last executing test programs: 34.990590008s ago: executing program 0 (id=466): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getrusage(0x1, &(0x7f0000000480)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000180)={0x6, @output={0x0, 0x1, {0x1000, 0x9}, 0x7, 0x666a}}) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000140)={{0x9, 0x80, 0x3e, 0x9}, 'syz0\x00', 0x2d}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x40}, 0x38) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0xfffffffc) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000014000b0000400600000a0000010a000002005000500000000100000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000340)={0x55, 0x13, 0x6, {0x0, 0x2}, {0x3, 0x2008}, @period={0x5b, 0x8, 0x4c30, 0x8, 0xfffe, {0x6, 0xb2c, 0xffff, 0x660}, 0x4, &(0x7f0000000100)=[0x3, 0x7, 0x4, 0x5]}}) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) 33.649030802s ago: executing program 0 (id=474): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffc, 0x2) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='fusectl\x00', 0xd1d001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000340)={0x80045, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x203e}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r4, 0x0, &(0x7f0000000000), 0x80800) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3}, 0x10) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 33.531442069s ago: executing program 4 (id=475): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="002128080000d95efcf3"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x18, 0x4, "339f020bbe82b398000000000000369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x1, 0x3, 0x9, 0xf1, 0x80000001, 0x4928, 0xada1, 0x7fff, 0x4, 0xfffffff7, 0x1, 0x2, 0x70, 0x6}) 31.894842927s ago: executing program 2 (id=477): ioperm(0x6, 0x9, 0x824) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 31.794214031s ago: executing program 2 (id=478): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 30.89601573s ago: executing program 2 (id=481): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0', 0x33) ioctl(r2, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c0100003801000001") 30.613268803s ago: executing program 4 (id=483): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x2, r0, &(0x7f00000011c0), 0xfffffffffffffffd) 30.547832054s ago: executing program 4 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000600)) 29.805712503s ago: executing program 0 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC], 0x54) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c"], 0x0, 0x8e}, 0x28) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x24, r6, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 29.459162591s ago: executing program 2 (id=487): socket$nl_netfilter(0x10, 0x3, 0xc) shmget(0x3, 0x1000, 0x1, &(0x7f0000000000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x810, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x1004000, 0x0) 29.41313266s ago: executing program 4 (id=488): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) (fail_nth: 2) 27.362248899s ago: executing program 0 (id=489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000600), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) lseek(r2, 0x7, 0x0) write(r1, &(0x7f0000000240)="7a349ba4df5846f469f28834076580912a5d6c61c369982c8b3c4c", 0x1b) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, r3}}, 0x30) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) r4 = socket$unix(0x1, 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x4, @local, 0x20000000}, {0x2, 0xfff9, 0xc60, @ipv4={'\x00', '\xff\xff', @remote}, 0x101}, r3, 0xcf}}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e0000001c0d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r6 = socket$can_j1939(0x1d, 0x2, 0x7) accept4(r6, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000200)=0x80, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000440)=[{0x6, 0x1b, 0x5000000, {0xffff, 0x7c11}, 0x8, 0x6, 0xfffffffe}, {0x8, 0x3, 0x1000, {0x8}, 0x8, 0x6, 0x101}, {0x5, 0x0, 0xec0, {0x20009, 0x8000000000000001}, 0xfffffffffffffffa, 0xffffffffffffffff, 0x6}, {0xec, 0x80000000, 0x3, {0x7, 0x8}, 0x2, 0x35, 0x3ff}], 0x4, 0x40, 0x1ff, 0x4e2}, {&(0x7f0000000280)=[{0x5a62, 0xf7b6}, {0x3, 0x43786f85}, {0x9, 0x1}, {0xab52, 0x1}], 0x4, 0x10, 0x1, 0xffffffff}, {&(0x7f0000000580)=[0x4, 0x6], 0x2, 0x8, 0x3, 0x2}, {&(0x7f00000005c0)=[{0x1, 0x7, 0x38000000, 0x1, 0x3}], 0x1, 0x28, 0x1, 0x7}, {&(0x7f0000000600)=[0x9, 0x7, 0x5, 0xf36, 0x1, 0x2, 0x4007], 0x7, 0x8, 0x800, 0x8}}) write(r7, &(0x7f0000000000)='3', 0x4e) getpid() 26.997118665s ago: executing program 3 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 26.529746856s ago: executing program 4 (id=492): openat$autofs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80000) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0)=0x1ff, 0x4) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc0bc5310, &(0x7f0000000300)={0x18, 0xffffffff, 0x0, 'queue1\x00'}) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) 25.94241536s ago: executing program 3 (id=494): io_setup(0x11, &(0x7f00000038c0)) io_setup(0x1000, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000003b00)) io_setup(0x800, &(0x7f0000000500)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000080)='-\x00', 0x202c01, &(0x7f00000000c0)={@align, {0x8, 0x7fff, 0x0, 0x3}}, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x7}, {[0x0, 0xff, 0x2, 0x9]}, 0xde11, 0x42, &(0x7f0000000180)=""/66}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, r2, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7fff}) 25.350293923s ago: executing program 3 (id=496): r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0xe8}}}}, 0x0) (fail_nth: 2) 24.2172311s ago: executing program 3 (id=497): read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000a80)={{}, "fad7b9428d93038f63c4dafa1da7e07527fe756bde6d960d81bfd34ba5cca803ad5bdebe227152d43a607faa0dc407fc189b0d7e7468ab55f146ff0337aed82849987da5e1ab963dda992d377e4eacce0e342581ab9962694df4a98aef6d7813fb8b796948ff95415e9d71a47ede207b1794f624b034487af5832e243034017f4f93e15abf71e2dc1e26f97de375b5a1f1a24f98467d2d07d33c06c55c3f89c8d5282a18faedb7595cdedc33c345c89deca5b925cf8467200094111705e71154b451ed8407d1c89255b27d9b243d3a333b099595c33db04682ac22a418c49f5c39a0918c015e8393d2cb7c20feb2c54c82b6387812412e3237e938369453e1e8030d49fcd1c91bf36f2422d1a72f49b31ec3889ebc0d28c929b0c6736f00b53b9ccfd3934a7d933a8202fd2bdb2a8b0d58d6180c1a69b7fb41255ce92795786d10a8c7d9e4f680517f4e34b1e8f884e81e09bd5ec5ecf38b7b8f1637afb0aee0e708c4074eec24e3141b9e12ced6b4beaedec6d55dbae69d5a63142b3e81997458d7151a84d0d7cd4ebd25d24f3d2a3b4c403ab707fe38aa61cab1b070d4730625f76dc37f201e8698204637fe62fe52ed11ae0d8f98f69d4f92762bcba03b8b42feeca7a9fa9300ca4759ff9d7e9162479f954b1316775fcbfc6640b91dd1cb976ceaf2f9f28040ecfdc0e28bb9705a1b985274c7d08bd96aacd6a00f865f3a22f86ef2ace146c4f40bb20798e0bc2db4ce62f0873c09a85e7892729489a7b9c8c9a2939812595942b1ca2d3260315bc723ac2edf24d88f0f49d586a8065817ad936dc8161e438eb5b845df96b2c9a56eb7535ee9e255f41def5d9e9720857fbfd84b4bf1c97c574f568933df8f25d6df5d74a374e4f9a6a2e76644df77da621a8c9ce947af8f20feda0e22ef467eb210665589823025c9144ec05d80276574d3cae61c639d3b12438e012ffe1ca3823b4b79185ce1896b7a41aa36a47776fade667af70c25d9543bc036f40aec1c521f39239cdbf2748883f86b89349ffee1f528f955bdf6f29686c57a49b66ebfc26ee604316f27f9547cf3c21c221581458246b04d627e29e8b846e099e5d8234ce0db1d3e77130147580622b8eeaa34707ea25369c250ce5f5adc14b7afcfbce3c25e5e65d04858dc056456e2f2d2bd6afb59afae8d63b7ab5b8b6ad3386d52dbcee60c7f0945517a77edeeda33789acdb3b7b3242704d6c51940c004cde1d3a342477607581a92a50716caf93495cbc1a6b2f1be20081f7ba8a013416e6b8433383299b752feabd1455bc336b868b38f5ad73f397f0381a51748ffa8550510837d9128ab095629b7a159c6b0dfadfd8a8bff53c80481c59d861954790c593524d8a53cd8b2f2c234b850ec7576a46074293453a86cb3c0c346a8cbbac65eda4a2130e00053f5a054603776ea1d2975e4badbaa83518dad9274c22ac17f20686f56315340e5581c787a2f71ab3a2063664bcc82c7380a13cc8eb106c036800c7b0f14ed667f39af9a5cc01dcdd5809b534fad505858508845d9c547e19c632cd8024ecd777e193c2258312b7a5998a875d33dd8b861500946852af487bbefa54e9b16a83b6131ac343eacb2558e759a9b6ce5db0f1ab173d457d144fd5a65f092e553e1d0e3f9972ec57d27bb48c78332c7a6fab0d5958c61898b3a5ae8810e2246ae36291cd5f79f9475e697c9da84d05cc8dc197485ad790d2a8da5400583dce8ffa3c8adfe276884ed5d33f0e7bc4fb1748e83884213c10ec673dbbbf55670da7fbdd6d8927cd41106064ce22cd2ae14084c439e8f07e4e261667507c0acb03033f30665dbf928d31ff9cf38f61a46d6d1286065bfad5839b0247c975673839f6f685ebaad9396c5f93b3a5f346202a40969ab5c72d0355fd609d33b9443093a53dfbf8052a405389ce269f71da8ae1fb39b30f6a701f56838ca11527de58850f17b4fcc6397614da8e2e331f06024f1ee7f6a8b2f910711526361244a585dfacb4bab57738d7938adb436cf17cfeceb95016e339aa5f2ba30515f289ba35118d32504f52710044e78666dd2834fc2d9fad35e2df29b10e0557ab4789c7dc718d2d03434062bb58fd824c13a0bc6298ed9bdc3d0cc79d008972fcc9f751af4824b2be0823313581cd2fd2b436f84b14719b93dd95a38941c11af5b51f3b0503f3db3569ac847a93ea9124622044b37b083fcf8882a788041289905296e1bf2eb12aadb5228f366a925269a20f7ca9db7f317d5117a70d93f90b402993a7f84328409bda0fdc6306dd5c126fdb179fde4e4d7314d2ee419c8635e62895f8dffdf73f38188121f7b24dae40531b6e43054d3b9b459df2f2613536819643e6b7038de55ffa43bc9edc72e2038e2bf9da70a4a24a3fce0b8673f7f8f5099fcf0d23ab90c7f8770bdfd23e6aaabf7d110768ff08c8754ff6d962e43ff215d78d2ebd882353490da27dabd92ab08291338eaacf3e1ebe6a7da8286d3d57e272b9eac7c70a9a1bd67fb3f4e3052779422a7e19b7cfb01760f949ce4562ce5ad5292cb607e42d513d1facd0903a87836d5c30c181b5728db474154d3cb4e524ba5e03336534ca9f6b093fd6d9e5b89ede5becc677996321d65e9022d1c00e2907767a51c75c9f0688e4e82e045dc972e6be8948c7fc8a84ca8e1a992d44ac8e7a962a931d8eb3d0c4756b838c1339758a4a563d108d35940366b582c48567b5ca539839fbd327361ed76f4204f8ec84ec6401079a189b271747129c3d0025ccc25c9d7fbea0aa4f6a0e5f10422e9866e42ab0f86d6e9022688652536eef7fd28dc5961670a4058eaec61ba3e11273111be9cc3da57edc16321e1382d20f4cf52827032b5f79e395e742113303b0aa595f7188a417ddfdc3b6259b56f9f8f7b133774bfb5c181f1288713e3144ac4ff69fc146cc633dc70c8aee1da2384b72115b49cdbdfe9508b2e06fcd02df78d895e12cf6f0cf4171c7570809b949c6bfbff07da4018935a186630be06d42a4844521428afbed6b3a34aa0226a948fa12e8bdfbb27d13fd5627093511f52a51a6dcd33e0122d2dd1736885c797e1d1c65c06739790767be42582349c147d52e377732742f176b79243edd2c6b585d5512702ce4a7395835e2ab038a5deff84f7ff0d4622aebcd31c58d2dbbaad54638473e5fb428b827a577215460489001af429b40d0dae3521be9a381913740ea72a8b707d2ed4a12f5791fc2d0ea9674d59d68ff02a7b7dda9b9a1917db6093bf8ba4a186c952434dfd664cf9607d9b194b874c24ad03b04148d6f1951d4127146b22783be7eceefc686c4bef899e6cce8ce1344e9e49cfc0d43633098983a40276b4b4fcbe4ce0b695d58471afcfcce714ff1da6e975bd1494d127fbcda25c0110f596e4e0882e01acc674446d2c6e3d08d8034eebd4432968b1aab2e825eba0f76612ae6617667ad6c823fb8234363d5bb341c440fe0a0cad018b6c36ca317e3473eedbcc5f6740a7fad23b55a6fb626d8093ea62d6f35d2babd391e138b24a4ddfa86fef5487a710289f2994f36e87fadd178a5e139455d398a8809e30d2569650ceee90ad6b68942087ae0e33c49c6f7952b08da8762be2c9066e56d27a69a926fc58c82565877e913bff08e0827c45f9e74c964f282d5023efb21e976b93177464a686150ef09a32c352505c534e467ce014fec144dbbdcc8e2d28b6bf619ddf63a48054406dfa33aa541cb9beafa70cabcd8600cabf93d138de261f6f5b63273691669e363e06bc583bdee1ed210179f2ab50a6bc0a727475551e90b0265e1e8ca02acabe93b596b7a782151d792a5679e21e730b7e964c38a49717d0a1385bbb1b0459916424133149720bf47ac38687178a8b351ae3f29bf4a6ea369c90f85f4f123416c8c09c3f25b133ddcdb71b1289821d81581b78ae66c075c535e30151ae1bd48e787b55cc45951c83b5ce097711df0764feab81f24d63940915c471479c24222bd5569201ac4c56577168b76c1f0684f981df516cf5ac5d4307ef2bf429d818c9809f6669f43b1eb160bdcb817154bc36cd8bd24cd6c75e037edab6fa0fe9a0f19b6dbaf99dd68f0318382ccf8d20fe2fdc08134a86b5b0794a534992751fca4ec726dfca985cc239bae2b04ce49416e07e14f752767d05f6584479b5da973fa22477be64fef48b5f3c07936c2be9fa8b92c9e8a0412a2718932edf53382efe2aa1531bbde87363fee5a15501a490c16d26354c0ffeeccf0d05705a6b68a0b88de1e15736092014273f7494474a24555e7e7a6b4e274a9dd4d534cac979a0e99758203f74309af7b221e925c592ad25e13c7907c1030fc79bb728bce4437047470cf97ebc48f45ef67695585caa73178057802a24e3e4fea0a55111275c738d2b09aa7e7a00e91be43ee507b6533c6c6e9d1848e708240d7547b08bb9121fc024caed12805a0a8bfb72f72c6787b760ccd3657328507050f8ad3e348597b38685ad6d44125266382dbf433a9628c548f89eea1691e92fc755502e4656d2faa2077ab1d749a3d2d0543cd5248db49cdb1a60f006ec8cb5b3ecfc1b6b38ed802a6885c6733dbdfbe9d6c0a0daacda38f9bdbd728bfae407e2be620cd8e66743c70073e38e87ede0daf00e7e6205bc0f5cc3ff5657ad559ad13a865d01357215e2e813153212d13d6817ff2badace7edac682ea459e30b476b98ea7ca540c9ec3f8a0550ab51340e04425e3eb0d36fcfa6612bfe947263322afb876ef4a86edf8adf41f4bf4fd617c2cc57c0639baa79f4e6468258e53b76ae51c83f37b6d128cbe4eaf3e58e7d24a7c24451289c991984bed04ce060e4ee13a0c0e43fc98baae2352366672075a6c8c26165aa538b1bac0765ffda39bfafaa401cea38646e418fc99704540acd08e128121bb0b8ab8e316f924cfdae1002d54e2ef3cf3477558d77881beaa3c31cb9cc2429eaf858ebaf06709910faf26d7433290a3250cca586c0e49c3d2456a6409da11259bc7b7e2345146a360404f3d7333487343d9dfbb2813bbeba56a1e1f90d421aca2d1e6ca075b1fcb5733df856fc45de7fe5dbe6174ebc4a6241576e46503a3f7e4ad18b5965c0525faa3d031b09b2b9aa1874285c874382359e93775a69701bb63fccc33d095aac42e79a74ec9700218add3c93114c0686f6897f3228cf3bee05ca63f709075df1b5e89e44c05feb00356c0de06190b84e09285443e58a361840e93da22a3ab64d8a4a0474466d13738c07c71847b6b2e47adb22db94e92524a08ca0dbb02de2e0eb5c2edb7e29d89ed5c2d76bb2fc5da5cd57b89bfd47465b5a57ebd72261ddfb443a141415670a59ae82acde715d73b4ab62602b9a347764a05a15159d25abfa2e26531efc90cce8692bb61d859ef6ecb4d9d6d44813085915e8d97916127241aa470b55cdf629ad52b7ad48d4253b2539726f26cf169c208a591ed4a3d4c0474446493a2da85d1226e58d988bcd484ed94d8b18f3298815be6627d1eb5bde9a2f8a3864b2e0c772502854afab501e8cbf1425028bebc3aece71cae8fc40f1606902d0ebcb124be02fcfb6a2810f580942e9f6a2871f9e9bd4a43bb3428c8e4cc16c5b7f3f6cf92bc0aec8c7826c2e759d6062c7409e2e770e3780bbff8e390bc9b551d12c5d295dda72b46cbf9a20c76f6881d69ec27a003b6edb5b2983483d06b246cc3cbd2c8524e601ce0d45c7441bb9e1dcd676ccb5ac3a9e59e6d65c4eee6b120b6bb71eafc80f9ca5de3529ff04fc2f3546"}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000006100)='cmdline\x00') preadv(r4, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) syz_emit_ethernet(0x82, &(0x7f0000000280)=ANY=[], 0x0) ioprio_get$uid(0x3, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x100) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xfff3}, {0x3}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) 23.63575845s ago: executing program 1 (id=498): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) 23.338233673s ago: executing program 2 (id=499): syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002140)='net/netstat\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r4, 0x400, 0x2) write(r4, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) vmsplice(r5, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 22.814489662s ago: executing program 1 (id=500): r0 = syz_io_uring_setup(0xc4b, &(0x7f0000000400)={0x0, 0x8800595d, 0x0, 0x20002, 0x1002053}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x4, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000780)=ANY=[@ANYBLOB="2c02040100d6e1368e7e7a1464480400fc020000000000000000000000000001f5fdfb602e5daefb3b48dd27c2b5cdb22f97f3f38e7056520d381dfdb8658a71dfba877f8f5a49bb423c10f736aa911a89e8f746b7e96104197d9833d5d07af9209ccaf988543e2e903d9df74e0055031fcdea9008a2f491b56152bf1a382205fa4f29f76d511f4df7170203830fb62d5e2a175c683878b697086b153d3a67f698e9271e43de4d4b7e4bbe5fc0aa908a6c773f4f195c87a5c4c14ded1d4c4feb15e074cf44f170a6c2006442a70235bf5dc98bcc4281edbe8f933201434cbcb4"], 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000003c0)=0xd10, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x28a, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x254, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf730041e5af18"}, {0x0, 0x1, "000000050000000026000400"}, {0xe, 0x11, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ec"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18}, {0x21}, {0x0, 0xa, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62a"}, {0x3, 0x2, "d5170000dce9674a36da018dff16e70b8b14c4b7"}]}}}}}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x9, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0xfffffffc, @mcast2}, 0x1, {[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff]}}, 0x5c) socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 22.783555915s ago: executing program 0 (id=501): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x290583, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x18, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mmap(&(0x7f00006cb000/0x3000)=nil, 0x3000, 0xb635773f07ebbeed, 0x50030, r0, 0x27280000) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000001082057d0040000102030109026b000301f1400209040000"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) getitimer(0x0, 0x0) 22.661904472s ago: executing program 3 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002340), 0x8c02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)="000000000902200001010080320904000002ff000000070581024000000705020240000012010002000000402505a0a4000100000001", 0x36) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)="0705810240000007058102", 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace$cont(0x18, r4, 0x4, 0x2) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r8, &(0x7f0000000440)="0c90", 0x2, 0x4040, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001800), 0x1, 0x40012021, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 22.161622419s ago: executing program 4 (id=503): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x48, 0xffffffffffffffff) keyctl$read(0x2, r8, 0x0, 0x0) 22.155410166s ago: executing program 1 (id=504): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, 0x0, 0x805) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e0088003300d004ec00080211000000080211000001505050505050a4000c032200375204001b12912292e4eef7876dee1617ec9be63cd85f112536045369d551579314e85a08a96c3ad71d752eb32133b2b02af85d357832d1b824e89e6c8d29df803b01c6a4299b4b4c621c7c737e4a23287705b5571b7abd56d46512130df9173faa0802110000000802110000000000d3b67c594a66894bc50676a6f97319ae0da7165afd2d530df5f366ad8386847b76e8afd0217e9934a3ab6733c7576977918225d86e84eecf7131de3d84c0fa0b62a32c18bbaf336b90dfe81b2f0933d84f7890f2bb37c08733b89c"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) acct(&(0x7f0000000100)='./debug/tracing/trace_pipe\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f00000005c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000004c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000040)=']\x00']}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02010003080000000000000000000000030005000000f4ff02000000000000000000000000000f00030006000000000002000000640101010000000000000000"], 0x40}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x242241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x20}) r9 = ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) socket(0x5, 0x6, 0x1) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a138000c000600142603600e1208000f0000810401a8001600200001400300000803", 0x3d}], 0x10000000000001c5, 0x0, 0x0, 0x7400}, 0x40818) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES64=r10, @ANYRESDEC=r0, @ANYRES32=r6, @ANYRESOCT, @ANYRESHEX=r7, @ANYRES32=r5, @ANYBLOB="f01072be6da0056f3376bc8109cd22416a6ac5c90712a7f21a95dd11f037c52bb0ec2162d1cab742b4073c0798ff34785ecb6d13a9b59467c350d1d4c09d35b43459948ffdcb430df9e094bc60911435b7e05d58bcd0c59b66cc7e8a0b68a1c61e9e1bcb8908518897d0b08ac1b836afc224b02f6f9ff4b1938b242ad0e46699200550591f0f8551d343ad", @ANYRESOCT=r6, @ANYRES16=r9], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xffffffffffffff91, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) 19.38500843s ago: executing program 1 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x101000, 0x0) preadv(r0, &(0x7f0000003140)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1, 0x7ff, 0x40) (fail_nth: 2) 19.176813714s ago: executing program 3 (id=506): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x3c}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='1', 0x1) 19.159306517s ago: executing program 1 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x203a15de065a30e7}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xb62}, @NL80211_ATTR_IE={0xf6, 0x2a, [@chsw_timing={0x68, 0x4, {0x234, 0x9}}, @fast_bss_trans={0x37, 0xe4, {0x6, 0x5, "e7caba066d3c30158c46a370ff324952", "3188bef432c4d4e9e4bb8b01e4e4e454f0c0c51714f952922e003b928f54dfff", "9834092c19b43855f7df0ea58f06da9afb58f68134b5e4c97e8a54e57fc1ddad", [{0x1, 0x1e, "b596cf7261928de4ab9cc3ffb33eb42a9ef4a98f7f407f85518fb2b46d27"}, {0x2, 0x14, "1836af0d47c7892f95d511354570c9d05e55a0fc"}, {0x3, 0x1b, "be5e2f448496b55acb713a6aee68289d0e330c93f0fb185b271be3"}, {0x2, 0x1c, "b96dae117d4de678a024eade211fa799cc9c1ced15a91aa3bb0bf387"}, {0x3, 0x1f, "c3ffa2004f3ee1605dadfbc97bd7a04ab647b90b1191548b14b03449b8f5fc"}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x7}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x130}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000041) mkdir(&(0x7f0000000a00)='./debug\x00', 0x1b9) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./debug\x00', 0x0, 0x18160a0, &(0x7f0000000480)={[{}]}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18.822203603s ago: executing program 1 (id=508): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60044084) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r12, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) setsockopt$inet_int(r12, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0xca, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r0}, 0x38) 18.789787087s ago: executing program 0 (id=509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) io_setup(0xf, &(0x7f00000001c0)=0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x5, r2, &(0x7f0000000440)='Y', 0x1, 0x7, 0x0, 0x0, r2}]) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) 18.620586374s ago: executing program 2 (id=510): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a2401"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff000705810340"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1000000, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000, 0x0, 0xfffffff8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x59, 0x2, {{'cbc(camellia)\x00'}, 0x88, "6e000b0000000020000000001900000000"}}]}, 0x14c}}, 0x44050) sendmsg$nl_generic(r2, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x2}, 0xfffffffffffffe19, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000600)=[@init={0x18, 0x84, 0x0, {0x1, 0x4a, 0x5, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x38, 0x4855}, 0x24000052) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 32 (id=503): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x48, 0xffffffffffffffff) keyctl$read(0x2, r8, 0x0, 0x0) kernel console output (not intermixed with test programs): 45][ T6363] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 105.535339][ T5793] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.535382][ T5793] usb 1-1: MIDIStreaming interface descriptor not found [ 105.572542][ T5734] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.669930][ T5793] usb 1-1: USB disconnect, device number 4 [ 105.672688][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 105.672702][ T31] audit: type=1400 audit(1790759404.238:338): avc: denied { ioctl } for pid=6386 comm="syz.3.197" path="socket:[10816]" dev="sockfs" ino=10816 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.721234][ T5734] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.723884][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 105.723917][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 105.723943][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.723980][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.728837][ T5734] usb 5-1: config 0 descriptor?? [ 105.729746][ T6391] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 105.884217][ T31] audit: type=1400 audit(1790759404.448:339): avc: denied { node_bind } for pid=6394 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 105.986891][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.372705][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 106.372750][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 106.377029][ T31] audit: type=1400 audit(1790759404.938:340): avc: denied { mount } for pid=6412 comm="syz.2.206" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 106.451550][ T5734] usbhid 5-1:0.0: can't add hid device: -71 [ 106.451626][ T5734] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.480920][ T5734] usb 5-1: USB disconnect, device number 3 [ 106.650524][ T5744] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 106.803225][ T5744] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.808191][ T5744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.808217][ T5744] usb 1-1: Product: syz [ 106.808231][ T5744] usb 1-1: Manufacturer: syz [ 106.808245][ T5744] usb 1-1: SerialNumber: syz [ 106.816445][ T5744] usb 1-1: config 0 descriptor?? [ 107.076606][ T31] audit: type=1400 audit(1790759405.638:341): avc: denied { read write } for pid=6414 comm="syz.0.207" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.079063][ T31] audit: type=1400 audit(1790759405.638:342): avc: denied { open } for pid=6414 comm="syz.0.207" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.126332][ T31] audit: type=1400 audit(1790759405.668:343): avc: denied { ioctl } for pid=6414 comm="syz.0.207" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.187673][ T5744] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.318355][ T6415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.395310][ T31] audit: type=1400 audit(1790759405.958:344): avc: denied { read write } for pid=6435 comm="syz.4.215" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 107.395357][ T31] audit: type=1400 audit(1790759405.958:345): avc: denied { open } for pid=6435 comm="syz.4.215" path="/38/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 107.398860][ T6436] FAULT_INJECTION: forcing a failure. [ 107.398860][ T6436] name fail_futex, interval 1, probability 0, space 0, times 1 [ 107.398892][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.4.215 Not tainted syzkaller #0 PREEMPT(full) [ 107.398912][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 107.398923][ T6436] Call Trace: [ 107.398929][ T6436] [ 107.398937][ T6436] dump_stack_lvl+0x100/0x190 [ 107.398966][ T6436] should_fail_ex.cold+0x5/0xa [ 107.398993][ T6436] get_futex_key+0x1d0/0x14f0 [ 107.399029][ T6436] ? __pfx_get_futex_key+0x10/0x10 [ 107.399060][ T6436] ? comedi_unlocked_ioctl+0x3a6/0x3310 [ 107.399092][ T6436] futex_wake+0xf4/0x5e0 [ 107.399116][ T6436] ? __pfx_futex_wake+0x10/0x10 [ 107.399137][ T6436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.399164][ T6436] ? do_vfs_ioctl+0x226/0x13e0 [ 107.399188][ T6436] do_futex+0x2b2/0x440 [ 107.399217][ T6436] ? __pfx_do_futex+0x10/0x10 [ 107.399243][ T6436] ? __fget_files+0x34/0x3d0 [ 107.399273][ T6436] __x64_sys_futex+0x34f/0x4d0 [ 107.399304][ T6436] ? __pfx___x64_sys_futex+0x10/0x10 [ 107.399340][ T6436] do_syscall_64+0x123/0x790 [ 107.399362][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.399381][ T6436] RIP: 0033:0x7f8b6839e159 [ 107.399397][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.399414][ T6436] RSP: 002b:00007f8b6929b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.399434][ T6436] RAX: ffffffffffffffda RBX: 00007f8b68625fa8 RCX: 00007f8b6839e159 [ 107.399447][ T6436] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b68625fac [ 107.399460][ T6436] RBP: 00007f8b68625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 107.399471][ T6436] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 107.399482][ T6436] R13: 00007f8b68626038 R14: 00007ffea506c4d0 R15: 00007ffea506c5b8 [ 107.399505][ T6436] [ 107.476141][ T6436] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1836016431.879322213), cmd(3) [ 107.478992][ T31] audit: type=1400 audit(1790759406.048:346): avc: denied { ioctl } for pid=6435 comm="syz.4.215" path="/38/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 107.552640][ T6415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.841944][ T6415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.062728][ T6415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.410860][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.495307][ T1519] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.611012][ T1447] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.611058][ T1447] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.872030][ T5744] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 109.023837][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.219'. [ 109.024737][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 109.028558][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 109.397888][ T6458] FAULT_INJECTION: forcing a failure. [ 109.397888][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.397919][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.4.222 Not tainted syzkaller #0 PREEMPT(full) [ 109.397939][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 109.397950][ T6458] Call Trace: [ 109.397956][ T6458] [ 109.397963][ T6458] dump_stack_lvl+0x100/0x190 [ 109.397995][ T6458] should_fail_ex.cold+0x5/0xa [ 109.398022][ T6458] _copy_from_iter+0x1f4/0x1690 [ 109.398048][ T6458] ? __asan_memset+0x23/0x50 [ 109.398068][ T6458] ? __pfx__copy_from_iter+0x10/0x10 [ 109.398088][ T6458] ? __pfx___alloc_skb+0x10/0x10 [ 109.398123][ T6458] netlink_sendmsg+0x808/0xda0 [ 109.398151][ T6458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.398176][ T6458] ? selinux_socket_sendmsg+0x198/0x2f0 [ 109.398203][ T6458] ____sys_sendmsg+0xa4d/0xbe0 [ 109.398220][ T6458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.398243][ T6458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.398268][ T6458] ? lock_acquire+0x1d1/0x380 [ 109.398288][ T6458] ? get_pid_task+0x2a/0x250 [ 109.398315][ T6458] ___sys_sendmsg+0x190/0x1e0 [ 109.398337][ T6458] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.398356][ T6458] ? get_pid_task+0x106/0x250 [ 109.398390][ T6458] ? find_held_lock+0x2b/0x80 [ 109.398433][ T6458] __sys_sendmsg+0x160/0x210 [ 109.398463][ T6458] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.398502][ T6458] do_syscall_64+0x123/0x790 [ 109.398524][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.398543][ T6458] RIP: 0033:0x7f8b6839e159 [ 109.398558][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.398581][ T6458] RSP: 002b:00007f8b6929b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.398600][ T6458] RAX: ffffffffffffffda RBX: 00007f8b68625fa0 RCX: 00007f8b6839e159 [ 109.398612][ T6458] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 109.398623][ T6458] RBP: 00007f8b6929b090 R08: 0000000000000000 R09: 0000000000000000 [ 109.398633][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.398643][ T6458] R13: 00007f8b68626038 R14: 00007f8b68625fa0 R15: 00007ffea506c5b8 [ 109.398668][ T6458] [ 109.665522][ T10] usb 1-1: USB disconnect, device number 5 [ 109.738579][ T31] audit: type=1400 audit(1790759408.298:347): avc: denied { bind } for pid=6459 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.908328][ T6465] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.238335][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 111.238455][ T31] audit: type=1400 audit(1790759409.798:351): avc: denied { kexec_image_load } for pid=6475 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 111.297436][ T31] audit: type=1326 audit(1790759409.858:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.0.229" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a34f9e159 code=0x0 [ 111.937850][ T31] audit: type=1400 audit(1790759410.498:353): avc: denied { create } for pid=6480 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 111.961813][ T31] audit: type=1400 audit(1790759410.528:354): avc: denied { write } for pid=6480 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 111.971156][ T31] audit: type=1400 audit(1790759410.528:355): avc: denied { setopt } for pid=6480 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.013111][ T6472] bond0: no command found in slaves file - use +ifname or -ifname [ 112.032282][ T6483] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.230'. [ 112.169455][ T31] audit: type=1400 audit(1790759410.728:356): avc: denied { ioctl } for pid=6486 comm="syz.2.232" path="socket:[11116]" dev="sockfs" ino=11116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.172103][ T31] audit: type=1400 audit(1790759410.738:357): avc: denied { create } for pid=6486 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.261681][ T31] audit: type=1400 audit(1790759410.828:358): avc: denied { create } for pid=6491 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.285693][ T31] audit: type=1400 audit(1790759410.848:359): avc: denied { bind } for pid=6491 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.383618][ T6494] bridge0: port 3(syzkaller0) entered blocking state [ 112.383669][ T6494] bridge0: port 3(syzkaller0) entered disabled state [ 112.383741][ T6494] syzkaller0: entered allmulticast mode [ 112.431207][ T6494] syzkaller0: entered promiscuous mode [ 112.432829][ T6494] bridge0: port 3(syzkaller0) entered blocking state [ 112.432927][ T6494] bridge0: port 3(syzkaller0) entered forwarding state [ 112.437085][ T31] audit: type=1400 audit(1790759410.988:360): avc: denied { read write } for pid=6491 comm="syz.4.235" name="frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.778777][ T6511] binder: 6507:6511 ioctl c0306201 0 returned -14 [ 114.946288][ T6498] bridge0: port 3(syzkaller0) entered disabled state [ 115.000602][ T6498] syzkaller0 (unregistering): left allmulticast mode [ 115.000620][ T6498] syzkaller0 (unregistering): left promiscuous mode [ 115.000667][ T6498] bridge0: port 3(syzkaller0) entered disabled state [ 115.220264][ T6527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.244'. [ 115.741509][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.891066][ T9] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 115.892155][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.892200][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.019237][ T9] as10x_usb: device has been detected [ 116.028956][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 116.068265][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 116.133507][ T6549] use of bytesused == 0 is deprecated and will be removed in the future, [ 116.133522][ T6549] use the actual size instead. [ 116.275851][ T9] as10x_usb: error during firmware upload part1 [ 116.276672][ T9] Registered device Abilis Systems DVB-Titan [ 116.420684][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 116.467732][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.468157][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.233756][ T6567] IPv6: Can't replace route, no match found [ 117.237960][ T6567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.251'. [ 118.074972][ T6574] binder: 6568:6574 ioctl c0306201 0 returned -14 [ 118.556742][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 118.556760][ T31] audit: type=1400 audit(1790759417.118:366): avc: denied { setopt } for pid=6570 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.591457][ T25] usb 4-1: USB disconnect, device number 8 [ 118.640812][ T6572] macsec1: entered allmulticast mode [ 118.640834][ T6572] veth1_macvtap: entered allmulticast mode [ 118.704172][ T25] Unregistered device Abilis Systems DVB-Titan [ 118.717461][ T25] as10x_usb: device has been disconnected [ 118.770060][ T6584] warning: `syz.3.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.770113][ T31] audit: type=1400 audit(1790759417.328:367): avc: denied { ioctl } for pid=6583 comm="syz.3.258" path="socket:[11883]" dev="sockfs" ino=11883 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.782552][ T6584] Zero length message leads to an empty skb [ 119.540564][ T31] audit: type=1400 audit(1790759418.108:368): avc: denied { create } for pid=6593 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.544120][ T31] audit: type=1400 audit(1790759418.108:369): avc: denied { listen } for pid=6593 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.544438][ T31] audit: type=1400 audit(1790759418.108:370): avc: denied { write } for pid=6593 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.554257][ T31] audit: type=1400 audit(1790759418.118:371): avc: denied { read } for pid=6593 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.594597][ T6594] tipc: Enabling of bearer rejected, failed to enable media [ 119.797748][ T6609] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 119.797778][ T6609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.800927][ T6609] vhci_hcd vhci_hcd.0: Device attached [ 119.812439][ T31] audit: type=1400 audit(1790759418.378:372): avc: denied { lock } for pid=6607 comm="syz.3.265" path="socket:[12497]" dev="sockfs" ino=12497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.014937][ T6618] binder: 6610:6618 ioctl c0306201 0 returned -14 [ 120.513877][ T5744] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 120.570546][ T5744] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 120.579115][ T6613] vhci_hcd: connection reset by peer [ 120.586944][ T13] vhci_hcd vhci_hcd.3: stop threads [ 120.587351][ T13] vhci_hcd vhci_hcd.3: release socket [ 120.831164][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 121.508198][ T31] audit: type=1400 audit(1790759420.068:373): avc: denied { listen } for pid=6630 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.640598][ T5734] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.802121][ T5734] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 121.803301][ T5734] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.803325][ T5734] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.803345][ T5734] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.806063][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 121.806083][ T5734] usb 5-1: Product: syz [ 121.806096][ T5734] usb 5-1: Manufacturer: syz [ 121.806109][ T5734] usb 5-1: SerialNumber: syz [ 122.098452][ T5734] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 122.126526][ T6637] overlayfs: missing 'lowerdir' [ 122.320771][ T9] usb 5-1: USB disconnect, device number 4 [ 122.348738][ T9] usblp0: removed [ 122.704383][ T31] audit: type=1400 audit(1790759421.268:374): avc: denied { ioctl } for pid=6647 comm="syz.1.277" path="socket:[12025]" dev="sockfs" ino=12025 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.705029][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 122.759853][ T6649] veth1_macvtap (unregistering): left allmulticast mode [ 122.851408][ T31] audit: type=1400 audit(1790759421.418:375): avc: denied { read write } for pid=6650 comm="syz.0.278" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.311418][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 125.311434][ T31] audit: type=1400 audit(1790759423.878:377): avc: denied { create } for pid=6675 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 125.527231][ T6682] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.572846][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.701385][ T5744] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 125.722427][ T9] usb 1-1: device descriptor read/64, error -71 [ 126.250537][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.382506][ T9] usb 1-1: device descriptor read/64, error -71 [ 126.491661][ T9] usb usb1-port1: attempt power cycle [ 126.755977][ T31] audit: type=1400 audit(1790759425.318:378): avc: denied { write } for pid=6699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1779 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.840367][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.860831][ T9] usb 1-1: device descriptor read/8, error -71 [ 127.015251][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 127.311186][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.311233][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.413190][ T6721] hsr_slave_0 (unregistering): left promiscuous mode [ 127.441645][ T31] audit: type=1400 audit(1790759426.008:379): avc: denied { write } for pid=6720 comm="rm" name="hook-state" dev="tmpfs" ino=1779 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.511822][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.542861][ T9] usb 1-1: device descriptor read/8, error -71 [ 127.637232][ T6715] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 127.714548][ T9] usb usb1-port1: unable to enumerate USB device [ 127.764611][ T6728] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 127.785722][ T6728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.805862][ T6723] netlink: 'syz.1.291': attribute type 2 has an invalid length. [ 128.130373][ T5793] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.350736][ T5793] usb 5-1: Using ep0 maxpacket: 16 [ 128.418797][ T5793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.463431][ T5793] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 128.746174][ T5793] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 128.746192][ T5793] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 128.774410][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.774441][ T5793] usb 5-1: Product: syz [ 128.774457][ T5793] usb 5-1: Manufacturer: syz [ 128.774471][ T5793] usb 5-1: SerialNumber: syz [ 129.086177][ T5793] usb 5-1: USB disconnect, device number 5 [ 130.513720][ T6773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.299'. [ 130.514097][ T6773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.598997][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 131.683904][ T31] audit: type=1400 audit(1790759430.248:380): avc: denied { ioctl } for pid=6787 comm="syz.3.306" path="socket:[12142]" dev="sockfs" ino=12142 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.684075][ T6791] syzkaller0: entered promiscuous mode [ 131.684093][ T6791] syzkaller0: entered allmulticast mode [ 131.742369][ T31] audit: type=1400 audit(1790759430.308:381): avc: denied { create } for pid=6787 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.745737][ T31] audit: type=1400 audit(1790759430.308:382): avc: denied { read } for pid=6787 comm="syz.3.306" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 131.745938][ T31] audit: type=1400 audit(1790759430.308:383): avc: denied { open } for pid=6787 comm="syz.3.306" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 132.020345][ T31] audit: type=1400 audit(1790759430.578:384): avc: denied { ioctl } for pid=6774 comm="syz.4.301" path="socket:[12134]" dev="sockfs" ino=12134 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.202744][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.293997][ T6803] 9p: Bad value for 'rfdno' [ 132.351055][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.357806][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.357840][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.357857][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.357900][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.365800][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.365825][ T10] usb 1-1: Product: syz [ 132.365841][ T10] usb 1-1: Manufacturer: syz [ 132.412037][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 132.412056][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 132.455179][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 132.455200][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 132.557056][ T31] audit: type=1400 audit(1790759431.118:385): avc: denied { setopt } for pid=6804 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.656472][ T31] audit: type=1400 audit(1790759431.218:386): avc: denied { read write } for pid=6794 comm="syz.0.308" name="cdc-wdm0" dev="devtmpfs" ino=3002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 132.656730][ T31] audit: type=1400 audit(1790759431.218:387): avc: denied { open } for pid=6794 comm="syz.0.308" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 132.820514][ T31] audit: type=1400 audit(1790759431.378:388): avc: denied { ioctl } for pid=6794 comm="syz.0.308" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3002 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 132.927128][ T31] audit: type=1400 audit(1790759431.488:389): avc: denied { create } for pid=6794 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 133.510518][ T983] usb 1-1: USB disconnect, device number 10 [ 134.137169][ T6828] comedi comedi0: comedi_test: 2 microvolt, 100000 microsecond waveform attached [ 134.815690][ T6850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.790575][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 135.790610][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 135.824377][ T6862] gretap0: entered promiscuous mode [ 135.830059][ T6862] gretap0: left promiscuous mode [ 135.962710][ T5734] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 136.112517][ T5734] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 136.113394][ T5734] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 136.113417][ T5734] usb 1-1: config 0 has no interface number 0 [ 136.113450][ T5734] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 136.113475][ T5734] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 136.113500][ T5734] usb 1-1: config 0 interface 12 has no altsetting 0 [ 136.115231][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.115252][ T5734] usb 1-1: Product: syz [ 136.115266][ T5734] usb 1-1: Manufacturer: syz [ 136.115280][ T5734] usb 1-1: SerialNumber: syz [ 136.117579][ T5734] usb 1-1: config 0 descriptor?? [ 136.118348][ T6850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.118433][ T6850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.120856][ T5734] f81534 1-1:0.12: unsupported endpoint max packet size [ 136.133107][ T6872] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.351700][ T983] usb 1-1: USB disconnect, device number 11 [ 136.368637][ T6849] block nbd0: shutting down sockets [ 136.512323][ T5734] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.280997][ T5734] usb 4-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 137.281859][ T5734] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.281895][ T5734] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.281931][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.297917][ T5734] ums-sddr55 4-1:1.0: USB Mass Storage device detected [ 137.309688][ T5734] ums-sddr55 4-1:1.0: This device (55aa,a103,0000 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 137.309688][ T5734] Please send a copy of this message to and [ 137.320607][ T5793] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.480866][ T5793] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 137.481728][ T5793] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.481754][ T5793] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.481773][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 137.481789][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.484721][ T5793] usb 5-1: config 0 descriptor?? [ 137.988028][ T5734] usb 4-1: USB disconnect, device number 9 [ 138.239117][ T6894] Bluetooth: MGMT ver 1.23 [ 138.259271][ T5793] hid (null): invalid report_count -59981023 [ 138.276452][ T5793] hid-multitouch 0003:0EEF:72C4.0004: invalid report_count -59981023 [ 138.276477][ T5793] hid-multitouch 0003:0EEF:72C4.0004: item 0 4 1 9 parsing failed [ 138.278158][ T5793] hid-multitouch 0003:0EEF:72C4.0004: probe with driver hid-multitouch failed with error -22 [ 138.326672][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 138.326690][ T31] audit: type=1400 audit(1790759436.888:392): avc: denied { setopt } for pid=6896 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.359224][ T31] audit: type=1400 audit(1790759436.898:393): avc: denied { connect } for pid=6896 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.359273][ T31] audit: type=1400 audit(1790759436.898:394): avc: denied { name_connect } for pid=6896 comm="syz.0.334" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 138.402576][ T31] audit: type=1400 audit(1790759436.948:395): avc: denied { write } for pid=6896 comm="syz.0.334" laddr=fe80::10 lport=52665 faddr=fe80::aa fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.407382][ T6899] sctp: [Deprecated]: syz.0.334 (pid 6899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.407382][ T6899] Use struct sctp_sack_info instead [ 138.415434][ T31] audit: type=1400 audit(1790759436.968:396): avc: denied { setopt } for pid=6896 comm="syz.0.334" laddr=fe80::10 lport=52665 faddr=fe80::aa fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.448531][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.448841][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.106731][ T31] audit: type=1400 audit(1790759437.668:397): avc: denied { connect } for pid=6913 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.127134][ T31] audit: type=1400 audit(1790759437.688:398): avc: denied { create } for pid=6913 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 139.500591][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 139.515130][ T5744] usb 5-1: USB disconnect, device number 6 [ 139.661072][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 139.661993][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9989, setting to 1024 [ 139.663496][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 139.663519][ T10] usb 1-1: Product: syz [ 139.663533][ T10] usb 1-1: Manufacturer: syz [ 139.669775][ T6919] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 139.931601][ T6940] binder: 6935:6940 ioctl c0306201 0 returned -14 [ 140.374017][ T5793] usb 1-1: USB disconnect, device number 12 [ 140.625319][ T31] audit: type=1400 audit(1790759439.188:399): avc: denied { create } for pid=6952 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.635020][ T31] audit: type=1400 audit(1790759439.198:400): avc: denied { write } for pid=6952 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.675384][ T6956] fuse: Unknown parameter 'y]š' [ 141.029222][ T6969] binder: 6951:6969 ioctl c0306201 0 returned -14 [ 141.496292][ T31] audit: type=1400 audit(1790759440.058:401): avc: denied { write } for pid=6943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1779 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.034478][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 145.034498][ T31] audit: type=1326 audit(1790759443.578:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034541][ T31] audit: type=1326 audit(1790759443.578:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034579][ T31] audit: type=1326 audit(1790759443.578:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034617][ T31] audit: type=1326 audit(1790759443.578:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034655][ T31] audit: type=1326 audit(1790759443.578:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034692][ T31] audit: type=1326 audit(1790759443.578:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034730][ T31] audit: type=1326 audit(1790759443.578:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034767][ T31] audit: type=1326 audit(1790759443.578:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034811][ T31] audit: type=1326 audit(1790759443.578:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 145.034848][ T31] audit: type=1326 audit(1790759443.588:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 146.460352][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.680355][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 146.680984][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 146.684153][ T9] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 146.684176][ T9] usb 4-1: Product: syz [ 146.684189][ T9] usb 4-1: Manufacturer: syz [ 146.684204][ T9] usb 4-1: SerialNumber: syz [ 146.729432][ T9] usb 4-1: config 0 descriptor?? [ 146.752697][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 146.933998][ T9] gspca_zc3xx: reg_w_i err -71 [ 146.934069][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 146.940539][ T9] usb 4-1: USB disconnect, device number 10 [ 147.402247][ T7048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.761421][ T7061] ip6gre1: entered promiscuous mode [ 147.761441][ T7061] ip6gre1: entered allmulticast mode [ 148.420542][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 149.510192][ T7074] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.023380][ T5793] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 151.076345][ T31] kauditd_printk_skb: 139 callbacks suppressed [ 151.076361][ T31] audit: type=1400 audit(1790759449.638:555): avc: denied { shutdown } for pid=7082 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.148405][ T31] audit: type=1400 audit(1790759449.708:556): avc: denied { map } for pid=7084 comm="syz.4.381" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.148682][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 151.211252][ T5793] usb 1-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 151.212120][ T5793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.212156][ T5793] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.212190][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.264713][ T5793] ums-sddr55 1-1:1.0: USB Mass Storage device detected [ 151.282264][ T5793] ums-sddr55 1-1:1.0: This device (55aa,a103,0000 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 151.282264][ T5793] Please send a copy of this message to and [ 151.393178][ T31] audit: type=1400 audit(1790759449.958:557): avc: denied { create } for pid=7095 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.430971][ T5744] usb 1-1: USB disconnect, device number 13 [ 151.526035][ T31] audit: type=1400 audit(1790759450.088:558): avc: denied { bind } for pid=7091 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.529572][ T7093] vers=2.0 not permitted when mounting with smb3 [ 151.529572][ T7093] [ 151.529748][ T7093] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 151.532038][ T31] audit: type=1400 audit(1790759450.098:559): avc: denied { ioctl } for pid=7091 comm="syz.3.383" path="socket:[14436]" dev="sockfs" ino=14436 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.576780][ T31] audit: type=1400 audit(1790759450.138:560): avc: denied { create } for pid=7094 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.595748][ T31] audit: type=1400 audit(1790759450.158:561): avc: denied { search } for pid=7103 comm="syz.3.388" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.595940][ T31] audit: type=1400 audit(1790759450.158:562): avc: denied { search } for pid=7103 comm="syz.3.388" name="usb_gadget" dev="configfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.617254][ T31] audit: type=1400 audit(1790759450.178:563): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 151.994015][ T31] audit: type=1400 audit(1790759450.558:564): avc: denied { bind } for pid=7110 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.957386][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.058014][ T7122] hub 8-0:1.0: USB hub found [ 153.090451][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 153.104423][ T7122] hub 8-0:1.0: 1 port detected [ 154.646223][ T7125] team0: Port device team_slave_0 removed [ 154.982057][ T5605] Bluetooth: hci5: command 0x1003 tx timeout [ 154.983910][ T5602] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 156.370459][ T30] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 156.574233][ T30] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.576659][ T30] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.576683][ T30] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.576698][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.576730][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 156.576755][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 156.577993][ T30] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.578010][ T30] usb 1-1: Product: syz [ 156.578021][ T30] usb 1-1: Manufacturer: syz [ 156.674568][ T30] cdc_wdm 1-1:1.0: skipping garbage [ 156.674587][ T30] cdc_wdm 1-1:1.0: skipping garbage [ 156.694305][ T30] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 156.694325][ T30] cdc_wdm 1-1:1.0: Unknown control protocol [ 156.996138][ T7154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.457320][ T5744] usb 1-1: USB disconnect, device number 14 [ 157.495765][ T5734] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.524300][ T7164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 157.643204][ T5734] usb 5-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 157.644619][ T5734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.644652][ T5734] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.644675][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.648912][ T5734] ums-sddr55 5-1:1.0: USB Mass Storage device detected [ 157.652454][ T5734] ums-sddr55 5-1:1.0: This device (55aa,a103,0000 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 157.652454][ T5734] Please send a copy of this message to and [ 157.800261][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 157.808374][ T31] audit: type=1400 audit(1790759456.358:568): avc: denied { create } for pid=7179 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.830010][ T31] audit: type=1400 audit(1790759456.378:569): avc: denied { connect } for pid=7179 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.855710][ T31] audit: type=1400 audit(1790759456.398:570): avc: denied { setopt } for pid=7179 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.855739][ T31] audit: type=1400 audit(1790759456.398:571): avc: denied { ioctl } for pid=7179 comm="syz.2.407" path="socket:[13714]" dev="sockfs" ino=13714 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.921593][ T31] audit: type=1400 audit(1790759456.488:572): avc: denied { write } for pid=7179 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.924693][ T31] audit: type=1400 audit(1790759456.488:573): avc: denied { bind } for pid=7179 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.039477][ T5734] usb 5-1: USB disconnect, device number 7 [ 158.139087][ T7185] netlink: 'syz.0.408': attribute type 2 has an invalid length. [ 159.631772][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 161.600465][ T5744] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 161.781501][ T7250] binder: 7242:7250 ioctl c0306201 0 returned -14 [ 162.201184][ T5744] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 162.221315][ T5744] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.221360][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.275998][ T5744] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 162.276161][ T5744] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 162.276215][ T5744] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 162.316951][ T5744] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 162.317029][ T5744] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 162.428194][ T5744] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 162.448638][ T5744] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 162.448715][ T5744] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 162.470484][ T5744] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 162.544850][ T7255] ip_tables: iptables: counters copy to user failed while replacing table [ 163.097143][ T31] audit: type=1400 audit(1790759461.658:574): avc: denied { bind } for pid=7236 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.569509][ T5793] usb 4-1: USB disconnect, device number 11 [ 163.585688][ T5793] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 163.601401][ T5793] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 163.601923][ T5793] keyspan 4-1:1.0: device disconnected [ 163.630414][ T30] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 163.810973][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.812282][ T30] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 163.812313][ T30] usb 5-1: can't read configurations, error -61 [ 163.950382][ T30] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 164.115387][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 164.119857][ T30] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 164.119890][ T30] usb 5-1: can't read configurations, error -61 [ 164.138134][ T30] usb usb5-port1: attempt power cycle [ 164.541362][ T31] audit: type=1400 audit(1790759463.078:575): avc: denied { getopt } for pid=7276 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.541412][ T31] audit: type=1400 audit(1790759463.078:576): avc: denied { setopt } for pid=7276 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.390446][ T30] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 165.414237][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 165.415438][ T30] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 165.415464][ T30] usb 5-1: can't read configurations, error -61 [ 165.550412][ T30] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 165.742663][ T30] usb 5-1: device descriptor read/8, error -71 [ 165.890317][ T30] usb usb5-port1: unable to enumerate USB device [ 166.550990][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 167.112575][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 167.113339][ T7313] jffs2: notice: (7313) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.447798][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 167.461887][ T5734] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 167.648127][ T31] audit: type=1326 audit(1790759466.208:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.1.440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1a839e159 code=0x0 [ 167.705025][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 167.709898][ T30] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 167.710466][ T30] usb 5-1: config 0 has no interfaces? [ 167.710501][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.717492][ T30] usb 5-1: config 0 descriptor?? [ 167.734457][ T5734] usb 4-1: Using ep0 maxpacket: 8 [ 167.736605][ T5734] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 167.738525][ T5734] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.738546][ T5734] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.738571][ T5734] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 167.738597][ T5734] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 167.741322][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.741344][ T5734] usb 4-1: Product: syz [ 167.741356][ T5734] usb 4-1: Manufacturer: syz [ 167.741368][ T5734] usb 4-1: SerialNumber: syz [ 167.839780][ T31] audit: type=1400 audit(1790759466.398:578): avc: denied { name_connect } for pid=7325 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 167.845965][ T7326] 9p: Bad value for 'wfdno' [ 167.860803][ T31] audit: type=1400 audit(1790759466.408:579): avc: denied { listen } for pid=7325 comm="syz.0.441" lport=37048 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.860847][ T31] audit: type=1400 audit(1790759466.408:580): avc: denied { accept } for pid=7325 comm="syz.0.441" lport=37048 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.860882][ T31] audit: type=1400 audit(1790759466.408:581): avc: denied { getopt } for pid=7325 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.860914][ T31] audit: type=1400 audit(1790759466.408:582): avc: denied { read } for pid=7325 comm="syz.0.441" dev="sockfs" ino=13937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.937428][ T7299] loop0: detected capacity change from 0 to 32768 [ 167.962027][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 167.984322][ T31] audit: type=1400 audit(1790759466.548:583): avc: denied { connect } for pid=7302 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.013188][ T7299] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 168.014909][ T10] usb 5-1: USB disconnect, device number 12 [ 168.099561][ T7331] syz.3.437 uses obsolete (PF_INET,SOCK_PACKET) [ 168.104183][ T7310] ceph: No mds server is up or the cluster is laggy [ 168.264334][ T5734] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 168.268289][ T5734] usb 4-1: USB disconnect, device number 12 [ 168.302882][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.460418][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 168.460438][ T31] audit: type=1400 audit(1790759466.988:585): avc: denied { write } for pid=7333 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.460479][ T31] audit: type=1400 audit(1790759466.988:586): avc: denied { ioctl } for pid=7333 comm="syz.1.443" path="socket:[14029]" dev="sockfs" ino=14029 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 170.745720][ T1214] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 171.349933][ T31] audit: type=1400 audit(1790759469.908:587): avc: denied { mount } for pid=7358 comm="syz.0.452" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 171.388175][ T7364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.422314][ T1214] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 171.422354][ T1214] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 171.423313][ T1214] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 171.423336][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.423353][ T1214] usb 4-1: config 0 has no interfaces? [ 171.424175][ T1214] usb 4-1: config index 1 descriptor too short (expected 28277, got 36) [ 171.424197][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.424214][ T1214] usb 4-1: config 0 has no interfaces? [ 171.425074][ T1214] usb 4-1: config index 2 descriptor too short (expected 28277, got 36) [ 171.425095][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.425113][ T1214] usb 4-1: config 0 has no interfaces? [ 171.425930][ T1214] usb 4-1: config index 3 descriptor too short (expected 28277, got 36) [ 171.425950][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.425968][ T1214] usb 4-1: config 0 has no interfaces? [ 171.426792][ T1214] usb 4-1: config index 4 descriptor too short (expected 28277, got 36) [ 171.426813][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.426831][ T1214] usb 4-1: config 0 has no interfaces? [ 171.471478][ T1214] usb 4-1: config index 5 descriptor too short (expected 28277, got 36) [ 171.471503][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.471519][ T1214] usb 4-1: config 0 has no interfaces? [ 171.472332][ T1214] usb 4-1: config index 6 descriptor too short (expected 28277, got 36) [ 171.472350][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.472365][ T1214] usb 4-1: config 0 has no interfaces? [ 171.473697][ T1214] usb 4-1: config index 7 descriptor too short (expected 28277, got 36) [ 171.473716][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.473731][ T1214] usb 4-1: config 0 has no interfaces? [ 171.473752][ T1214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.476977][ T1214] usb 4-1: config 0 descriptor?? [ 172.220730][ T31] audit: type=1400 audit(1790759470.738:588): avc: denied { read } for pid=7369 comm="syz.4.447" name="sg0" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.221015][ T31] audit: type=1400 audit(1790759470.738:589): avc: denied { open } for pid=7369 comm="syz.4.447" path="/dev/sg0" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.221165][ T31] audit: type=1400 audit(1790759470.738:590): avc: denied { bind } for pid=7369 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.221283][ T31] audit: type=1400 audit(1790759470.738:591): avc: denied { setopt } for pid=7369 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.221429][ T31] audit: type=1400 audit(1790759470.738:592): avc: denied { listen } for pid=7369 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.652741][ T31] audit: type=1400 audit(1790759471.218:593): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 173.340140][ T1214] usb 4-1: string descriptor 0 read error: -71 [ 173.343112][ T1214] usb 4-1: USB disconnect, device number 13 [ 173.467277][ T7389] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 173.476754][ T7389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.495631][ T31] audit: type=1400 audit(1790759472.058:594): avc: denied { setopt } for pid=7390 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.503579][ T7389] bond1: (slave gretap1): making interface the new active one [ 173.504319][ T7389] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 173.554371][ T7389] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 173.556622][ T7389] netlink: 'syz.1.460': attribute type 10 has an invalid length. [ 173.556637][ T7389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.460'. [ 173.587419][ T7389] dummy0: entered promiscuous mode [ 173.751180][ T31] audit: type=1400 audit(1790759472.278:595): avc: denied { bind } for pid=7385 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.927908][ T7389] bond1: (slave dummy0): Releasing active interface [ 173.927943][ T7389] gretap1: entered promiscuous mode [ 174.867025][ T31] audit: type=1400 audit(1790759473.428:596): avc: denied { accept } for pid=7407 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.956533][ T31] audit: type=1326 audit(1790759473.518:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.0.466" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a34f9e159 code=0x7ffc0000 [ 174.956659][ T31] audit: type=1326 audit(1790759473.518:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.0.466" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a34f9e159 code=0x7ffc0000 [ 174.958913][ T31] audit: type=1326 audit(1790759473.518:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.0.466" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a34f9e159 code=0x7ffc0000 [ 174.959065][ T31] audit: type=1326 audit(1790759473.518:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.0.466" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a34f9e159 code=0x7ffc0000 [ 174.959153][ T31] audit: type=1326 audit(1790759473.518:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.0.466" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f7a34f9e159 code=0x7ffc0000 [ 174.959262][ T31] audit: type=1326 audit(1790759473.518:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.0.466" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a34f9e159 code=0x7ffc0000 [ 174.959387][ T31] audit: type=1326 audit(1790759473.518:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.0.466" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a34f9e159 code=0x7ffc0000 [ 175.211108][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 175.211179][ T7416] bridge_slave_1: left allmulticast mode [ 175.211197][ T7416] bridge_slave_1: left promiscuous mode [ 175.212531][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.258078][ T5744] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 175.285581][ T7416] bridge_slave_0: left allmulticast mode [ 175.285606][ T7416] bridge_slave_0: left promiscuous mode [ 175.285786][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.420934][ T5744] usb 1-1: Using ep0 maxpacket: 8 [ 175.422001][ T5744] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.423602][ T5744] usb 1-1: config 0 has no interfaces? [ 175.423630][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.426043][ T5744] usb 1-1: config 0 descriptor?? [ 175.648189][ T7412] loop0: detected capacity change from 0 to 32768 [ 175.684436][ T5708] usb 1-1: USB disconnect, device number 15 [ 175.860380][ T30] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 176.010367][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 176.011723][ T30] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 176.014252][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.014274][ T30] usb 4-1: Product: syz [ 176.014288][ T30] usb 4-1: Manufacturer: syz [ 176.014301][ T30] usb 4-1: SerialNumber: syz [ 176.016568][ T30] usb 4-1: config 0 descriptor?? [ 176.024331][ T30] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 176.219321][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 176.221296][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 176.266368][ T7413] syz.4.465 (7413): drop_caches: 2 [ 176.278092][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 176.317604][ T30] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 176.328178][ T30] usb 4-1: USB disconnect, device number 14 [ 176.424828][ T7436] bridge0: port 3(veth1_to_bridge) entered blocking state [ 176.424910][ T7436] bridge0: port 3(veth1_to_bridge) entered disabled state [ 176.425112][ T7436] veth1_to_bridge: entered allmulticast mode [ 176.431522][ T7436] veth1_to_bridge: entered promiscuous mode [ 176.431668][ T7436] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 176.435644][ T7436] bridge0: port 3(veth1_to_bridge) entered blocking state [ 176.435773][ T7436] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 176.620354][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 176.710619][ T5708] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 176.780376][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 176.780922][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 176.781368][ T9] usb 1-1: config 0 has no interfaces? [ 176.781384][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.783998][ T9] usb 1-1: config 0 descriptor?? [ 176.860370][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 176.957661][ T5708] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 177.021569][ T7435] loop2: detected capacity change from 0 to 32768 [ 177.033917][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 177.033947][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.033978][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.342050][ T5708] usb 5-1: config 0 descriptor?? [ 178.428003][ T5708] lenovo 0003:17EF:6047.0005: item fetching failed at offset 2/40 [ 178.428707][ T5708] lenovo 0003:17EF:6047.0005: hid_parse failed [ 178.428764][ T5708] lenovo 0003:17EF:6047.0005: probe with driver lenovo failed with error -22 [ 178.463767][ T7455] pim6reg: entered allmulticast mode [ 178.517971][ T31] kauditd_printk_skb: 161 callbacks suppressed [ 178.517990][ T31] audit: type=1326 audit(1790759477.078:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.518479][ T31] audit: type=1326 audit(1790759477.078:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.518655][ T31] audit: type=1326 audit(1790759477.078:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.518834][ T31] audit: type=1326 audit(1790759477.078:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.519001][ T31] audit: type=1326 audit(1790759477.078:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.519294][ T31] audit: type=1326 audit(1790759477.078:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.519477][ T31] audit: type=1326 audit(1790759477.078:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.519681][ T31] audit: type=1326 audit(1790759477.078:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.519922][ T31] audit: type=1326 audit(1790759477.078:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.520124][ T31] audit: type=1326 audit(1790759477.078:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.3.480" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52b99e159 code=0x7ffc0000 [ 178.635963][ T7438] loop6: detected capacity change from 0 to 2640 [ 178.653337][ T7014] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.653812][ T7014] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.655015][ T7014] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.656583][ T7014] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.656977][ T7014] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.705763][ T5708] usb 5-1: USB disconnect, device number 13 [ 179.650429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 180.184679][ T5744] usb 1-1: USB disconnect, device number 16 [ 180.470352][ T30] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 180.856740][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.856784][ T30] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 180.859649][ T30] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 180.924619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 180.982803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 181.353362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 181.413469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 181.472987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 181.492945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 181.506162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 181.523324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 182.946414][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.014851][ T30] usb 4-1: can't set config #4, error -71 [ 183.028477][ T30] usb 4-1: USB disconnect, device number 15 [ 183.031554][ T7480] FAULT_INJECTION: forcing a failure. [ 183.031554][ T7480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.031586][ T7480] CPU: 1 UID: 0 PID: 7480 Comm: syz.4.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.031611][ T7480] Tainted: [L]=SOFTLOCKUP [ 183.031619][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 183.031629][ T7480] Call Trace: [ 183.031635][ T7480] [ 183.031643][ T7480] dump_stack_lvl+0x100/0x190 [ 183.031675][ T7480] should_fail_ex.cold+0x5/0xa [ 183.031702][ T7480] _copy_from_user+0x2e/0xd0 [ 183.031729][ T7480] kstrtouint_from_user+0xd6/0x1d0 [ 183.031756][ T7480] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 183.031788][ T7480] ? lock_acquire+0x1d1/0x380 [ 183.031815][ T7480] proc_fail_nth_write+0x83/0x220 [ 183.031841][ T7480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 183.031872][ T7480] vfs_write+0x2aa/0x1050 [ 183.031895][ T7480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 183.031919][ T7480] ? lock_acquire+0x1d1/0x380 [ 183.031938][ T7480] ? __fget_files+0x34/0x3d0 [ 183.031962][ T7480] ? __pfx_vfs_write+0x10/0x10 [ 183.031981][ T7480] ? find_held_lock+0x2b/0x80 [ 183.032008][ T7480] ? __fget_files+0x215/0x3d0 [ 183.032036][ T7480] ? __fget_files+0x21f/0x3d0 [ 183.032068][ T7480] ksys_write+0x12a/0x250 [ 183.032088][ T7480] ? __pfx_ksys_write+0x10/0x10 [ 183.032116][ T7480] do_syscall_64+0x123/0x790 [ 183.032138][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.032156][ T7480] RIP: 0033:0x7f8b6835e98e [ 183.032172][ T7480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.032189][ T7480] RSP: 002b:00007f8b69279fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.032207][ T7480] RAX: ffffffffffffffda RBX: 00007f8b6927a6c0 RCX: 00007f8b6835e98e [ 183.032219][ T7480] RDX: 0000000000000001 RSI: 00007f8b6927a0a0 RDI: 0000000000000003 [ 183.032230][ T7480] RBP: 00007f8b6927a090 R08: 0000000000000000 R09: 0000000000000000 [ 183.032240][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.032251][ T7480] R13: 00007f8b68626128 R14: 00007f8b68626090 R15: 00007ffea506c5b8 [ 183.032283][ T7480] [ 184.101549][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 184.101567][ T31] audit: type=1400 audit(1790759482.668:801): avc: denied { setopt } for pid=7488 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.230357][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 184.470400][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 184.472890][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.473845][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 184.473890][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.473912][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.473933][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.473955][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.473988][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.720873][ T7499] FAULT_INJECTION: forcing a failure. [ 184.720873][ T7499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.720930][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.3.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.720956][ T7499] Tainted: [L]=SOFTLOCKUP [ 184.720962][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 184.720973][ T7499] Call Trace: [ 184.720980][ T7499] [ 184.720987][ T7499] dump_stack_lvl+0x100/0x190 [ 184.721019][ T7499] should_fail_ex.cold+0x5/0xa [ 184.721048][ T7499] _copy_from_iter+0x1f4/0x1690 [ 184.721076][ T7499] ? __pfx__copy_from_iter+0x10/0x10 [ 184.721099][ T7499] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 184.721128][ T7499] ? lock_acquire+0x1d1/0x380 [ 184.721154][ T7499] copy_page_from_iter+0x238/0x300 [ 184.721180][ T7499] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 184.721214][ T7499] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 184.721237][ T7499] ? unwind_get_return_address+0x59/0xa0 [ 184.721263][ T7499] ? arch_stack_walk+0xa6/0xf0 [ 184.721300][ T7499] ? _kstrtoull+0x144/0x200 [ 184.721325][ T7499] ? __pfx__kstrtoull+0x10/0x10 [ 184.721353][ T7499] tun_get_user+0x1674/0x3cc0 [ 184.721386][ T7499] ? __lock_acquire+0x5c0/0x1f40 [ 184.721406][ T7499] ? __pfx_tun_get_user+0x10/0x10 [ 184.721432][ T7499] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 184.721467][ T7499] ? find_held_lock+0x2b/0x80 [ 184.721494][ T7499] ? tun_get+0x191/0x370 [ 184.721514][ T7499] ? tun_get+0x191/0x370 [ 184.721542][ T7499] tun_chr_write_iter+0xdc/0x200 [ 184.721569][ T7499] vfs_write+0x6af/0x1050 [ 184.721590][ T7499] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 184.721616][ T7499] ? __pfx_vfs_write+0x10/0x10 [ 184.721635][ T7499] ? find_held_lock+0x2b/0x80 [ 184.721676][ T7499] ksys_write+0x12a/0x250 [ 184.721696][ T7499] ? __pfx_ksys_write+0x10/0x10 [ 184.721724][ T7499] do_syscall_64+0x123/0x790 [ 184.721745][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.721769][ T7499] RIP: 0033:0x7fe52b95e98e [ 184.721785][ T7499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.721801][ T7499] RSP: 002b:00007fe52c8dffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.721820][ T7499] RAX: ffffffffffffffda RBX: 00007fe52c8e06c0 RCX: 00007fe52b95e98e [ 184.721833][ T7499] RDX: 0000000000000011 RSI: 0000200000000000 RDI: 00000000000000c8 [ 184.721844][ T7499] RBP: 00007fe52c8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 184.721855][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.721865][ T7499] R13: 00007fe52bc26038 R14: 00007fe52bc25fa0 R15: 00007ffc04f82138 [ 184.721890][ T7499] [ 185.701758][ T25] usb 5-1: usb_control_msg returned -32 [ 185.701803][ T25] usbtmc 5-1:16.0: can't read capabilities [ 185.780456][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 185.860659][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 185.860726][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 185.860764][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 186.293149][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 186.364617][ T7507] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 187.026024][ T7509] netlink: 'syz.0.489': attribute type 12 has an invalid length. [ 187.026049][ T7509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 187.072384][ T31] audit: type=1400 audit(1790759485.638:802): avc: denied { accept } for pid=7508 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.437169][ T31] audit: type=1400 audit(1790759485.998:803): avc: denied { execute } for pid=7521 comm="syz.0.501" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 187.686734][ T7523] bridge1: entered promiscuous mode [ 187.735970][ T25] usb 5-1: USB disconnect, device number 14 [ 187.840828][ T30] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.024593][ T31] audit: type=1400 audit(1790759486.588:804): avc: denied { name_bind } for pid=7525 comm="syz.3.502" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 188.067632][ T7528] gadgetfs: bound to dummy_udc driver [ 188.890386][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.901061][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.058898][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 189.082888][ T31] audit: type=1400 audit(1790759487.228:805): avc: denied { mount } for pid=7525 comm="syz.3.502" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 189.089776][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.089819][ T30] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 189.532357][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.532382][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.551650][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.551674][ T30] usb 1-1: Product: syz [ 189.551687][ T30] usb 1-1: Manufacturer: syz [ 189.551700][ T30] usb 1-1: SerialNumber: syz [ 189.763215][ T5734] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 189.763444][ C1] gadgetfs: connected [ 189.763811][ T5734] gadgetfs: disconnected [ 189.873817][ T7537] binder: 7530:7537 ioctl c0306201 0 returned -14 [ 190.318824][ T31] audit: type=1400 audit(1790759488.878:806): avc: denied { create } for pid=7534 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 190.534987][ T30] usb 1-1: interface 1 not found [ 190.562658][ T30] usb 1-1: USB disconnect, device number 17 [ 190.746262][ T31] audit: type=1400 audit(1790759489.308:807): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 190.773788][ T31] audit: type=1400 audit(1790759489.338:808): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 190.930173][ T31] audit: type=1400 audit(1790759489.488:809): avc: denied { remount } for pid=7543 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.273130][ T31] audit: type=1326 audit(1790759489.828:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7548 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 191.273389][ T31] audit: type=1326 audit(1790759489.838:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7548 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 191.360365][ T31] audit: type=1326 audit(1790759489.918:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7548 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 191.360417][ T31] audit: type=1326 audit(1790759489.918:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7548 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 191.360482][ T31] audit: type=1326 audit(1790759489.918:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7548 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 191.362766][ T31] audit: type=1326 audit(1790759489.928:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7548 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1a839e159 code=0x7ffc0000 [ 191.641000][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 191.641022][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 191.980288][ C0] sched: DL replenish lagged too much [ 193.869488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.870932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.871804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.872582][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.873365][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.874161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.874942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.875723][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.876526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.877315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.870489][ C0] net_ratelimit: 10908 callbacks suppressed [ 198.870505][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.870985][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.871428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.871897][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.872351][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.872802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.873254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.873734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.874177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.874625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 203.880386][ C1] net_ratelimit: 20752 callbacks suppressed [ 203.880409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 203.880689][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.880953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 203.880966][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.881248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 203.881525][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.881825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.882080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 203.882107][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 203.882383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.890508][ C1] net_ratelimit: 21907 callbacks suppressed [ 208.890534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.890786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 208.890827][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.891126][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 208.891422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.891742][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.891824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 208.892035][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 208.892333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.892624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.900465][ C1] net_ratelimit: 21294 callbacks suppressed [ 213.900489][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.900792][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.900817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 213.901098][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 213.901403][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.901701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.901807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 213.902002][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 213.902348][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.902649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.346710][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 218.910419][ C1] net_ratelimit: 21721 callbacks suppressed [ 218.910441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.910508][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.910759][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.911078][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 218.911394][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.911569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.911706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.912019][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 218.912351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.912683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.920513][ C1] net_ratelimit: 21505 callbacks suppressed [ 223.920535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.920831][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 223.921059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 223.921133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.921573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.921881][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 223.921986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 223.922184][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.922483][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.922785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 228.930487][ C1] net_ratelimit: 21531 callbacks suppressed [ 228.930510][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 228.930837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.931138][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.931255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 228.931437][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 228.931739][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.932044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.932317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 228.932343][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 228.932646][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.940443][ C1] net_ratelimit: 21676 callbacks suppressed [ 233.940465][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 233.940767][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.941062][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.941233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.941361][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 233.941652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.941946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.942294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 233.942302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.942592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.950306][ C0] net_ratelimit: 22760 callbacks suppressed [ 238.950329][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.950383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 238.950716][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.951018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.951326][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 238.951397][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.951630][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.951930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.952264][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 238.952454][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.960280][ C0] net_ratelimit: 21878 callbacks suppressed [ 243.960303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.961179][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.962039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.962900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.963800][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.964697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.965601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.966481][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.967843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.968721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.970377][ C1] net_ratelimit: 21835 callbacks suppressed [ 248.970399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.970701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.970806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.971031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 248.971335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.971636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.971789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.971937][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 248.972281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.972588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.282062][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.290459][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.980330][ C1] net_ratelimit: 22046 callbacks suppressed [ 253.980353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 253.980644][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.980918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.980926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.981242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 253.981529][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.981812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.981890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.982097][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 253.982385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.990462][ C1] net_ratelimit: 22002 callbacks suppressed [ 258.990485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 258.990634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.990769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.991053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.991392][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 258.991567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.991675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.991958][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.992248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 258.992510][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.000300][ C1] net_ratelimit: 21891 callbacks suppressed [ 264.000322][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.000616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.000904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.000905][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 264.001192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.001476][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.001797][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 264.001846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.002083][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.002711][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.010473][ C1] net_ratelimit: 21443 callbacks suppressed [ 269.010494][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.010822][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 269.011005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.011140][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.011456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.011777][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 269.011952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.012120][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.012433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.012753][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 274.020295][ C1] net_ratelimit: 21254 callbacks suppressed [ 274.020317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.020620][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.020923][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 274.021193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 274.021231][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.021531][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.021835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 274.022144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.022331][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 274.022441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.030349][ C1] net_ratelimit: 22544 callbacks suppressed [ 279.030373][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.030686][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 279.030708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.030995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.031311][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.031619][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 279.031734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.031926][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.032239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.032550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 284.040497][ C1] net_ratelimit: 21984 callbacks suppressed [ 284.040519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.040626][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.040814][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 284.041352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.041579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.041662][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.041980][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 284.042288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.042596][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.042598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.858514][ T5605] Bluetooth: hci4: command 0x0405 tx timeout [ 289.050449][ C1] net_ratelimit: 21551 callbacks suppressed [ 289.050473][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 289.050786][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.051073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.051086][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.051363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 289.051650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.051931][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.052064][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.052213][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 289.052532][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.060321][ C1] net_ratelimit: 21906 callbacks suppressed [ 294.060342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.060646][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 294.060939][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.061041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.061245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.061529][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 294.061818][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.061978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.062101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.062383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 299.070277][ C1] net_ratelimit: 20743 callbacks suppressed [ 299.070299][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 299.070329][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.070588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.070874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.071159][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 299.071452][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.071766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.071775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.072054][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 299.072373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.080309][ C1] net_ratelimit: 19813 callbacks suppressed [ 304.080331][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 304.080628][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.080661][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.080912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.081221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 304.081507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.081796][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.082080][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 304.082102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.082363][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.090289][ C1] net_ratelimit: 19695 callbacks suppressed [ 309.090312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.090432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 309.090597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.090881][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 309.091172][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.091456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.091738][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 309.091895][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 309.092021][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.092313][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.100340][ C1] net_ratelimit: 19774 callbacks suppressed [ 314.100363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 314.100649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.100934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.100993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.101233][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 314.101517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.101799][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.102088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 314.102376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.102461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.110375][ C1] net_ratelimit: 19749 callbacks suppressed [ 319.110399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.110683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.110971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 319.111220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.111263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.111545][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.111828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 319.112119][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.112408][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.112691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.120290][ C1] net_ratelimit: 21002 callbacks suppressed [ 324.120312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.120605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 324.120891][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.120942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.121200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.121225][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.121490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 324.121776][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.122059][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.122342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 327.123974][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.133557][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.130420][ C0] net_ratelimit: 22941 callbacks suppressed [ 329.130441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.130451][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 329.130734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.130836][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.131025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.131305][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 329.131591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.131868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.132149][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 329.132358][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.140456][ C1] net_ratelimit: 23496 callbacks suppressed [ 334.140479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.140764][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.141048][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 334.141359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.141678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.141678][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.141957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 334.142005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.142267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.142548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.150393][ C0] net_ratelimit: 25623 callbacks suppressed [ 339.150414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 339.150435][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 339.150714][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.150988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.151264][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 339.151548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.151826][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.152102][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 339.152153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 339.152410][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.341235][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 344.160346][ C1] net_ratelimit: 27722 callbacks suppressed [ 344.160368][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 344.160647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.160927][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.161203][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 344.161481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.161501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.161762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.161820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.162061][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 344.162362][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.851234][ T32] INFO: task syz.1.508:7554 blocked for more than 142 seconds. [ 346.851261][ T32] Tainted: G L syzkaller #0 [ 346.851272][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.851280][ T32] task:syz.1.508 state:D stack:27576 pid:7554 tgid:7548 ppid:5601 task_flags:0x400140 flags:0x00080002 [ 346.851343][ T32] Call Trace: [ 346.851350][ T32] [ 346.851361][ T32] __schedule+0x1259/0x6920 [ 346.851395][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 346.851422][ T32] ? do_raw_spin_lock+0x128/0x260 [ 346.851456][ T32] ? __pfx___schedule+0x10/0x10 [ 346.851482][ T32] ? find_held_lock+0x2b/0x80 [ 346.851510][ T32] ? schedule+0x225/0x2c0 [ 346.851542][ T32] schedule+0xdd/0x2c0 [ 346.851570][ T32] schedule_preempt_disabled+0x13/0x30 [ 346.851597][ T32] __mutex_lock+0xccb/0x1bd0 [ 346.851618][ T32] ? rtnl_newlink+0xac3/0x2620 [ 346.851652][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 346.851671][ T32] ? rcu_is_watching+0x13/0xc0 [ 346.851699][ T32] ? cap_capable+0x107/0x430 [ 346.851727][ T32] ? ns_capable+0xd2/0xf0 [ 346.851751][ T32] ? rtnl_newlink+0xac3/0x2620 [ 346.851778][ T32] rtnl_newlink+0xac3/0x2620 [ 346.851815][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 346.851841][ T32] ? avc_has_perm_noaudit+0x56/0x470 [ 346.851871][ T32] ? find_held_lock+0x2b/0x80 [ 346.851897][ T32] ? avc_has_perm_noaudit+0x11e/0x470 [ 346.851925][ T32] ? avc_has_perm_noaudit+0x11e/0x470 [ 346.851978][ T32] ? lock_acquire+0x1d1/0x380 [ 346.852000][ T32] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 346.852028][ T32] ? find_held_lock+0x2b/0x80 [ 346.852055][ T32] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 346.852082][ T32] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 346.852111][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 346.852140][ T32] rtnetlink_rcv_msg+0x95e/0xe90 [ 346.852170][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.852206][ T32] ? ref_tracker_free+0x37e/0x6c0 [ 346.852243][ T32] netlink_rcv_skb+0x159/0x420 [ 346.852272][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.852302][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.852335][ T32] ? netlink_deliver_tap+0x1ae/0xcc0 [ 346.852364][ T32] netlink_unicast+0x585/0x850 [ 346.852392][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 346.852423][ T32] netlink_sendmsg+0x8b0/0xda0 [ 346.852452][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.852479][ T32] ? selinux_socket_sendmsg+0x198/0x2f0 [ 346.852507][ T32] ____sys_sendmsg+0xa4d/0xbe0 [ 346.852526][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.852552][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.852584][ T32] ___sys_sendmsg+0x190/0x1e0 [ 346.852607][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.852628][ T32] ? futex_wait+0x11e/0x370 [ 346.852658][ T32] ? find_held_lock+0x2b/0x80 [ 346.852702][ T32] __sys_sendmsg+0x160/0x210 [ 346.852729][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.852770][ T32] do_syscall_64+0x123/0x790 [ 346.852792][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.852812][ T32] RIP: 0033:0x7fc1a839e159 [ 346.852828][ T32] RSP: 002b:00007fc1a92d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.852847][ T32] RAX: ffffffffffffffda RBX: 00007fc1a8626090 RCX: 00007fc1a839e159 [ 346.852860][ T32] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 346.852872][ T32] RBP: 00007fc1a843506b R08: 0000000000000000 R09: 0000000000000000 [ 346.852883][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.852894][ T32] R13: 00007fc1a8626128 R14: 00007fc1a8626090 R15: 00007fff18fd0458 [ 346.852921][ T32] [ 346.852931][ T32] [ 346.852931][ T32] Showing all locks held in the system: [ 346.852938][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 346.852951][ T32] #0: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 346.853004][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#0: [ 346.853017][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 346.853068][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 346.853081][ T32] #0: ffff8880575f4d40 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.853139][ T32] #1: ffffc900000e7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.853209][ T32] #2: ffff88807a61d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 346.853270][ T32] locks held by kworker/0:1/10: 2, on CPU#0: [ 346.853283][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.853335][ T32] #1: ffffc900000f7d08 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.853387][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 346.853401][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.853455][ T32] #1: ffffc90000117d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.853508][ T32] #2: ffff888054fd0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.853556][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 346.853569][ T32] #0: ffff888035148940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.853626][ T32] #1: ffffc90000127d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.853680][ T32] #2: ffff88807a61d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 346.853733][ T32] #3: ffff888032ebc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 346.853788][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 346.853802][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 346.853855][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 346.853867][ T32] #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 346.853919][ T32] locks held by kworker/1:0/25: 4, last CPU#1: [ 346.853932][ T32] #0: ffff8880578d4540 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.853988][ T32] #1: ffffc900001f7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.854058][ T32] #2: ffff8880273cd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 346.854112][ T32] #3: ffff888056e0c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 346.854167][ T32] locks held by kworker/1:1/30: 2, last CPU#1: [ 346.854180][ T32] #0: ffff8880578eb940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.854242][ T32] #1: ffffc90000a57d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.854313][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 346.854326][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 346.854379][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 346.854392][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.854445][ T32] #1: ffffc90000b37d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.854498][ T32] #2: ffff888055b00800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.854544][ T32] locks held by kworker/u8:3/50: 4, on CPU#0: [ 346.854556][ T32] #0: ffff88802c740140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.854613][ T32] #1: ffffc90000ba7d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.854667][ T32] #2: ffff888023b59440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 346.854720][ T32] #3: ffff8880375fa0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 346.854773][ T32] locks held by kworker/u8:4/59: 8, last CPU#0: [ 346.854787][ T32] #0: ffff888021ad8940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.854839][ T32] #1: ffffc9000201fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.854892][ T32] #2: ffff88803605a0e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 346.854945][ T32] #3: ffff888036058c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 346.854991][ T32] #4: ffff88803630e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 346.855037][ T32] #5: ffff88807510d3a8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x45a/0xdd0 [ 346.855090][ T32] #6: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 346.855137][ T32] #7: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 346.855189][ T32] locks held by kworker/R-ksmbd/112: 1, on CPU#0: [ 346.855202][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 346.855260][ T32] locks held by kworker/u8:5/309: 3, last CPU#0: [ 346.855273][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.855325][ T32] #1: ffffc9000342fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.855378][ T32] #2: ffff888054e00800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.855425][ T32] locks held by kworker/u8:6/781: 4, last CPU#0: [ 346.855438][ T32] #0: ffff88802befe140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.855495][ T32] #1: ffffc900043dfd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.855549][ T32] #2: ffff88807d0e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 346.855602][ T32] #3: ffff888056e0aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 346.855657][ T32] locks held by kworker/1:2/983: 3, last CPU#1: [ 346.855670][ T32] #0: ffff8880578c6140 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.855727][ T32] #1: ffffc90004d87d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.855797][ T32] #2: ffff888056e0a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 346.855852][ T32] locks held by kworker/u8:7/1122: 3, last CPU#0: [ 346.855866][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.855920][ T32] #1: ffffc90005087d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.855972][ T32] #2: ffff888055540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.856017][ T32] locks held by kworker/0:2/1214: 3, last CPU#0: [ 346.856030][ T32] #0: ffff8880578c6940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.856086][ T32] #1: ffffc90005377d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.856157][ T32] #2: ffff888056e0f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 346.856211][ T32] locks held by kworker/u8:8/1430: 3, last CPU#0: [ 346.856223][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.856281][ T32] #1: ffffc90005df7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.856334][ T32] #2: ffff888055740800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.856381][ T32] locks held by kworker/u8:9/1447: 3, last CPU#0: [ 346.856394][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.856447][ T32] #1: ffffc90005f77d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.856500][ T32] #2: ffff888054af0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.856546][ T32] locks held by kworker/u8:10/1465: 3, last CPU#0: [ 346.856560][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.856614][ T32] #1: ffffc90005ec7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.856668][ T32] #2: ffff888054660800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.856714][ T32] locks held by kworker/u8:11/1490: 3, last CPU#0: [ 346.856727][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.856779][ T32] #1: ffffc90006007d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.856832][ T32] #2: ffff888055800800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.856879][ T32] locks held by kworker/u8:12/1519: 3, last CPU#0: [ 346.856892][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.856944][ T32] #1: ffffc900062d7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.856998][ T32] #2: ffff888055ea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 346.857044][ T32] locks held by kworker/0:3/2320: 3, last CPU#0: [ 346.857057][ T32] #0: ffff8880578d4540 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.857112][ T32] #1: ffffc900073afd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.857184][ T32] #2: ffff888056e0d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 346.857255][ T32] locks held by kworker/R-bat_e/3226: 4, last CPU#1: [ 346.857269][ T32] #0: ffff8880342af140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.857320][ T32] #1: ffffc9000e657c68 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.857375][ T32] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x437/0x1600 [ 346.857420][ T32] #3: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __br_forward+0x21f/0x970 [ 346.857471][ T32] locks held by klogd/4960: 1, last CPU#0: [ 346.857485][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 [ 346.857533][ T32] locks held by dhcpcd/5266: 1, last CPU#0: [ 346.857545][ T32] #0: ffff88802694dfe0 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sk_setsockopt+0x1b10/0x5d80 [ 346.857596][ T32] locks held by crond/5340: 3, last CPU#0: [ 346.857609][ T32] #0: ffffffff8f90af38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 346.857655][ T32] #1: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 346.857703][ T32] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 346.857753][ T32] locks held by getty/5362: 2, on CPU#0: [ 346.857766][ T32] #0: ffff88802df8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 346.857811][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 346.857855][ T32] locks held by syz-executor/5608: 2, last CPU#0: [ 346.857867][ T32] #0: ffffffff8f90af38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 346.857911][ T32] #1: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 346.857958][ T32] locks held by kworker/u9:6/5611: 7, on CPU#1: [ 346.857971][ T32] #0: ffff88802af7f940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.858023][ T32] #1: ffffc900040dfd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.858077][ T32] #2: ffff88807a950ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 346.858123][ T32] #3: ffff88807a9500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 346.858168][ T32] #4: ffffffff90f56fc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 346.858210][ T32] #5: ffff88802d387af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0xa1/0x6c0 [ 346.858268][ T32] #6: ffffffff8edf84a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 346.858312][ T32] locks held by kworker/R-wg-cr/5673: 1, on CPU#1: [ 346.858325][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 346.858378][ T32] locks held by kworker/R-wg-cr/5677: 1, last CPU#0: [ 346.858391][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 346.858442][ T32] locks held by kworker/R-wg-cr/5678: 1, on CPU#1: [ 346.858456][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 346.858509][ T32] locks held by kworker/R-wg-cr/5679: 1, on CPU#0: [ 346.858522][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 346.858573][ T32] locks held by kworker/R-wg-cr/5685: 1, on CPU#0: [ 346.858587][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 346.858639][ T32] locks held by kworker/R-wg-cr/5686: 1, last CPU#1: [ 346.858653][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 346.858705][ T32] locks held by kworker/R-wg-cr/5687: 1, last CPU#1: [ 346.858718][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 346.858770][ T32] locks held by kworker/R-wg-cr/5688: 1, on CPU#0: [ 346.858784][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 346.858835][ T32] locks held by kworker/R-wg-cr/5689: 1, on CPU#0: [ 346.858848][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 346.858900][ T32] locks held by kworker/R-wg-cr/5690: 1, on CPU#0: [ 346.858914][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 346.858968][ T32] locks held by kworker/R-wg-cr/5691: 1, on CPU#0: [ 346.858981][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 346.859032][ T32] locks held by kworker/0:4/5694: 3, last CPU#0: [ 346.859045][ T32] #0: ffff8880575f7540 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.859102][ T32] #1: ffffc9000439fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.859173][ T32] #2: ffff888056e08330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 346.859232][ T32] locks held by kworker/0:5/5695: 3, last CPU#0: [ 346.859246][ T32] #0: ffff888057b6f140 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.859304][ T32] #1: ffffc900043afd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.859375][ T32] #2: ffff88802437d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 346.859430][ T32] locks held by kworker/1:3/5708: 4, last CPU#1: [ 346.859444][ T32] #0: ffff888057607940 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.859502][ T32] #1: ffffc9000447fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.859573][ T32] #2: ffff88807cd05440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 346.859627][ T32] #3: ffff8880375f9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 346.859681][ T32] locks held by kworker/0:7/5716: 3, last CPU#0: [ 346.859694][ T32] #0: ffff88807c6ae540 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.859751][ T32] #1: ffffc9000496fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.859823][ T32] #2: ffff88807a631440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 346.859877][ T32] locks held by kworker/1:4/5734: 3, last CPU#1: [ 346.859890][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.859942][ T32] #1: ffffc90004adfd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.859994][ T32] #2: ffffffff8edf84a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 346.860039][ T32] locks held by kworker/0:8/5744: 2, last CPU#0: [ 346.860052][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 346.860105][ T32] #1: ffffc90004aefd08 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 346.860159][ T32] locks held by kworker/1:5/5793: 2, last CPU#1: [ 346.860172][ T32] #0: ffff8880578c6940 ((wq_completion)wg-kex-wg0#2 [ 349.170326][ C1] net_ratelimit: 27595 callbacks suppressed [ 349.170349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.170365][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.170631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.170913][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 349.171195][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.171498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.171787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 349.172069][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.172093][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.172352][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.180256][ C1] net_ratelimit: 28344 callbacks suppressed [ 354.180278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.180559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 354.180841][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.181133][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.181452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 354.181733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.181748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.182007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.182109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.182290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 359.190396][ C1] net_ratelimit: 24686 callbacks suppressed [ 359.190417][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.190674][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.190705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 359.190996][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.191001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.191276][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.191562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 359.191843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.192122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.192401][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 364.200267][ C1] net_ratelimit: 25451 callbacks suppressed [ 364.200287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 364.200371][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.200571][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.200854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.201138][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 364.201419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.201699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.201870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.201979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 364.202155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 366.418817][ T32] ){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 366.418867][ T32] #1: ffffc90004c2fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 366.418942][ T32] locks held by kworker/u8:13/6032: 3, on CPU#1: [ 366.418955][ T32] #0: ffff888033fa1140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 366.419009][ T32] #1: ffffc90005da7d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 366.419063][ T32] #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 366.419120][ T32] locks held by kworker/R-bond1/6729: 1, on CPU#0: [ 366.419133][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 366.419184][ T32] locks held by kworker/u8:14/6763: 3, last CPU#1: [ 366.419197][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 366.419248][ T32] #1: ffffc90002e5fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 366.419300][ T32] #2: ffff8880559d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 366.419346][ T32] locks held by kworker/u8:15/6764: 4, last CPU#1: [ 366.419359][ T32] #0: ffff88802beff940 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 366.419415][ T32] #1: ffffc9000411fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 366.419467][ T32] #2: ffff88802cf81440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 366.419520][ T32] #3: ffff888056e0b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 366.419572][ T32] locks held by kworker/u8:16/7079: 4, on CPU#1: [ 366.419584][ T32] #0: ffff8880268a1940 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 366.419639][ T32] #1: ffffc900031afd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 366.419691][ T32] #2: ffff88807a635440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 366.419744][ T32] #3: ffff888056e08330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 366.419799][ T32] locks held by kworker/1:7/7314: 3, last CPU#1: [ 366.419812][ T32] #0: ffff88807abbbd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 366.419868][ T32] #1: ffffc90004b4fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 366.419937][ T32] #2: ffff888056e0bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 366.419990][ T32] locks held by kworker/R-bond1/7395: 1, on CPU#0: [ 366.420003][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 366.420051][ T32] locks held by syz.4.503/7536: 1, last CPU#1: [ 366.420064][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 366.420118][ T32] locks held by syz.1.508/7550: 3, last CPU#1: [ 366.420130][ T32] #0: ffffffff91459348 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 366.420184][ T32] #1: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 366.430058][ T32] #2: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 366.430113][ T32] locks held by syz.1.508/7554: 2, on CPU#1: [ 366.430126][ T32] #0: ffffffff90027888 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 366.430179][ T32] #1: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 366.459394][ T32] locks held by kworker/u8:17/7560: 1, on CPU#0: [ 366.459409][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 366.459462][ T32] locks held by kworker/0:9/7561: 3, last CPU#0: [ 366.459475][ T32] #0: ffff888034424940 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 366.459532][ T32] #1: ffffc90003477d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 366.459601][ T32] #2: ffff8880375fa0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 366.459655][ T32] locks held by syz-executor/7563: 2, last CPU#1: [ 366.459667][ T32] #0: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 366.459713][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 366.459764][ T32] [ 366.459769][ T32] ============================================= [ 366.459769][ T32] [ 366.459777][ T32] NMI backtrace for cpu 1 [ 366.459791][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 366.459815][ T32] Tainted: [L]=SOFTLOCKUP [ 366.459822][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 366.459832][ T32] Call Trace: [ 366.459838][ T32] [ 366.459846][ T32] dump_stack_lvl+0x100/0x190 [ 366.459874][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 366.459903][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 366.459925][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 366.459954][ T32] sys_info+0x141/0x190 [ 366.459975][ T32] watchdog+0xcb1/0x1030 [ 366.460002][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 366.460029][ T32] ? __pfx_watchdog+0x10/0x10 [ 366.460052][ T32] ? __kthread_parkme+0x18f/0x230 [ 366.460082][ T32] ? kthread+0x13a/0x450 [ 366.460105][ T32] ? __pfx_watchdog+0x10/0x10 [ 366.460125][ T32] kthread+0x373/0x450 [ 366.460148][ T32] ? __pfx_kthread+0x10/0x10 [ 366.460174][ T32] ret_from_fork+0x730/0xd60 [ 366.460198][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 366.460217][ T32] ? __switch_to+0x800/0x10f0 [ 366.460242][ T32] ? __pfx_kthread+0x10/0x10 [ 366.460268][ T32] ret_from_fork_asm+0x1a/0x30 [ 366.460299][ T32] [ 366.478004][ T32] Sending NMI from CPU 1 to CPUs 0: [ 366.478035][ C0] NMI backtrace for cpu 0 [ 366.478050][ C0] CPU: 0 UID: 0 PID: 3226 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 366.478071][ C0] Tainted: [L]=SOFTLOCKUP [ 366.478077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 366.478086][ C0] Workqueue: bat_events batadv_dat_purge [ 366.478111][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 366.478132][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 cb 82 a0 f5 cc [ 366.478145][ C0] RSP: 0018:ffffc90000007508 EFLAGS: 00000246 [ 366.478157][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a96605a [ 366.478166][ C0] RDX: 0000000000000301 RSI: 0000000000000000 RDI: ffff88803432cb00 [ 366.478174][ C0] RBP: ffff88807ac90040 R08: 0000000000000007 R09: 0000000000000000 [ 366.478184][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807ac900c4 [ 366.478193][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 366.478202][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 366.478217][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.478227][ C0] CR2: 0000200000019000 CR3: 000000007d0b5000 CR4: 00000000003526f0 [ 366.478236][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.478244][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 366.478254][ C0] Call Trace: [ 366.478259][ C0] [ 366.478264][ C0] ip6t_do_table+0x5fa/0x1c90 [ 366.478286][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 366.478307][ C0] ? lock_acquire+0x1d1/0x380 [ 366.478323][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 366.478340][ C0] ? find_held_lock+0x2b/0x80 [ 366.478360][ C0] ? net_generic+0xea/0x2a0 [ 366.478375][ C0] ? lock_acquire+0x1d1/0x380 [ 366.478390][ C0] ? br_nf_pre_routing_ipv6+0x441/0x8b0 [ 366.478407][ C0] nf_hook_slow+0xbf/0x220 [ 366.478426][ C0] br_nf_pre_routing_ipv6+0x51f/0x8b0 [ 366.478442][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 366.478457][ C0] ? net_generic+0x25/0x2a0 [ 366.478470][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 366.478487][ C0] ? net_generic+0xea/0x2a0 [ 366.478502][ C0] br_nf_pre_routing+0x90f/0x1560 [ 366.478518][ C0] br_handle_frame+0xd59/0x1670 [ 366.478533][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 366.478549][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 366.478565][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 366.478584][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 366.478607][ C0] ? kmem_cache_free+0x127/0x6c0 [ 366.478621][ C0] ? skb_release_data+0x65e/0x860 [ 366.478640][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 366.478659][ C0] ? kfree_skbmem+0x19f/0x210 [ 366.478673][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 366.478693][ C0] ? ip6_mc_input+0x51a/0x1050 [ 366.478715][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 366.478737][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 366.478755][ C0] ? process_backlog+0x437/0x1600 [ 366.478770][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 366.478788][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 366.478806][ C0] ? lock_acquire+0x1d1/0x380 [ 366.478836][ C0] ? process_backlog+0x437/0x1600 [ 366.478853][ C0] ? process_backlog+0x437/0x1600 [ 366.478869][ C0] __netif_receive_skb+0x1f/0x120 [ 366.478887][ C0] process_backlog+0x487/0x1600 [ 366.478905][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 366.478923][ C0] net_rx_action+0xa40/0xf20 [ 366.478942][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 366.478959][ C0] ? mark_held_locks+0x40/0x70 [ 366.478975][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 366.478990][ C0] ? tmigr_handle_remote+0x132/0x380 [ 366.479009][ C0] ? run_timer_base+0x121/0x190 [ 366.479026][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 366.479044][ C0] handle_softirqs+0x1e6/0x9d0 [ 366.479061][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 366.479076][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 366.479091][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 366.479105][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 366.479125][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 366.479142][ C0] do_softirq+0xaf/0xf0 [ 366.479156][ C0] [ 366.479161][ C0] [ 366.479166][ C0] __local_bh_enable_ip+0xff/0x120 [ 366.479181][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 366.479200][ C0] ? process_one_work+0x906/0x1b10 [ 366.479222][ C0] batadv_dat_purge+0x4b/0xa0 [ 366.479240][ C0] process_one_work+0xac7/0x1b10 [ 366.479264][ C0] ? __pfx_process_one_work+0x10/0x10 [ 366.479286][ C0] ? lock_acquire+0x1d1/0x380 [ 366.479304][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 366.479323][ C0] rescuer_thread+0x918/0x14e0 [ 366.479348][ C0] ? rescuer_thread+0x256/0x14e0 [ 366.479368][ C0] ? rescuer_thread+0x118/0x14e0 [ 366.479388][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 366.479408][ C0] ? __kthread_parkme+0x18f/0x230 [ 366.479426][ C0] ? kthread+0x13a/0x450 [ 366.479444][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 366.479464][ C0] kthread+0x373/0x450 [ 366.479482][ C0] ? __pfx_kthread+0x10/0x10 [ 366.479502][ C0] ret_from_fork+0x730/0xd60 [ 366.479518][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 366.479534][ C0] ? __switch_to+0x800/0x10f0 [ 366.479554][ C0] ? __pfx_kthread+0x10/0x10 [ 366.479577][ C0] ret_from_fork_asm+0x1a/0x30 [ 366.479598][ C0] [ 369.210274][ C1] net_ratelimit: 21065 callbacks suppressed [ 369.210295][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.210503][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.210675][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.210789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.211052][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 369.211430][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.211802][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.212185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:22:31:d3:0f:9b, vlan:0) [ 369.212256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.212542][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.913236][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 373.924950][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 373.935637][ T32] Tainted: [L]=SOFTLOCKUP [ 373.939958][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 373.950010][ T32] Call Trace: [ 373.953288][ T32] [ 373.956213][ T32] dump_stack_lvl+0x100/0x190 [ 373.960903][ T32] vpanic+0x553/0x970 [ 373.964882][ T32] ? __pfx_vpanic+0x10/0x10 [ 373.969387][ T32] panic+0xd1/0xe0 [ 373.973104][ T32] ? __pfx_panic+0x10/0x10 [ 373.977541][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 373.983699][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 373.989853][ T32] ? watchdog.cold+0x1ec/0x234 [ 373.994621][ T32] watchdog.cold+0x1fd/0x234 [ 373.999213][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 374.005026][ T32] ? __pfx_watchdog+0x10/0x10 [ 374.009705][ T32] ? __kthread_parkme+0x18f/0x230 [ 374.014734][ T32] ? kthread+0x13a/0x450 [ 374.018999][ T32] ? __pfx_watchdog+0x10/0x10 [ 374.023674][ T32] kthread+0x373/0x450 [ 374.027753][ T32] ? __pfx_kthread+0x10/0x10 [ 374.032350][ T32] ret_from_fork+0x730/0xd60 [ 374.036943][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 374.042059][ T32] ? __switch_to+0x800/0x10f0 [ 374.046746][ T32] ? __pfx_kthread+0x10/0x10 [ 374.051358][ T32] ret_from_fork_asm+0x1a/0x30 [ 374.056132][ T32] [ 374.059334][ T32] Kernel Offset: disabled [ 374.063635][ T32] Rebooting in 86400 seconds..