702d3b4983af7c9340cb0ef0061ab3f959336fd48bc3342b57de167d207b5bc6fe8736ecd9ebd232ce05a90bce40edb59dc6d48a9668d52528ff56b8799bebe6fd5aea0e828ee83f8eaeae5f7ff4cd1ccda346a3be70bc1e131bacfd8c0b41df8b6bd9c7f3d619c010a19a5297808cf937c8fe47dfd2ad84f4e6ec7fd9cfcddd721a2e93e20763cb1243e27a0ab00bfa3a0d91be301a1499ac5520eea4672753808ff616f79b9979cdeace5320bd033b5e5b3651e62689839307a5215a9ec343c5a71b8a3a0c37eebe69463fbceab6813f38fcd07f3e3748f79a9a5866826fee882b1d89ab4a83b72865a12417366a54da17d26dcfbb7ba6c5cafa2db02ca9fa0c89cb5358ab53875306cc0e0659b8e357a921486bb714cb65a6d130d5524fe3b2e994edbdd8789b32c540d73e98efaf78d73e580afa80c17aa9aecccfbf1cdd622aa9475561d75c268a6c15ed7b88be9d5cde20f2be88cc8cc766f41de0cf187102525f6df4a28bc36f9f0fe4d69981705b7333e3b6094831a70f9800b687320784c7d084bb1673cfa565c4491ea54a2ffd6386b242e33093995ce5bdd9bf11a684910d2ee7560b3e0f63f7b375e4e396cadcd61853f5f833e53729d30dc96d7bfd7275be1f5bb2b6ebd185fe6e2dff48a93bfb9630fec832565f63fa6c63e4b9fc9f18713a15e3a0ea9afbd76fee738824e0e3d1f898b7c4eb2ef5bfcc1f8097b2cf07398e0b2a10ad48c4a7fa6defc8b6f2a936d306a1bf003f80801444534e36d33947747732e3dd55b8577644aa02081c7fdd8bdd630b72e4daaa4e0851c5befbf0f56ed22154bb3cb2261bfdf1a8cf29006333856eed3cb7f6b8aceef8ebd89661c06f51c9879bc77d1ec1da185be0d6de12a22ffa69e9dccf7b409d8808b7385d2fc5e8c75ddab2cde8fe6c24f8ec0f6e3959d03f73265", 0x1000}, {&(0x7f00000000c0)='OY', 0x2}], 0x2, &(0x7f0000000300)=[@rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r2, r2, r1, r3]}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r1, r1, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x80, 0xc040000}}, {{&(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000400)="36b3e3396e4413cb57eb1b51af53fec7b3695739c3b0742777ebd7ecd8e25cc3ac764dcd51f91b7ba514305c8aca70c1104a2d279a", 0x35}, {&(0x7f0000000440)="c610597ec4ee8ecdec005fa7b741271bbc6cad875a94abe40618036a20d10f218d53ab77068ccaccf5eb59d01e0ce94b68b3d52cfbab11b586af0066f471f4347a0876360fca7727cf5dbce5fa23364c010b5f6b9ef3c4b4ad8e392ff733aeea49e671f39562606cd9993677f174c96443066c8d8b5eae1c69c86c5cbc2b46686c56a55cda966488531920e75fe3ac9fd6edf63e60f77a4c9fb066b9d7cfe0f60f63a9faa68fa8e33c3180d228358d9b68890f1c1acb97ca547f", 0xba}, {&(0x7f0000000500)="054444c7573b65bd9bd015d7c20736b5e43b2c48975d87a034bcd01816a76dcc2efd76db436e41b7a593a58ef1b5f702b53788c8d626e59588a0d2c293aecf1c60373b0531907e0f79256d830953a9548bf5659a78b2635351380d74cbfceb17e2d5944b26879d8a539cac284b4ce6d7546687680081e94d61124231408b7951e50ac2093fe38d5b4856b6950ccb5b55b4804a229d1ec2eadbecd8e6af", 0x9d}, {&(0x7f00000005c0)="8b29698458f932361d5e4e829d1cf6b85d50b5df667feab00d334d8a7b1ff4845f56f48643ac0b2b575663264249f7d042fd42c7f9cc82070675f36f1668aea855c7423dd9e528a33ded7d9bf9dab75996303a9e36829c1a345d5092a3fdcfa5ad2e6a4bbf1a7ecceaccc81fab841dacca11066608c1d8493b86761547d56eda0909c1e68ca1f7bd5be91794d3173de29d0f2d169c54308dbd46d30bf7d0d9b3afa960e404fab202297ed1befa83e6b2dae72ef32b9ab9b1f575529dfae6108a9fded196b45ccec03c876ec157046b302aad2c7f677836", 0xd7}, {&(0x7f00000006c0)="5016808510974c7cde7340ed5acca925beb87f0ddd726d61b0d6", 0x1a}, {&(0x7f0000000780)="58cb0a6600c33366de226f465b7c1ce3b078a8d9d946562f8afea6e5d632df54c7e202656786083dc8c87ede088bde85777ad92838e34b3e016eaabfa75c6fa7b73c0ddc1226a83d69c477784b3d30db4c7f2d44502cfb62d1dea2c94d9c45831c67f19b0bd528d1eb07807a2110", 0x6e}], 0x6, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x70, 0x4}}], 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1.853916039s ago: executing program 2 (id=3366): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) 1.853716346s ago: executing program 1 (id=3367): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) 1.274875255s ago: executing program 4 (id=3368): openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0xebb265) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 982.875356ms ago: executing program 2 (id=3369): socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 976.214917ms ago: executing program 1 (id=3370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x44}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 0s ago: executing program 4 (id=3371): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) kernel console output (not intermixed with test programs): -71 [ 1018.682183][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1018.682199][ T30] audit: type=1400 audit(1759953358.763:1133): avc: denied { remount } for pid=17473 comm="syz.4.2851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1018.708169][ T978] rc_core: IR keymap rc-hauppauge not found [ 1018.714065][ T978] Registered IR keymap rc-empty [ 1018.737759][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1018.804565][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1018.829841][ T978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1019.233368][ T5889] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1019.276308][ T978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input86 [ 1019.300868][ T5889] usb 2-1: device descriptor read/8, error -71 [ 1019.848728][ T5889] usb usb2-port1: unable to enumerate USB device [ 1019.858138][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.915038][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1019.971900][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.170629][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.185864][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.199045][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.214292][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1020.223664][ T24] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1020.226429][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.231916][ T24] usb 5-1: Manufacturer: syz [ 1020.245682][ T5132] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1020.255329][ T5132] CPU: 1 UID: 0 PID: 5132 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1020.255354][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1020.255367][ T5132] Workqueue: hci3 hci_rx_work [ 1020.255400][ T5132] Call Trace: [ 1020.255407][ T5132] [ 1020.255414][ T5132] dump_stack_lvl+0x16c/0x1f0 [ 1020.255444][ T5132] sysfs_warn_dup+0x7f/0xa0 [ 1020.255468][ T5132] sysfs_create_dir_ns+0x24b/0x2b0 [ 1020.255492][ T5132] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1020.255519][ T5132] ? kobject_namespace+0x97/0x1a0 [ 1020.255541][ T5132] kobject_add_internal+0x2c4/0x9b0 [ 1020.255565][ T5132] kobject_add+0x16e/0x240 [ 1020.255583][ T5132] ? __pfx_kobject_add+0x10/0x10 [ 1020.255605][ T5132] ? kobject_put+0xab/0x5a0 [ 1020.255642][ T5132] device_add+0x288/0x1aa0 [ 1020.255673][ T5132] ? __pfx_dev_set_name+0x10/0x10 [ 1020.255690][ T5132] ? mgmt_send_event_skb+0x2f4/0x460 [ 1020.255716][ T5132] ? __pfx_device_add+0x10/0x10 [ 1020.255745][ T5132] ? mgmt_send_event_skb+0x2fb/0x460 [ 1020.255778][ T5132] hci_conn_add_sysfs+0x17e/0x230 [ 1020.255809][ T5132] le_conn_complete_evt+0x1260/0x2150 [ 1020.255842][ T5132] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1020.255879][ T5132] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 1020.255907][ T5132] ? skb_pull_data+0x166/0x210 [ 1020.255936][ T5132] hci_le_meta_evt+0x354/0x5e0 [ 1020.255963][ T5132] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1020.255994][ T5132] hci_event_packet+0x685/0x11c0 [ 1020.256020][ T5132] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1020.256048][ T5132] ? __pfx_hci_event_packet+0x10/0x10 [ 1020.256080][ T5132] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 1020.256110][ T5132] hci_rx_work+0x2c5/0x16b0 [ 1020.256145][ T5132] process_one_work+0x9cf/0x1b70 [ 1020.256177][ T5132] ? __pfx_process_one_work+0x10/0x10 [ 1020.256206][ T5132] ? assign_work+0x1a0/0x250 [ 1020.256228][ T5132] worker_thread+0x6c8/0xf10 [ 1020.256261][ T5132] ? __pfx_worker_thread+0x10/0x10 [ 1020.256281][ T5132] kthread+0x3c2/0x780 [ 1020.256306][ T5132] ? __pfx_kthread+0x10/0x10 [ 1020.256327][ T5132] ? rcu_is_watching+0x12/0xc0 [ 1020.256352][ T5132] ? __pfx_kthread+0x10/0x10 [ 1020.256372][ T5132] ret_from_fork+0x672/0x7d0 [ 1020.256389][ T5132] ? __pfx_kthread+0x10/0x10 [ 1020.256409][ T5132] ret_from_fork_asm+0x1a/0x30 [ 1020.256446][ T5132] [ 1020.256608][ T5132] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1020.493825][ T5132] Bluetooth: hci3: failed to register connection device [ 1020.591924][ T24] usb 5-1: config 0 descriptor?? [ 1020.708933][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.746650][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.804820][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.979615][T17505] /dev/sg0: Can't lookup blockdev [ 1020.990510][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1021.024695][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1021.032291][ T5816] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1021.054380][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1021.075668][ T978] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1021.090585][ T978] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1021.127631][ T978] usb 4-1: USB disconnect, device number 39 [ 1021.194326][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 1021.200921][ T5816] usb 3-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.212624][ T5816] usb 3-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.222802][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1021.229570][ T5816] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1021.239296][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.249576][ T5816] usb 3-1: config 0 descriptor?? [ 1021.488929][ T5816] chicony 0003:04F2:1236.0006: unknown main item tag 0x0 [ 1021.515476][ T5816] chicony 0003:04F2:1236.0006: unknown main item tag 0x0 [ 1021.536082][ T5816] chicony 0003:04F2:1236.0006: item fetching failed at offset 2/7 [ 1021.544728][ T5816] chicony 0003:04F2:1236.0006: Chicony hid parse failed: -22 [ 1021.552231][ T5816] chicony 0003:04F2:1236.0006: probe with driver chicony failed with error -22 [ 1021.570226][ T870] usb 3-1: USB disconnect, device number 43 [ 1021.988550][T17522] bpf: Bad value for 'gid' [ 1022.293750][T17524] vxfs: WRONG superblock magic 00000000 at 1 [ 1022.300087][T17524] vxfs: WRONG superblock magic 00000000 at 8 [ 1022.306162][T17524] vxfs: can't find superblock. [ 1022.312888][ T30] audit: type=1400 audit(1759953362.063:1134): avc: denied { getopt } for pid=17514 comm="syz.0.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1022.564796][ T5132] Bluetooth: hci3: command 0x0406 tx timeout [ 1022.637028][ T24] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input87 [ 1022.804413][ T5132] Bluetooth: hci0: command tx timeout [ 1022.816952][ T30] audit: type=1400 audit(1759953362.903:1135): avc: denied { connect } for pid=17489 comm="syz.4.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1022.840864][ T24] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1022.855750][ T24] usb 5-1: USB disconnect, device number 53 [ 1023.339168][T17532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17532 comm=syz.1.2864 [ 1023.799278][T17538] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1023.842920][T17538] CIFS mount error: No usable UNC path provided in device string! [ 1023.842920][T17538] [ 1023.854683][T17538] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1023.886348][ T30] audit: type=1400 audit(1759953363.973:1136): avc: denied { write } for pid=17537 comm="syz.1.2867" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1024.108094][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1025.024445][ T24] usb 4-1: device descriptor read/64, error -71 [ 1025.578420][T17554] /dev/sg0: Can't lookup blockdev [ 1025.884442][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1026.052190][ T30] audit: type=1400 audit(1759953366.043:1137): avc: denied { write } for pid=17557 comm="syz.0.2874" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1026.098384][ T24] usb 4-1: device descriptor read/64, error -71 [ 1026.225356][ T24] usb usb4-port1: attempt power cycle [ 1026.564442][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1026.584823][ T24] usb 4-1: device descriptor read/8, error -71 [ 1026.698714][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 1026.714388][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'. [ 1026.733519][ T30] audit: type=1400 audit(1759953366.813:1138): avc: denied { map } for pid=17585 comm="syz.1.2883" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1026.808618][ T30] audit: type=1400 audit(1759953366.813:1139): avc: denied { execute } for pid=17585 comm="syz.1.2883" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1026.836941][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1026.851738][T17588] netlink: zone id is out of range [ 1026.864364][T17588] netlink: zone id is out of range [ 1026.872854][T17588] netlink: zone id is out of range [ 1026.885029][T17588] netlink: zone id is out of range [ 1026.896744][T17588] netlink: zone id is out of range [ 1026.907963][T17588] netlink: set zone limit has 4 unknown bytes [ 1027.054386][ T24] usb 4-1: device not accepting address 43, error -71 [ 1027.061625][ T24] usb usb4-port1: unable to enumerate USB device [ 1027.192116][ T30] audit: type=1400 audit(1759953367.273:1140): avc: denied { append } for pid=17602 comm="syz.2.2891" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1027.225879][T17604] loop6: detected capacity change from 0 to 7 [ 1027.242286][T17604] Dev loop6: unable to read RDB block 7 [ 1027.264462][T17604] loop6: unable to read partition table [ 1027.270506][T17604] loop6: partition table beyond EOD, truncated [ 1027.284692][T17604] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1027.427087][ T30] audit: type=1400 audit(1759953367.513:1141): avc: denied { override_creds } for pid=17609 comm="syz.0.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1027.671028][T17627] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2900'. [ 1027.683999][ T30] audit: type=1400 audit(1759953367.763:1142): avc: denied { bind } for pid=17624 comm="syz.4.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1027.799409][T17631] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2897'. [ 1027.858185][ T30] audit: type=1400 audit(1759953367.763:1143): avc: denied { node_bind } for pid=17624 comm="syz.4.2899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1027.915091][ T30] audit: type=1400 audit(1759953367.793:1144): avc: denied { getopt } for pid=17624 comm="syz.4.2899" laddr=fe80::12 faddr=fe80::1b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1028.003038][ T30] audit: type=1400 audit(1759953368.083:1145): avc: denied { mount } for pid=17634 comm="syz.4.2901" name="/" dev="ramfs" ino=65587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1028.366323][T17658] vivid-001: disconnect [ 1028.614372][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1028.776366][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1028.788693][ T24] usb 4-1: config 250 has an invalid interface number: 223 but max is 1 [ 1028.800084][ T24] usb 4-1: config 250 has an invalid descriptor of length 67, skipping remainder of the config [ 1028.820526][ T24] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 1028.845184][ T24] usb 4-1: config 250 has no interface number 0 [ 1028.859313][ T24] usb 4-1: config 250 interface 223 has no altsetting 0 [ 1029.037600][ T24] usb 4-1: New USB device found, idVendor=16d8, idProduct=7001, bcdDevice=70.0f [ 1029.164559][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.184308][ T24] usb 4-1: Product: syz [ 1029.192757][ T24] usb 4-1: Manufacturer: syz [ 1029.202838][ T24] usb 4-1: SerialNumber: syz [ 1029.417438][T17656] vivid-001: reconnect [ 1029.422626][ T24] option 4-1:250.223: GSM modem (1-port) converter detected [ 1029.434532][ T24] usb 4-1: USB disconnect, device number 44 [ 1029.473597][ T24] option 4-1:250.223: device disconnected [ 1029.610888][T17674] bridge0: entered allmulticast mode [ 1029.778188][ T30] audit: type=1400 audit(1759953369.863:1146): avc: denied { connect } for pid=17682 comm="syz.4.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1029.826636][T17687] netlink: zone id is out of range [ 1029.840883][T17687] netlink: zone id is out of range [ 1029.846638][ T5132] Bluetooth: Frame is too long (len 67, expected len 4) [ 1029.854135][T17687] netlink: zone id is out of range [ 1029.859321][T17687] netlink: zone id is out of range [ 1029.924764][T17690] kvm: pic: non byte write [ 1029.929340][T17690] kvm: pic: non byte write [ 1029.935122][T17690] kvm: pic: non byte write [ 1029.954432][T17690] kvm: pic: non byte write [ 1030.041940][ T5816] IPVS: starting estimator thread 0... [ 1030.148591][T17711] program syz.4.2925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1030.174435][ T30] audit: type=1400 audit(1759953370.243:1147): avc: denied { write } for pid=17699 comm="syz.4.2925" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1030.174493][ T30] audit: type=1400 audit(1759953370.243:1148): avc: denied { ioctl } for pid=17699 comm="syz.4.2925" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1030.179037][T17704] IPVS: using max 39 ests per chain, 93600 per kthread [ 1030.289077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.454385][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1030.913191][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1030.930335][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1030.951936][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1030.974496][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1030.998908][T17724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2934'. [ 1031.190275][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.215430][ T24] usb 5-1: config 0 descriptor?? [ 1031.225431][ T24] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 1031.232966][ T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1031.675070][T17742] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2941'. [ 1031.859225][T17742] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2941'. [ 1031.893919][ T30] audit: type=1400 audit(1759953371.973:1149): avc: denied { write } for pid=17743 comm="syz.0.2942" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1031.919509][ T30] audit: type=1400 audit(1759953372.003:1150): avc: denied { open } for pid=17743 comm="syz.0.2942" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1032.119278][ T30] audit: type=1400 audit(1759953372.203:1151): avc: denied { accept } for pid=17743 comm="syz.0.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1032.404961][T11580] Bluetooth: hci0: command 0x0405 tx timeout [ 1033.274541][ T30] audit: type=1400 audit(1759953373.353:1152): avc: denied { bind } for pid=17754 comm="syz.2.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1033.612246][ T5816] usb 5-1: USB disconnect, device number 54 [ 1033.994035][ T30] audit: type=1400 audit(1759953374.073:1153): avc: denied { ioctl } for pid=17782 comm="syz.4.2956" path="socket:[65982]" dev="sockfs" ino=65982 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1034.018842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.248006][ T30] audit: type=1400 audit(1759953374.323:1154): avc: denied { listen } for pid=17777 comm="syz.1.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1034.485199][T11580] Bluetooth: hci0: command 0x0405 tx timeout [ 1034.504571][T17781] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1034.568790][ T30] audit: type=1400 audit(1759953374.623:1155): avc: denied { sqpoll } for pid=17774 comm="syz.3.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1034.608494][T17781] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1034.838183][T17781] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1034.845909][T17781] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1035.144371][ T30] audit: type=1400 audit(1759953374.733:1156): avc: denied { create } for pid=17793 comm="syz.4.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1035.184355][ T30] audit: type=1400 audit(1759953374.733:1157): avc: denied { write } for pid=17793 comm="syz.4.2958" path="socket:[67108]" dev="sockfs" ino=67108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1035.207637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.579415][T17781] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1035.622486][T17781] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1035.805554][T17781] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1035.812266][T17781] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1035.891338][T17781] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1035.900277][T17781] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1035.922778][T17781] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1035.931259][T17781] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1035.943089][T17781] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1035.952693][T17781] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1035.960518][T17781] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1035.989048][T17781] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1036.014529][T17781] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1036.027856][T17781] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1036.042562][T17781] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1036.050644][T17781] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1036.076508][T17781] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1036.100606][T17781] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1036.406116][ T30] audit: type=1400 audit(1759953376.493:1158): avc: denied { append } for pid=17801 comm="syz.4.2960" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1036.578382][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.676976][T17814] net_ratelimit: 1 callbacks suppressed [ 1036.676987][T17814] netlink: zone id is out of range [ 1036.688194][T17814] netlink: zone id is out of range [ 1036.693568][T17814] netlink: zone id is out of range [ 1036.699103][T17814] netlink: zone id is out of range [ 1036.705794][T17814] netlink: zone id is out of range [ 1036.711053][T17814] netlink: zone id is out of range [ 1036.848286][T17814] netlink: zone id is out of range [ 1036.868179][T17814] netlink: zone id is out of range [ 1036.937833][T17814] netlink: zone id is out of range [ 1036.953299][T17814] netlink: zone id is out of range [ 1037.046936][ T30] audit: type=1400 audit(1759953377.133:1159): avc: denied { accept } for pid=17820 comm="syz.4.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1037.934413][ T5132] Bluetooth: hci2: command 0x0c1a tx timeout [ 1037.940467][ T5132] Bluetooth: hci3: command 0x0406 tx timeout [ 1038.008075][ T5132] Bluetooth: hci4: command 0x0406 tx timeout [ 1038.084446][ T5132] Bluetooth: hci0: command 0x0405 tx timeout [ 1038.281524][T14786] vivid-002: reconnect [ 1038.604999][T17857] hub 1-0:1.0: USB hub found [ 1038.614356][T17857] hub 1-0:1.0: 1 port detected [ 1038.635299][ T30] audit: type=1400 audit(1759953378.653:1160): avc: denied { write } for pid=17848 comm="syz.0.2978" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1038.658654][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.681567][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 1039.154481][ T978] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1039.441426][ T978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1039.449731][ T978] usb 3-1: config 0 has no interface number 0 [ 1039.464748][ T978] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1039.625639][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.634443][T11580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1039.645079][T11580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1039.664308][ T30] audit: type=1400 audit(1759953379.713:1161): avc: denied { listen } for pid=17872 comm="syz.1.2989" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1039.677532][T11580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1039.720419][ T978] usb 3-1: config 0 descriptor?? [ 1039.732601][T11580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1039.740541][T11580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1039.750659][ T978] usb 3-1: selecting invalid altsetting 1 [ 1039.766659][ T978] dvb_ttusb_budget: ttusb_init_controller: error [ 1039.811200][ T978] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1039.875227][T17876] lo speed is unknown, defaulting to 1000 [ 1039.916508][ T978] DVB: Unable to find symbol cx22700_attach() [ 1040.004400][ T5132] Bluetooth: hci2: command 0x0c1a tx timeout [ 1040.010489][T11580] Bluetooth: hci3: command 0x0406 tx timeout [ 1040.066779][ T978] DVB: Unable to find symbol tda10046_attach() [ 1040.072959][ T978] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1040.084366][T11580] Bluetooth: hci4: command 0x0406 tx timeout [ 1040.114371][ T5816] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1040.144629][ T978] usb 3-1: USB disconnect, device number 44 [ 1040.164324][T11580] Bluetooth: hci0: command 0x0405 tx timeout [ 1040.195467][T17876] chnl_net:caif_netlink_parms(): no params data found [ 1040.304519][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 1040.311334][ T5816] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1040.319379][ T5816] usb 1-1: config 0 has no interface number 0 [ 1040.327468][ T5816] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1040.341863][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.351344][ T5816] usb 1-1: Product: syz [ 1040.355576][ T5816] usb 1-1: Manufacturer: syz [ 1040.360163][ T5816] usb 1-1: SerialNumber: syz [ 1040.372209][ T5816] usb 1-1: config 0 descriptor?? [ 1040.380496][ T5816] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1040.391908][ T5816] usb 1-1: selecting invalid altsetting 1 [ 1040.403775][ T5816] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1040.417849][T17876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.425849][ T5816] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1040.433857][T17876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.443472][T17876] bridge_slave_0: entered allmulticast mode [ 1040.451405][T17876] bridge_slave_0: entered promiscuous mode [ 1040.455564][ T5816] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1040.459347][T17876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.473250][T17876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.481034][T17876] bridge_slave_1: entered allmulticast mode [ 1040.488325][T17876] bridge_slave_1: entered promiscuous mode [ 1040.499073][ T5816] usb 1-1: media controller created [ 1040.550563][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1040.570677][T17876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.592737][T17876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.625052][ T5816] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1040.639530][ T5816] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1040.703990][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1040.758044][T11580] Bluetooth: hci1: command 0x0406 tx timeout [ 1040.767333][T17876] team0: Port device team_slave_0 added [ 1040.779706][ T5816] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1040.784629][T17876] team0: Port device team_slave_1 added [ 1041.138240][ T30] audit: type=1400 audit(1759953381.203:1162): avc: denied { bind } for pid=17905 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1041.224387][ T30] audit: type=1400 audit(1759953381.223:1163): avc: denied { setopt } for pid=17905 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1041.257421][ T5816] usb 1-1: USB disconnect, device number 44 [ 1041.274314][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1041.311575][T17876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.356650][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.413273][ T30] audit: type=1400 audit(1759953381.273:1164): avc: denied { watch } for pid=17912 comm="syz.0.2999" path="/572" dev="tmpfs" ino=3058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1041.435571][T17876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.451336][T17876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.458842][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.489544][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.513535][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1041.544442][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1041.562584][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1041.598457][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1041.623987][T17876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.747336][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1041.780551][T11580] Bluetooth: hci5: command tx timeout [ 1041.841263][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1041.855857][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1041.910668][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.094322][T11580] Bluetooth: hci3: command 0x0406 tx timeout [ 1042.158771][T17876] hsr_slave_0: entered promiscuous mode [ 1042.164447][T11580] Bluetooth: hci4: command 0x0406 tx timeout [ 1042.171224][T17876] hsr_slave_1: entered promiscuous mode [ 1042.177461][T17876] debugfs: 'hsr0' already exists in 'hsr' [ 1042.183365][T17876] Cannot create hsr debugfs directory [ 1042.245054][T11580] Bluetooth: hci0: command 0x0405 tx timeout [ 1042.261484][ T24] usb 2-1: usb_control_msg returned -32 [ 1042.267316][ T24] usbtmc 2-1:16.0: can't read capabilities [ 1042.696179][T17876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.724362][T17876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.804672][T11580] Bluetooth: hci1: command 0x0406 tx timeout [ 1043.091457][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1043.102831][T17939] netlink: 'syz.1.2996': attribute type 5 has an invalid length. [ 1043.115721][T17876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.131158][ T30] audit: type=1400 audit(1759953383.213:1165): avc: denied { name_bind } for pid=17940 comm="syz.4.3009" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1043.152239][T17939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1043.189170][T17876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.235613][ T30] audit: type=1400 audit(1759953383.253:1166): avc: denied { read } for pid=17940 comm="syz.4.3009" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1043.315493][T17939] geneve2: entered promiscuous mode [ 1043.320860][T17939] geneve2: entered allmulticast mode [ 1043.356789][T15310] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1043.379828][T15310] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1043.526521][T17876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.537767][T17876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.558298][T15311] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1043.580127][T15311] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1043.668913][T17876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.711323][T17876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.826455][ T30] audit: type=1400 audit(1759953383.913:1167): avc: denied { ioctl } for pid=17956 comm="syz.4.3015" path="socket:[66327]" dev="sockfs" ino=66327 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1043.853058][T11580] Bluetooth: hci5: command tx timeout [ 1043.934365][ T870] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1044.175721][T11580] Bluetooth: hci3: command 0x0406 tx timeout [ 1044.244312][T11580] Bluetooth: hci4: command 0x0406 tx timeout [ 1044.324377][T11580] Bluetooth: hci0: command 0x0405 tx timeout [ 1044.543085][T17876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1044.624804][ T9] usb 2-1: USB disconnect, device number 42 [ 1044.713812][T17876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1044.736959][T17876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1044.756955][T17876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1044.855316][ T870] usb 3-1: Using ep0 maxpacket: 16 [ 1044.867973][ T870] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1044.886538][ T870] usb 3-1: config 0 has no interface number 0 [ 1044.895056][ T870] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1044.898124][T11580] Bluetooth: hci1: command 0x0406 tx timeout [ 1044.905962][ T870] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1044.916402][T17876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.969938][T17876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.985554][T15312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.992617][T15312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.210921][ T870] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1045.220117][ T870] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1045.228202][ T870] usb 3-1: Product: syz [ 1045.232800][ T870] usb 3-1: SerialNumber: syz [ 1045.246603][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.253742][T15312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.263054][ T870] usb 3-1: config 0 descriptor?? [ 1045.280544][ T870] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1045.289220][ T870] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input88 [ 1045.377464][T17985] net_ratelimit: 40 callbacks suppressed [ 1045.377481][T17985] netlink: zone id is out of range [ 1045.424353][T17985] netlink: zone id is out of range [ 1045.530484][T17985] netlink: zone id is out of range [ 1045.600711][T17985] netlink: zone id is out of range [ 1045.657429][T17985] netlink: zone id is out of range [ 1045.685658][T17985] netlink: zone id is out of range [ 1045.716429][T17985] netlink: zone id is out of range [ 1045.732398][T17876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.735997][T17985] netlink: zone id is out of range [ 1045.775110][T17985] netlink: zone id is out of range [ 1045.799411][T17985] netlink: zone id is out of range [ 1045.907336][T17876] veth0_vlan: entered promiscuous mode [ 1045.924759][T11580] Bluetooth: hci5: command tx timeout [ 1045.949403][T17876] veth1_vlan: entered promiscuous mode [ 1045.962417][ T30] audit: type=1326 audit(1759953386.043:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1045.990550][ T30] audit: type=1326 audit(1759953386.043:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.014179][ T30] audit: type=1326 audit(1759953386.043:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.037750][ T30] audit: type=1326 audit(1759953386.043:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.072471][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1046.080377][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1046.087689][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1046.094743][T13713] usb 3-1: USB disconnect, device number 45 [ 1046.100823][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1046.100835][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1046.140567][T13713] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1046.166614][T17876] veth0_macvtap: entered promiscuous mode [ 1046.178895][ T30] audit: type=1326 audit(1759953386.043:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.240044][T18000] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20003 [ 1046.247892][T11580] Bluetooth: hci3: command 0x0406 tx timeout [ 1046.291171][T17876] veth1_macvtap: entered promiscuous mode [ 1046.297954][ T30] audit: type=1326 audit(1759953386.043:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.337959][T11580] Bluetooth: hci4: command 0x0406 tx timeout [ 1046.349322][ T30] audit: type=1326 audit(1759953386.043:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.374849][ T30] audit: type=1326 audit(1759953386.043:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.398841][ T30] audit: type=1326 audit(1759953386.043:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.433750][ T30] audit: type=1326 audit(1759953386.043:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.459888][ T30] audit: type=1326 audit(1759953386.043:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.493761][ T30] audit: type=1326 audit(1759953386.043:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.531834][T17876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.541726][T17876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.552692][ T30] audit: type=1326 audit(1759953386.043:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.609772][T15311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.613851][ T30] audit: type=1326 audit(1759953386.043:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdad8eec9 code=0x7ffc0000 [ 1046.709487][T15311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.778393][T15311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.788154][T15311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.971454][T11580] Bluetooth: hci1: command 0x0406 tx timeout [ 1047.068148][T12626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.077418][T12626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.127668][T15312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.137149][T15312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.850230][T15134] vivid-004: reconnect [ 1048.016746][T11580] Bluetooth: hci5: command tx timeout [ 1048.483558][T18027] vxcan1: tx address claim with different name [ 1048.888481][T15311] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.901887][ T978] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1048.927484][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1048.947113][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1048.958981][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1048.967940][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1048.977540][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1049.054910][ T978] usb 1-1: device descriptor read/64, error -71 [ 1049.090494][T18038] lo speed is unknown, defaulting to 1000 [ 1049.324355][ T978] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1049.564324][ T978] usb 1-1: device descriptor read/64, error -71 [ 1049.582384][T15311] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.675836][ T978] usb usb1-port1: attempt power cycle [ 1049.760148][T15311] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.898646][T15311] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.947327][T18038] chnl_net:caif_netlink_parms(): no params data found [ 1050.038638][ T978] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1050.084838][ T978] usb 1-1: device descriptor read/8, error -71 [ 1050.239465][T18038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.247000][T18038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.266433][T18038] bridge_slave_0: entered allmulticast mode [ 1050.273854][T18038] bridge_slave_0: entered promiscuous mode [ 1050.436610][ T978] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1050.568267][ T978] usb 1-1: device descriptor read/8, error -71 [ 1050.728898][ T978] usb usb1-port1: unable to enumerate USB device [ 1050.841795][T18038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.849177][T18038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.857026][T18038] bridge_slave_1: entered allmulticast mode [ 1050.897791][T18038] bridge_slave_1: entered promiscuous mode [ 1051.049148][T11580] Bluetooth: hci1: command tx timeout [ 1051.424181][T18038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.000996][T13713] IPVS: starting estimator thread 0... [ 1052.013310][T18094] net_ratelimit: 40 callbacks suppressed [ 1052.013322][T18094] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 1052.116981][T18096] IPVS: using max 44 ests per chain, 105600 per kthread [ 1052.293109][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1052.293127][ T30] audit: type=1400 audit(1759953392.353:1203): avc: denied { name_bind } for pid=18083 comm="syz.0.3051" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1052.905679][T15311] bridge0 (unregistering): left allmulticast mode [ 1053.132061][T11580] Bluetooth: hci1: command tx timeout [ 1053.254654][T18105] trusted_key: encrypted_key: insufficient parameters specified [ 1053.676342][T15311] bond0 (unregistering): Released all slaves [ 1053.705307][T18038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.873781][T18038] team0: Port device team_slave_0 added [ 1053.937774][T18038] team0: Port device team_slave_1 added [ 1054.008041][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.221376][T18038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.232745][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.407610][T18038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.452587][T18038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.486421][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.705895][T18038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.919007][T18038] hsr_slave_0: entered promiscuous mode [ 1054.932401][T18038] hsr_slave_1: entered promiscuous mode [ 1055.034869][T18038] debugfs: 'hsr0' already exists in 'hsr' [ 1055.124289][T18038] Cannot create hsr debugfs directory [ 1055.204463][T11580] Bluetooth: hci1: command tx timeout [ 1055.278261][T15311] hsr_slave_0: left promiscuous mode [ 1055.307571][T15311] hsr_slave_1: left promiscuous mode [ 1055.333467][T15311] veth1_macvtap: left promiscuous mode [ 1055.354346][T15311] veth0_macvtap: left promiscuous mode [ 1055.360024][T15311] veth1_vlan: left promiscuous mode [ 1055.384362][T15311] veth0_vlan: left promiscuous mode [ 1056.349074][ T30] audit: type=1400 audit(1759953396.433:1204): avc: denied { listen } for pid=18176 comm="syz.1.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1056.746829][ T30] audit: type=1400 audit(1759953396.833:1205): avc: denied { watch } for pid=18184 comm="syz.3.3077" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1057.196049][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3072'. [ 1057.278415][ T30] audit: type=1400 audit(1759953397.333:1206): avc: denied { ioctl } for pid=18186 comm="syz.2.3072" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1057.353117][T11580] Bluetooth: hci1: command tx timeout [ 1058.275500][T18209] hub 1-0:1.0: USB hub found [ 1058.280834][T18209] hub 1-0:1.0: 1 port detected [ 1058.762112][T18221] netlink: 'syz.3.3083': attribute type 10 has an invalid length. [ 1058.771530][T18221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.778950][T18221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.802219][T18221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.809312][T18221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.816788][T18221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.823893][T18221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.014122][T18221] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1059.616290][T18038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1059.808554][ T30] audit: type=1400 audit(1759953399.713:1207): avc: denied { read append } for pid=18222 comm="syz.2.3087" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1059.892896][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 1059.914840][ T30] audit: type=1400 audit(1759953399.713:1208): avc: denied { ioctl } for pid=18222 comm="syz.2.3087" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1059.945418][T18038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1059.998408][T18038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1060.027663][T18038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1060.403308][T18253] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3093' sets config #0 [ 1060.462451][T18253] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3093' sets config #1 [ 1060.590134][T18038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.683617][T18038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.722274][T15313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.729450][T15313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.808885][T15313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.816046][T15313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.025287][T18038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1061.061621][T18038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.624545][T18265] lo speed is unknown, defaulting to 1000 [ 1061.721000][T18038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.812862][T18265] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.819014][ T30] audit: type=1400 audit(1759953401.893:1209): avc: denied { map } for pid=18264 comm="syz.0.3097" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1061.819038][T18265] binder: 18264:18265 ioctl 4018620d 200000000040 returned -16 [ 1062.047010][T18265] binder: 18264:18265 ioctl c0306201 200000000240 returned -11 [ 1062.464601][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 1062.477328][T18292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3103'. [ 1062.689390][ T30] audit: type=1400 audit(1759953402.583:1210): avc: denied { read } for pid=18284 comm="syz.1.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1062.895591][T18038] veth0_vlan: entered promiscuous mode [ 1063.051652][T18038] veth1_vlan: entered promiscuous mode [ 1063.417479][T18038] veth0_macvtap: entered promiscuous mode [ 1063.457169][T18038] veth1_macvtap: entered promiscuous mode [ 1063.464073][T13713] IPVS: starting estimator thread 0... [ 1063.490155][T18305] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 1063.564595][T18306] IPVS: using max 43 ests per chain, 103200 per kthread [ 1063.566928][T18038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.656314][T18038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.683622][T15309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.722313][T15309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.773626][T15309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.804048][T15309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.831668][T18310] tipc: Started in network mode [ 1063.836650][T18310] tipc: Node identity 3ef2419d41dc, cluster identity 4711 [ 1063.857624][T18310] tipc: Enabled bearer , priority 0 [ 1063.889975][T18314] syzkaller0: entered promiscuous mode [ 1063.909284][T18314] syzkaller0: entered allmulticast mode [ 1064.065382][T18309] tipc: Resetting bearer [ 1064.082091][T18309] tipc: Disabling bearer [ 1064.875561][T15313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.883527][T15313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.426458][T15316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.456894][T15316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.466853][ T24] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1066.684415][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1066.704362][ T24] usb 5-1: config 0 has no interface number 0 [ 1066.710734][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1066.792211][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.819316][ T24] usb 5-1: config 0 descriptor?? [ 1066.846699][ T24] usb 5-1: selecting invalid altsetting 1 [ 1066.852651][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 1066.884826][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1066.934905][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1066.944947][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1066.953293][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1066.963135][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1066.971207][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1067.033899][ T24] DVB: Unable to find symbol cx22700_attach() [ 1067.063176][T18370] lo speed is unknown, defaulting to 1000 [ 1067.106035][T18375] usb usb2: usbfs: process 18375 (syz.1.3129) did not claim interface 0 before use [ 1067.135329][ T30] audit: type=1326 audit(1759953407.223:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18373 comm="syz.1.3129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6d4f8eec9 code=0x0 [ 1067.158281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1067.181046][ T24] DVB: Unable to find symbol tda10046_attach() [ 1067.194291][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1067.204035][ T24] usb 5-1: USB disconnect, device number 55 [ 1067.290520][T18378] syz_tun: entered allmulticast mode [ 1067.346654][T18377] syz_tun: left allmulticast mode [ 1067.383464][T18370] chnl_net:caif_netlink_parms(): no params data found [ 1067.497556][T18370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.505403][T18370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.512712][T18370] bridge_slave_0: entered allmulticast mode [ 1067.520226][T18370] bridge_slave_0: entered promiscuous mode [ 1067.535982][T18370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.543215][T18370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.550495][T18370] bridge_slave_1: entered allmulticast mode [ 1067.558280][T18370] bridge_slave_1: entered promiscuous mode [ 1067.592063][T18370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.604169][T18370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.788136][T18370] team0: Port device team_slave_0 added [ 1067.820614][T18370] team0: Port device team_slave_1 added [ 1067.960048][T18370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.968697][T18370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.122007][T18370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.190137][T18370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.215590][T18370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.310329][T18370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.403389][T18416] netlink: zone id is out of range [ 1068.408708][T18416] netlink: zone id is out of range [ 1068.544389][T18416] netlink: zone id is out of range [ 1068.549537][T18416] netlink: zone id is out of range [ 1068.620071][T18416] netlink: set zone limit has 4 unknown bytes [ 1069.044387][ T5132] Bluetooth: hci2: command tx timeout [ 1069.070751][T18370] hsr_slave_0: entered promiscuous mode [ 1069.105958][T18370] hsr_slave_1: entered promiscuous mode [ 1069.112092][T18370] debugfs: 'hsr0' already exists in 'hsr' [ 1069.154935][T18370] Cannot create hsr debugfs directory [ 1069.514465][T18438] netlink: 9896 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1069.757807][T18370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.314558][T18370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.580503][T18370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.809122][T18370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.850252][T18465] bridge: RTM_NEWNEIGH with invalid ether address [ 1070.886450][T18468] bridge: RTM_NEWNEIGH with invalid ether address [ 1071.129030][ T5132] Bluetooth: hci2: command tx timeout [ 1071.137590][T18370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1071.190141][T18370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1071.238602][T18475] lo speed is unknown, defaulting to 1000 [ 1071.306565][T18370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1071.325342][T18480] IPv6: addrconf: prefix option has invalid lifetime [ 1071.376576][T18370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1071.577881][T18370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.693380][T18370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.713736][T15309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.720822][T15309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.770688][T15309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.777879][T15309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.835360][ T5882] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1071.984345][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 1072.273795][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.289883][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.333107][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1072.344391][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.368171][ T5882] usb 5-1: config 0 descriptor?? [ 1072.469505][ T5882] hub 5-1:0.0: USB hub found [ 1072.676524][ T5882] hub 5-1:0.0: 1 port detected [ 1072.751612][T18370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.797940][T18518] netlink: zone id is out of range [ 1072.803123][T18518] netlink: zone id is out of range [ 1072.808955][T18518] netlink: set zone limit has 4 unknown bytes [ 1072.823060][T18370] veth0_vlan: entered promiscuous mode [ 1072.852591][T18370] veth1_vlan: entered promiscuous mode [ 1072.878746][ T5882] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1072.904315][ T5882] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1072.940760][T18370] veth0_macvtap: entered promiscuous mode [ 1072.949424][ T5882] usbhid 5-1:0.0: can't add hid device: -71 [ 1072.955436][ T5882] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1072.975443][T18370] veth1_macvtap: entered promiscuous mode [ 1072.985704][ T5882] usb 5-1: USB disconnect, device number 56 [ 1073.002973][T18370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.028705][T18370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.048301][T15316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.063433][T15316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.094979][T15316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.133167][T15316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.294776][ T5132] Bluetooth: hci2: command tx timeout [ 1073.486706][T15313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.514401][T15313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.601794][T15316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.617282][T15316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.720926][T18538] syz_tun: entered allmulticast mode [ 1073.734900][T18536] syz_tun: left allmulticast mode [ 1074.517617][T18551] netlink: zone id is out of range [ 1074.522911][T18551] netlink: zone id is out of range [ 1074.528181][T18551] netlink: set zone limit has 4 unknown bytes [ 1075.504583][ T5132] Bluetooth: hci2: command tx timeout [ 1075.607583][T15523] vivid-000: reconnect [ 1075.713274][T18541] lo speed is unknown, defaulting to 1000 [ 1076.013150][T11580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1076.022445][T11580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1076.031624][T11580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1076.067054][T11580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1076.144399][T11580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1076.624932][T18579] syz_tun: entered allmulticast mode [ 1076.631209][T18578] syz_tun: left allmulticast mode [ 1076.647997][T18570] lo speed is unknown, defaulting to 1000 [ 1076.706146][T18580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1076.714654][T18580] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1076.721519][T18580] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1076.756454][T18580] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1076.819367][T18580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1076.826725][T18580] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1076.889706][T18580] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1076.920123][T18580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1076.927971][T18580] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1076.942970][T18580] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1076.966827][T18580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1076.976166][T18580] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1076.991424][T18580] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1077.201089][ T30] audit: type=1326 audit(1759953417.263:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18590 comm="syz.3.3200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce7e18eec9 code=0x0 [ 1077.656155][T18570] chnl_net:caif_netlink_parms(): no params data found [ 1077.820986][T18610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1077.965229][T18570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.003814][T18570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.022975][T18570] bridge_slave_0: entered allmulticast mode [ 1078.364943][T18570] bridge_slave_0: entered promiscuous mode [ 1078.440610][T18570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.464456][T18570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.474012][T18570] bridge_slave_1: entered allmulticast mode [ 1078.481719][T18570] bridge_slave_1: entered promiscuous mode [ 1078.532246][T18570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.546305][T18570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.610613][T18570] team0: Port device team_slave_0 added [ 1078.623480][T18570] team0: Port device team_slave_1 added [ 1078.687256][T18631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3211'. [ 1078.741312][T18631] bond1: option ad_select: invalid value (4) [ 1078.759480][T18631] bond1 (unregistering): Released all slaves [ 1078.807080][T11580] Bluetooth: hci0: command 0x0405 tx timeout [ 1078.813160][ T5132] Bluetooth: hci5: command 0x0c1a tx timeout [ 1078.885033][T11580] Bluetooth: hci1: command 0x0c1a tx timeout [ 1078.898887][T18570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.929728][T18570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.965574][T11580] Bluetooth: hci2: command 0x0c1a tx timeout [ 1078.986160][T18570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.998990][T18570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.008336][T18570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.034485][T18570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.046870][T11580] Bluetooth: hci3: command 0x041b tx timeout [ 1079.053699][ T24] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1079.499422][T18570] hsr_slave_0: entered promiscuous mode [ 1079.515037][T18570] hsr_slave_1: entered promiscuous mode [ 1079.521280][T18570] debugfs: 'hsr0' already exists in 'hsr' [ 1079.534292][T18570] Cannot create hsr debugfs directory [ 1079.760964][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1079.781989][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 1080.580135][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.594350][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1080.614817][ T24] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1080.631069][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1080.640479][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.649094][ T24] usb 5-1: Product: syz [ 1080.653334][ T24] usb 5-1: Manufacturer: syz [ 1080.663485][ T24] usb 5-1: SerialNumber: syz [ 1080.680966][T18570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.697527][T18647] kvm: pic: non byte read [ 1080.702509][T18647] kvm: pic: level sensitive irq not supported [ 1080.702625][T18647] kvm: pic: non byte read [ 1080.715312][T18647] kvm: pic: level sensitive irq not supported [ 1080.715370][T18647] kvm: pic: non byte read [ 1080.732093][T18647] kvm: pic: level sensitive irq not supported [ 1080.732167][T18647] kvm: pic: non byte read [ 1080.806543][T18570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.817914][T18647] kvm: pic: level sensitive irq not supported [ 1080.818025][T18647] kvm: pic: non byte read [ 1080.860564][T18647] kvm: pic: level sensitive irq not supported [ 1080.860626][T18647] kvm: pic: non byte read [ 1080.874535][T18647] kvm: pic: level sensitive irq not supported [ 1080.874576][T18647] kvm: pic: non byte read [ 1080.893189][T18647] kvm: pic: level sensitive irq not supported [ 1080.893736][T18647] kvm: pic: non byte read [ 1080.895136][T11580] Bluetooth: hci5: command 0x0c1a tx timeout [ 1080.945981][T18570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.961087][T18647] kvm: pic: level sensitive irq not supported [ 1080.961149][T18647] kvm: pic: non byte read [ 1080.971718][T11580] Bluetooth: hci1: command 0x0c1a tx timeout [ 1081.064338][T11580] Bluetooth: hci2: command 0x0c1a tx timeout [ 1081.071773][T18570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.124832][T11580] Bluetooth: hci3: command 0x041b tx timeout [ 1081.450223][T18570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.500181][T18570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.534722][T18570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1081.556976][T18570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1082.102053][T18570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.124713][T18570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.134797][ T870] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 1082.147269][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1082.159380][T15316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.166473][T15316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.188979][T15316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.196104][T15316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.210964][ T24] usb 5-1: USB disconnect, device number 57 [ 1082.228175][T18570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1082.264242][T18570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.274639][ T870] usb 1-1: device descriptor read/64, error -71 [ 1082.528087][ T870] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 1082.588615][T18681] lo speed is unknown, defaulting to 1000 [ 1082.607103][T18570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.674419][ T870] usb 1-1: device descriptor read/64, error -71 [ 1082.688710][T18570] veth0_vlan: entered promiscuous mode [ 1082.742414][T18687] netlink: 'syz.4.3223': attribute type 1 has an invalid length. [ 1082.795105][ T870] usb usb1-port1: attempt power cycle [ 1082.964299][T11580] Bluetooth: hci5: command 0x0c1a tx timeout [ 1082.988314][T18570] veth1_vlan: entered promiscuous mode [ 1083.018595][T18570] veth0_macvtap: entered promiscuous mode [ 1083.080628][T11580] Bluetooth: hci1: command 0x0c1a tx timeout [ 1083.124564][T11580] Bluetooth: hci2: command 0x0c1a tx timeout [ 1083.174095][T18570] veth1_macvtap: entered promiscuous mode [ 1083.184622][ T870] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 1083.214338][T11580] Bluetooth: hci3: command 0x041b tx timeout [ 1083.222165][ T870] usb 1-1: device descriptor read/8, error -71 [ 1083.406153][T18570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.421905][T18570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.435137][T15313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.446637][T15313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.475206][ T870] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 1083.522004][T15313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.539264][T15313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.556607][ T870] usb 1-1: device descriptor read/8, error -71 [ 1083.724614][ T870] usb usb1-port1: unable to enumerate USB device [ 1083.742358][T15311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.778396][T15311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.819672][T15316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.828195][T15316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.264203][T18710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1084.441055][ T30] audit: type=1400 audit(1759953424.493:1213): avc: denied { map } for pid=18703 comm="syz.2.3229" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1084.588955][ T30] audit: type=1400 audit(1759953424.503:1214): avc: denied { execute } for pid=18703 comm="syz.2.3229" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1085.284528][T11580] Bluetooth: hci3: command 0x041b tx timeout [ 1085.916928][ T30] audit: type=1400 audit(1759953425.963:1215): avc: denied { append } for pid=18722 comm="syz.2.3232" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1085.948074][T18733] input: syz0 as /devices/virtual/input/input89 [ 1086.399501][ T30] audit: type=1400 audit(1759953426.483:1216): avc: denied { listen } for pid=18737 comm="syz.1.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1086.786823][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 1087.220124][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1087.294013][ T30] audit: type=1400 audit(1759953427.373:1217): avc: denied { ioctl } for pid=18746 comm="syz.2.3238" path="socket:[73765]" dev="sockfs" ino=73765 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1087.365036][T11580] Bluetooth: hci3: command 0x041b tx timeout [ 1087.412973][T18753] input: syz0 as /devices/virtual/input/input90 [ 1087.467763][T18767] netlink: zone id is out of range [ 1087.472922][T18767] netlink: zone id is out of range [ 1087.478733][T18767] netlink: set zone limit has 4 unknown bytes [ 1087.872123][T18762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1088.448717][T18790] netlink: zone id is out of range [ 1088.453884][T18790] netlink: zone id is out of range [ 1088.469141][T18790] netlink: zone id is out of range [ 1088.490068][T18790] netlink: zone id is out of range [ 1088.504307][T18790] netlink: zone id is out of range [ 1088.732675][T18801] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 1089.464510][T11580] Bluetooth: hci3: command 0x041b tx timeout [ 1089.513761][ T30] audit: type=1400 audit(1759953429.563:1218): avc: denied { name_connect } for pid=18807 comm="syz.3.3258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1090.279902][T18824] tipc: Started in network mode [ 1090.299604][T18824] tipc: Node identity 96438b23f962, cluster identity 4711 [ 1090.325004][T18824] tipc: Enabled bearer , priority 0 [ 1090.354788][T18826] syzkaller0: entered promiscuous mode [ 1090.381268][T18826] syzkaller0: entered allmulticast mode [ 1090.435234][T18828] tipc: Enabled bearer , priority 0 [ 1090.517880][T18824] tipc: Resetting bearer [ 1090.526012][T18828] tipc: Resetting bearer [ 1090.552239][T18827] tipc: Disabling bearer [ 1090.559430][T18833] vxcan1: tx address claim with dest, not broadcast [ 1090.599256][T18823] tipc: Resetting bearer [ 1090.692990][T18823] tipc: Disabling bearer [ 1091.027476][ T30] audit: type=1400 audit(1759953431.113:1219): avc: denied { write } for pid=18852 comm="syz.1.3271" path="socket:[73403]" dev="sockfs" ino=73403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1091.592355][T11580] Bluetooth: hci3: command 0x041b tx timeout [ 1092.839584][T18888] netlink: 'syz.0.3283': attribute type 4 has an invalid length. [ 1093.312992][T18894] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1093.394409][T18894] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1093.410405][T18894] veth0_to_bridge: entered allmulticast mode [ 1093.430444][T18894] veth0_to_bridge: entered promiscuous mode [ 1093.457100][T18894] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.568834][T18894] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1093.576224][T18894] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1093.748617][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1094.364291][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1094.402191][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1094.422121][ T9] usb 4-1: config 0 has no interface number 0 [ 1094.447210][ T9] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1094.468463][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1094.483952][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1094.498953][ T9] usb 4-1: Product: syz [ 1094.541245][ T9] usb 4-1: SerialNumber: syz [ 1094.559623][ T9] usb 4-1: config 0 descriptor?? [ 1094.571485][ T9] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1094.753232][T18917] syzkaller0: entered promiscuous mode [ 1094.760295][T18917] syzkaller0: entered allmulticast mode [ 1095.128412][T18925] netlink: 'syz.1.3295': attribute type 1 has an invalid length. [ 1095.325886][ T24] usb 4-1: USB disconnect, device number 45 [ 1095.491808][T18934] vxcan1: tx address claim with dest, not broadcast [ 1095.585567][T18928] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1095.788186][T18928] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1095.883191][T18928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1095.903459][T18928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1096.064818][T18928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1096.687616][T18954] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3303'. [ 1097.367374][T11580] Bluetooth: hci0: command 0x0405 tx timeout [ 1097.534319][ T870] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1097.684409][ T870] usb 4-1: Using ep0 maxpacket: 16 [ 1097.725503][ T870] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1097.734337][ T870] usb 4-1: config 0 has no interface number 0 [ 1097.740546][ T870] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1097.827672][ T870] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1097.836911][ T870] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1097.847280][ T870] usb 4-1: Product: syz [ 1097.851929][ T870] usb 4-1: SerialNumber: syz [ 1097.854388][T11580] Bluetooth: hci5: command 0x0c1a tx timeout [ 1097.859282][ T870] usb 4-1: config 0 descriptor?? [ 1097.933637][ T5132] Bluetooth: hci2: command 0x0c1a tx timeout [ 1097.933650][T15814] Bluetooth: hci1: command 0x0c1a tx timeout [ 1098.035143][ T870] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1098.084446][T15814] Bluetooth: hci3: command 0x041b tx timeout [ 1098.084768][T18978] syz_tun: entered allmulticast mode [ 1098.099949][T18976] syz_tun: left allmulticast mode [ 1098.291416][T18986] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41019 sclass=netlink_xfrm_socket pid=18986 comm=syz.1.3316 [ 1098.348374][T18981] syzkaller0: entered promiscuous mode [ 1098.353919][T18981] syzkaller0: entered allmulticast mode [ 1098.386052][ T24] usb 4-1: USB disconnect, device number 46 [ 1098.828858][ T30] audit: type=1400 audit(1759953438.913:1220): avc: denied { bind } for pid=18984 comm="syz.1.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1098.891527][ T30] audit: type=1400 audit(1759953438.973:1221): avc: denied { accept } for pid=18984 comm="syz.1.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1098.931800][ T30] audit: type=1400 audit(1759953439.003:1222): avc: denied { write } for pid=18984 comm="syz.1.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1098.977591][T19000] net_ratelimit: 45 callbacks suppressed [ 1098.977603][T19000] netlink: zone id is out of range [ 1098.988524][T19000] netlink: zone id is out of range [ 1098.999353][ T30] audit: type=1400 audit(1759953439.013:1223): avc: denied { read } for pid=18984 comm="syz.1.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1099.541353][T19019] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1099.547894][T19019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1099.557344][T19019] vhci_hcd vhci_hcd.0: Device attached [ 1099.894294][ T870] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1099.902868][ T24] usb 38-1: SetAddress Request (2) to port 0 [ 1099.910174][ T24] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1100.064272][ T870] usb 4-1: Using ep0 maxpacket: 16 [ 1100.071857][T19020] vhci_hcd: connection reset by peer [ 1100.082868][ T6158] vhci_hcd: stop threads [ 1100.087848][ T6158] vhci_hcd: release socket [ 1100.092379][ T6158] vhci_hcd: disconnect device [ 1100.100355][ T870] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1100.109006][ T870] usb 4-1: config 0 has no interface number 0 [ 1100.116151][ T870] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1100.130333][ T870] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1100.139952][ T870] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1100.148220][ T870] usb 4-1: Product: syz [ 1100.152538][ T870] usb 4-1: SerialNumber: syz [ 1100.165021][ T870] usb 4-1: config 0 descriptor?? [ 1100.166819][T15814] Bluetooth: hci3: command 0x041b tx timeout [ 1100.185533][ T870] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1100.532171][ T5882] usb 4-1: USB disconnect, device number 47 [ 1100.778398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.790742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.803061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.815406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.827703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.839843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.852130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.864507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.342057][T11580] Bluetooth: hci3: command 0x041b tx timeout [ 1103.984219][ C0] net_ratelimit: 17382 callbacks suppressed [ 1103.984238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.002237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.014350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.026403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.038525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.050643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.062768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.074934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.086966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.099048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.994301][ C0] net_ratelimit: 33998 callbacks suppressed [ 1108.994314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.012237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.024321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.036363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.048473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.060615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.072712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.084751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.096910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.109223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.186801][ T24] usb 38-1: device descriptor read/8, error -110 [ 1110.244231][ C0] sched: DL replenish lagged too much [ 1111.875044][ T24] usb usb38-port1: attempt power cycle [ 1112.706556][T19053] syzkaller0: entered promiscuous mode [ 1112.712044][T19053] syzkaller0: entered allmulticast mode [ 1112.810625][ T24] usb usb38-port1: unable to enumerate USB device [ 1112.822621][ T30] audit: type=1400 audit(1759953452.903:1224): avc: denied { getopt } for pid=19054 comm="syz.0.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1114.004404][ C0] net_ratelimit: 27072 callbacks suppressed [ 1114.004417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.022427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.034516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.046531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.058538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.070569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.082674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.094793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.106928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.118952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.602532][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.821810][ T30] audit: type=1400 audit(1759953458.903:1225): avc: denied { read write } for pid=19060 comm="syz.4.3340" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1119.014310][ C0] net_ratelimit: 30544 callbacks suppressed [ 1119.014323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.032255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.044366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.056415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.068523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.080632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.092727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.104756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.116839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.128913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.920065][ T30] audit: type=1400 audit(1759953458.903:1226): avc: denied { open } for pid=19060 comm="syz.4.3340" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1124.024288][ C0] net_ratelimit: 31563 callbacks suppressed [ 1124.024307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.042542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.054914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.067290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.079537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.092201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.104505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.116654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.129274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.141534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.458461][ T30] audit: type=1400 audit(1759953464.543:1227): avc: denied { bind } for pid=19078 comm="syz.3.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1124.519128][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1124.528648][T19079] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 1124.561301][T19079] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3346'. [ 1124.674465][ T5882] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1124.714622][ T24] usb 2-1: device descriptor read/64, error -71 [ 1124.847524][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 1124.865532][ T5882] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1124.892378][ T5882] usb 5-1: config 0 has no interface number 0 [ 1124.918416][ T5882] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1124.943652][ T5882] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1124.962188][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1124.971091][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1124.988896][ T5882] usb 5-1: Product: syz [ 1124.994290][ T5882] usb 5-1: SerialNumber: syz [ 1125.009716][ T5882] usb 5-1: config 0 descriptor?? [ 1125.027263][ T5882] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1125.104296][ T24] usb 2-1: device descriptor read/64, error -71 [ 1125.232344][ T24] usb usb2-port1: attempt power cycle [ 1125.510489][T19091] netlink: 'syz.3.3349': attribute type 1 has an invalid length. [ 1125.543349][T19091] netlink: 'syz.3.3349': attribute type 2 has an invalid length. [ 1125.555675][T19093] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1125.634288][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1125.655492][ T24] usb 2-1: device descriptor read/8, error -71 [ 1126.674642][ T5882] usb 5-1: USB disconnect, device number 58 [ 1126.938554][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1127.010542][ T24] usb 2-1: device descriptor read/8, error -71 [ 1127.278440][ T24] usb usb2-port1: unable to enumerate USB device [ 1129.034326][ C0] net_ratelimit: 21124 callbacks suppressed [ 1129.034339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.052520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.064686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.076797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.088847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.100897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.112963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.125070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.137188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.149279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.523358][T19107] syzkaller0: entered promiscuous mode [ 1129.571273][T19107] syzkaller0: entered allmulticast mode [ 1130.179370][T19115] netlink: 'syz.2.3357': attribute type 1 has an invalid length. [ 1130.205731][T19115] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1132.233781][ T5816] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1132.424473][T19134] 9pnet_fd: Insufficient options for proto=fd [ 1132.894299][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 1133.029707][T19134] lo speed is unknown, defaulting to 1000 [ 1133.110420][T19134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3364'. [ 1133.139545][T19134] netlink: 'syz.2.3364': attribute type 16 has an invalid length. [ 1133.147396][T19134] netlink: 'syz.2.3364': attribute type 17 has an invalid length. [ 1133.155203][T19134] netlink: 'syz.2.3364': attribute type 27 has an invalid length. [ 1134.044458][ C0] net_ratelimit: 21118 callbacks suppressed [ 1134.044478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.062633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.074848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.087053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.101194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.113579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.125905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.138172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.150415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.162650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1137.478265][ T5816] usb 2-1: unable to read config index 0 descriptor/all [ 1137.521435][ T5816] usb 2-1: can't read configurations, error -71 [ 1139.054302][ C0] net_ratelimit: 22087 callbacks suppressed [ 1139.054316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.072247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.084344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.096371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.108380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.120412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.132506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.144596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.156643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.169936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.064478][ C0] net_ratelimit: 22634 callbacks suppressed [ 1144.064498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.082643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.094884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.107131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.119331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.131533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.143769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.156047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.168293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.180740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.074336][ C0] net_ratelimit: 19109 callbacks suppressed [ 1149.074356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.092527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.104770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.116970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.129243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.141873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.154125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1149.166415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.178684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.190935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.084458][ C0] net_ratelimit: 17586 callbacks suppressed [ 1154.084479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.102604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.114793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.127040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.139325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.151608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.163838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1154.176087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.188326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.200528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.094410][ C0] net_ratelimit: 21438 callbacks suppressed [ 1159.094430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.112598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1159.124899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.137206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.149516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.161783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1159.174076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.186326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.198536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.210744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.104368][ C0] net_ratelimit: 18435 callbacks suppressed [ 1164.104389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.122574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.134851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.147089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.159145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.171338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.183627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1164.195952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.208283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.220591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.114183][ C0] net_ratelimit: 19330 callbacks suppressed [ 1169.114203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1169.132367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.144626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.156851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.169053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.181246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.193488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1169.205779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.217938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.230202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.124380][ C0] net_ratelimit: 23089 callbacks suppressed [ 1174.124400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.142612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1174.154931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.167230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.179479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.191718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.203966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.216252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1174.228595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.240919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.134363][ C0] net_ratelimit: 22636 callbacks suppressed [ 1179.134383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.152529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1179.164833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.177130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.189433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.201667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1179.213919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.226151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.238365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.250445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.144334][ C0] net_ratelimit: 23434 callbacks suppressed [ 1184.144353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.162482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1184.174718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.186965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.199145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.211343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.223529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.236305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1184.248434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.260707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.154281][ C0] net_ratelimit: 23317 callbacks suppressed [ 1189.154300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1189.172497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.184778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.197123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.209357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1189.221594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.233869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.246066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.258260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.270298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.164314][ C0] net_ratelimit: 22837 callbacks suppressed [ 1194.164335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.182460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.194681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.206844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1194.219137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.231466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.243766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.256040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.268318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.280566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.174311][ C0] net_ratelimit: 23101 callbacks suppressed [ 1199.174331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.192461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.204717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1199.216861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.229138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.241288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.253528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1199.265779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.278025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.290221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.184184][ C0] net_ratelimit: 23319 callbacks suppressed [ 1204.184204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.202312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.214536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.226812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1204.238987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.251320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.263478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.275732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1204.288000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.300272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.194188][ C0] net_ratelimit: 23276 callbacks suppressed [ 1209.194207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.212377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1209.224629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.236744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.248948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.261028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.273231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.285480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1209.297789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.310084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.204299][ C0] net_ratelimit: 20612 callbacks suppressed [ 1214.204320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.222473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.234719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.246945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.258986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.271223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1214.283355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.295620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.307904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.320150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1219.214322][ C0] net_ratelimit: 23043 callbacks suppressed [ 1219.214342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.232425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.244670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1219.256986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.269110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.281367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.293467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1219.305688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.317934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.330140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.224295][ C0] net_ratelimit: 23323 callbacks suppressed [ 1224.224314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.242496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.254785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.267029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.279268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.291362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.303538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.315721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.327934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.340176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1229.234364][ C0] net_ratelimit: 22720 callbacks suppressed [ 1229.234383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.252588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.264882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.277124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1229.289371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.301613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.313696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.325887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.338116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.350367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1233.463160][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1234.244465][ C0] net_ratelimit: 20324 callbacks suppressed [ 1234.244484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.262697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.274908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.287097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.299301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.311538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1234.323837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.336119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.348325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.360563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.254372][ C0] net_ratelimit: 22629 callbacks suppressed [ 1239.254392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.272704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.284969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.297187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.309402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.321635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.333920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1239.346249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.358396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.370688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1240.559447][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.264199][ C0] net_ratelimit: 19112 callbacks suppressed [ 1244.264218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.282314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.294510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.306703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.318941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1244.331233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.343509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.355791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.368027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1244.380256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1246.274115][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1246.281085][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24/1:b..l [ 1246.289313][ C0] rcu: (detected by 0, t=10502 jiffies, g=83781, q=1007 ncpus=2) [ 1246.297109][ C0] task:kworker/1:0 state:R running task stack:22328 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1246.311987][ C0] Workqueue: events send_dm_alert [ 1246.317041][ C0] Call Trace: [ 1246.320312][ C0] [ 1246.323240][ C0] __schedule+0x1190/0x5de0 [ 1246.327740][ C0] ? __crypto_memneq+0x203/0x430 [ 1246.332663][ C0] ? __pfx___schedule+0x10/0x10 [ 1246.337506][ C0] ? mark_held_locks+0x49/0x80 [ 1246.342278][ C0] preempt_schedule_irq+0x51/0x90 [ 1246.347306][ C0] irqentry_exit+0x36/0x90 [ 1246.351721][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1246.357694][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1246.362885][ C0] Code: bb 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 ce ea 0e 0f 82 74 02 00 00 8b 35 1a ff ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 ba 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 1246.382490][ C0] RSP: 0018:ffffc900001e75d8 EFLAGS: 00000206 [ 1246.388557][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c44a0 RCX: 000000000f4c78b9 [ 1246.396521][ C0] RDX: 0000000000000000 RSI: ffffffff8dadcb18 RDI: ffffffff8bf1cfc0 [ 1246.404484][ C0] RBP: 0000000000000002 R08: 8fea79f28cdf869f R09: 0000000000000000 [ 1246.412446][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1246.420408][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1246.428396][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1246.433604][ C0] unwind_next_frame+0xd1/0x20a0 [ 1246.438543][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1246.443658][ C0] ? arch_stack_walk+0x73/0x100 [ 1246.448514][ C0] __unwind_start+0x45f/0x7f0 [ 1246.453191][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1246.459345][ C0] arch_stack_walk+0x73/0x100 [ 1246.464021][ C0] ? arch_stack_walk+0x73/0x100 [ 1246.468871][ C0] stack_trace_save+0x8e/0xc0 [ 1246.473561][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1246.478938][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1246.483874][ C0] save_stack+0x160/0x1f0 [ 1246.488186][ C0] ? __pfx_save_stack+0x10/0x10 [ 1246.493049][ C0] ? page_ext_put+0x3e/0xd0 [ 1246.497557][ C0] __reset_page_owner+0x84/0x1a0 [ 1246.502502][ C0] __free_frozen_pages+0x7df/0x1160 [ 1246.507707][ C0] qlist_free_all+0x4d/0x120 [ 1246.512301][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 1246.517755][ C0] __kasan_kmalloc+0x8a/0xb0 [ 1246.522341][ C0] __kmalloc_node_track_caller_noprof+0x345/0x8a0 [ 1246.528747][ C0] ? __alloc_skb+0x166/0x380 [ 1246.533336][ C0] ? rcu_watching_snap_stopped_since+0xe1/0x110 [ 1246.539578][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 1246.544421][ C0] kmalloc_reserve+0xef/0x2c0 [ 1246.549097][ C0] __alloc_skb+0x166/0x380 [ 1246.553509][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1246.558468][ C0] reset_per_cpu_data+0x26/0x240 [ 1246.563407][ C0] send_dm_alert+0x1e/0xf0 [ 1246.567818][ C0] ? rcu_is_watching+0x12/0xc0 [ 1246.572583][ C0] process_one_work+0x9cf/0x1b70 [ 1246.577525][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1246.582900][ C0] ? assign_work+0x1a0/0x250 [ 1246.587485][ C0] worker_thread+0x6c8/0xf10 [ 1246.592080][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1246.597184][ C0] kthread+0x3c2/0x780 [ 1246.601245][ C0] ? __pfx_kthread+0x10/0x10 [ 1246.605830][ C0] ? rcu_is_watching+0x12/0xc0 [ 1246.610590][ C0] ? __pfx_kthread+0x10/0x10 [ 1246.615174][ C0] ret_from_fork+0x672/0x7d0 [ 1246.619763][ C0] ? __pfx_kthread+0x10/0x10 [ 1246.624354][ C0] ret_from_fork_asm+0x1a/0x30 [ 1246.629129][ C0] [ 1246.632143][ C0] rcu: rcu_preempt kthread starved for 664 jiffies! g83781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1246.643160][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1246.653129][ C0] rcu: RCU grace-period kthread stack dump: [ 1246.659004][ C0] task:rcu_preempt state:R running task stack:27976 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1246.672492][ C0] Call Trace: [ 1246.675764][ C0] [ 1246.678691][ C0] __schedule+0x1190/0x5de0 [ 1246.683202][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1246.688161][ C0] ? __pfx___schedule+0x10/0x10 [ 1246.693019][ C0] ? find_held_lock+0x2b/0x80 [ 1246.697694][ C0] ? schedule+0x2d7/0x3a0 [ 1246.702030][ C0] schedule+0xe7/0x3a0 [ 1246.706099][ C0] schedule_timeout+0x123/0x290 [ 1246.710955][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1246.716326][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1246.721614][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1246.727422][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1246.732887][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1246.737645][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1246.742923][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1246.748127][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1246.753056][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1246.757903][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1246.763714][ C0] rcu_gp_kthread+0x26d/0x380 [ 1246.768383][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1246.773580][ C0] ? rcu_is_watching+0x12/0xc0 [ 1246.778340][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1246.783542][ C0] ? __kthread_parkme+0x19e/0x250 [ 1246.788569][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1246.793762][ C0] kthread+0x3c2/0x780 [ 1246.797824][ C0] ? __pfx_kthread+0x10/0x10 [ 1246.802410][ C0] ? rcu_is_watching+0x12/0xc0 [ 1246.807171][ C0] ? __pfx_kthread+0x10/0x10 [ 1246.811753][ C0] ret_from_fork+0x672/0x7d0 [ 1246.816332][ C0] ? __pfx_kthread+0x10/0x10 [ 1246.820914][ C0] ret_from_fork_asm+0x1a/0x30 [ 1246.825695][ C0] [ 1246.828702][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1246.835008][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1246.840203][ C1] NMI backtrace for cpu 1 [ 1246.840215][ C1] CPU: 1 UID: 0 PID: 15314 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 1246.840232][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1246.840242][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 1246.840262][ C1] RIP: 0010:unwind_next_frame+0x163a/0x20a0 [ 1246.840280][ C1] Code: c1 ea 03 80 3c 02 00 0f 85 56 05 00 00 49 8d 7d 08 49 8b 5d 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 29 05 00 00 49 8d 7d 10 49 8b 6d 08 48 b8 00 00 00 00 00 fc [ 1246.840294][ C1] RSP: 0018:ffffc90000a07ad0 EFLAGS: 00000246 [ 1246.840305][ C1] RAX: dffffc0000000000 RBX: ffffc90000a07f80 RCX: ffffc90000a09000 [ 1246.840314][ C1] RDX: 1ffff92000140f69 RSI: ffffc90000a07f50 RDI: ffffc90000a07b48 [ 1246.840323][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1246.840332][ C1] R10: 0000000000000007 R11: 0000000000083046 R12: ffffc90000a07b90 [ 1246.840341][ C1] R13: ffffc90000a07b40 R14: ffffc90000a07f80 R15: ffffc90000a07b74 [ 1246.840350][ C1] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 1246.840365][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1246.840375][ C1] CR2: 0000200000030000 CR3: 0000000061d37000 CR4: 00000000003526f0 [ 1246.840384][ C1] Call Trace: [ 1246.840389][ C1] [ 1246.840395][ C1] ? __skb_ext_put+0x102/0x2c0 [ 1246.840412][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1246.840432][ C1] arch_stack_walk+0x94/0x100 [ 1246.840448][ C1] ? skb_release_head_state+0x1c2/0x290 [ 1246.840470][ C1] stack_trace_save+0x8e/0xc0 [ 1246.840488][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1246.840506][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1246.840528][ C1] kasan_save_stack+0x33/0x60 [ 1246.840542][ C1] ? kasan_save_stack+0x33/0x60 [ 1246.840554][ C1] ? kasan_save_track+0x14/0x30 [ 1246.840566][ C1] ? __kasan_save_free_info+0x3b/0x60 [ 1246.840584][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1246.840596][ C1] ? kmem_cache_free+0x2d4/0x6c0 [ 1246.840616][ C1] ? __skb_ext_put+0x102/0x2c0 [ 1246.840644][ C1] kasan_save_track+0x14/0x30 [ 1246.840656][ C1] __kasan_save_free_info+0x3b/0x60 [ 1246.840673][ C1] __kasan_slab_free+0x5f/0x80 [ 1246.840691][ C1] kmem_cache_free+0x2d4/0x6c0 [ 1246.840709][ C1] ? __skb_ext_put+0x102/0x2c0 [ 1246.840725][ C1] ? __skb_ext_put+0x102/0x2c0 [ 1246.840739][ C1] __skb_ext_put+0x102/0x2c0 [ 1246.840754][ C1] skb_release_head_state+0x1c2/0x290 [ 1246.840773][ C1] sk_skb_reason_drop+0xeb/0x1a0 [ 1246.840793][ C1] ip6_mc_input+0x82c/0xf60 [ 1246.840812][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 1246.840832][ C1] ip6_rcv_finish+0x3dc/0x580 [ 1246.840847][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1246.840862][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1246.840882][ C1] ip_sabotage_in+0x21e/0x290 [ 1246.840900][ C1] nf_hook_slow+0xbb/0x200 [ 1246.840920][ C1] nf_hook.constprop.0+0x424/0x750 [ 1246.840936][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1246.840952][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1246.840967][ C1] ? ip6_rcv_core+0xbd4/0x1c30 [ 1246.840983][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1246.840999][ C1] ? ip6_rcv_core+0xc70/0x1c30 [ 1246.841016][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1246.841031][ C1] ipv6_rcv+0xa4/0x650 [ 1246.841047][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1246.841062][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1246.841081][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1246.841099][ C1] ? lock_acquire+0x179/0x350 [ 1246.841113][ C1] __netif_receive_skb+0x1d/0x160 [ 1246.841130][ C1] netif_receive_skb+0x137/0x7b0 [ 1246.841146][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 1246.841164][ C1] ? br_netif_receive_skb+0xff/0x200 [ 1246.841189][ C1] br_pass_frame_up+0x346/0x490 [ 1246.841209][ C1] br_handle_frame_finish+0x10b7/0x1ec0 [ 1246.841230][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1246.841253][ C1] ? ip6t_do_table+0xc25/0x1c30 [ 1246.841269][ C1] ? nf_hook_slow+0x132/0x200 [ 1246.841288][ C1] br_nf_hook_thresh+0x307/0x410 [ 1246.841308][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1246.841329][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1246.841347][ C1] ? ip6table_mangle_hook+0xcb/0x770 [ 1246.841364][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1246.841383][ C1] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 1246.841399][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1246.841415][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1246.841433][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1246.841453][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1246.841474][ C1] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1246.841495][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1246.841514][ C1] ? lock_acquire+0x179/0x350 [ 1246.841527][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1246.841547][ C1] ? net_generic+0xea/0x2a0 [ 1246.841567][ C1] br_nf_pre_routing+0x860/0x15b0 [ 1246.841588][ C1] br_handle_frame+0xad8/0x14b0 [ 1246.841609][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1246.841629][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1246.841651][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1246.841670][ C1] __netif_receive_skb_core.constprop.0+0xa22/0x4bd0 [ 1246.841695][ C1] ? kmem_cache_free+0x2d4/0x6c0 [ 1246.841713][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1246.841728][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1246.841746][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1246.841760][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 1246.841781][ C1] ? ip6_mc_input+0x515/0xf60 [ 1246.841800][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1246.841821][ C1] ? process_backlog+0x3e7/0x15e0 [ 1246.841837][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1246.841853][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1246.841871][ C1] ? lock_acquire+0x179/0x350 [ 1246.841886][ C1] ? process_backlog+0x3e7/0x15e0 [ 1246.841901][ C1] __netif_receive_skb+0x1d/0x160 [ 1246.841918][ C1] process_backlog+0x439/0x15e0 [ 1246.841937][ C1] __napi_poll.constprop.0+0xba/0x550 [ 1246.841954][ C1] ? skb_defer_free_flush+0x149/0x280 [ 1246.841975][ C1] net_rx_action+0x97f/0xef0 [ 1246.841994][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1246.842014][ C1] ? tmigr_handle_remote+0x132/0x380 [ 1246.842034][ C1] ? run_timer_base+0x121/0x190 [ 1246.842047][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1246.842061][ C1] handle_softirqs+0x216/0x8e0 [ 1246.842079][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1246.842096][ C1] ? kernel_fpu_end+0x59/0x70 [ 1246.842110][ C1] do_softirq+0xb2/0xf0 [ 1246.842126][ C1] [ 1246.842131][ C1] [ 1246.842136][ C1] __local_bh_enable_ip+0x100/0x120 [ 1246.842152][ C1] kernel_fpu_end+0x5e/0x70 [ 1246.842166][ C1] blake2s_compress+0x7b/0xe0 [ 1246.842180][ C1] blake2s_update+0xef/0x360 [ 1246.842194][ C1] hmac.constprop.0+0x32a/0x420 [ 1246.842213][ C1] ? __pfx_hmac.constprop.0+0x10/0x10 [ 1246.842231][ C1] ? __asan_memcpy+0x3c/0x60 [ 1246.842252][ C1] ? __pfx_encode_point+0x10/0x10 [ 1246.842274][ C1] kdf.constprop.0+0x14b/0x280 [ 1246.842293][ C1] ? __pfx_kdf.constprop.0+0x10/0x10 [ 1246.842312][ C1] ? __pfx_curve25519+0x10/0x10 [ 1246.842327][ C1] ? kdf.constprop.0+0x223/0x280 [ 1246.842347][ C1] ? __pfx_mix_hash+0x10/0x10 [ 1246.842367][ C1] mix_dh+0xd2/0x130 [ 1246.842384][ C1] ? __pfx_mix_dh+0x10/0x10 [ 1246.842406][ C1] wg_noise_handshake_create_initiation+0x337/0x610 [ 1246.842429][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1246.842450][ C1] ? find_held_lock+0x2b/0x80 [ 1246.842467][ C1] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 1246.842486][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1246.842506][ C1] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 1246.842525][ C1] ? ktime_get_coarse_with_offset+0x150/0x240 [ 1246.842546][ C1] wg_packet_send_handshake_initiation+0x19a/0x360 [ 1246.842563][ C1] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 1246.842579][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1246.842606][ C1] wg_packet_handshake_send_worker+0x1c/0x30 [ 1246.842622][ C1] process_one_work+0x9cf/0x1b70 [ 1246.842640][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1246.842660][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1246.842678][ C1] ? assign_work+0x1a0/0x250 [ 1246.842696][ C1] worker_thread+0x6c8/0xf10 [ 1246.842715][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1246.842729][ C1] kthread+0x3c2/0x780 [ 1246.842743][ C1] ? __pfx_kthread+0x10/0x10 [ 1246.842757][ C1] ? rcu_is_watching+0x12/0xc0 [ 1246.842774][ C1] ? __pfx_kthread+0x10/0x10 [ 1246.842787][ C1] ret_from_fork+0x672/0x7d0 [ 1246.842798][ C1] ? __pfx_kthread+0x10/0x10 [ 1246.842811][ C1] ret_from_fork_asm+0x1a/0x30 [ 1246.842830][ C1] [ 1249.274375][ C0] net_ratelimit: 12351 callbacks suppressed [ 1249.274395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.292494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.304704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.316973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1249.329251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.341540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.353836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.366078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1249.378318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.390548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.284159][ C0] net_ratelimit: 14959 callbacks suppressed [ 1254.284179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1254.302379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.314624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.326872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.339085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.351314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.363590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:d7:33:a8:13:c9, vlan:0) [ 1254.375896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.388230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.400492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)